Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- OTL logfile created on: 2017-03-29 14:47:04 - Run 1
- OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\P18plus\Downloads
- 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
- Internet Explorer (Version = 9.11.9600.17501)
- Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
- 3,89 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 62,01% Memory free
- 7,77 Gb Paging File | 6,23 Gb Available in Paging File | 80,11% Paging File free
- Paging file location(s): ?:\pagefile.sys [binary data]
- %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
- Drive C: | 205,08 Gb Total Space | 176,04 Gb Free Space | 85,84% Space Free | Partition Type: NTFS
- Drive D: | 117,19 Gb Total Space | 105,91 Gb Free Space | 90,38% Space Free | Partition Type: NTFS
- Drive E: | 143,40 Gb Total Space | 143,30 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
- Drive F: | 557,22 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
- Drive G: | 28,64 Gb Total Space | 19,62 Gb Free Space | 68,50% Space Free | Partition Type: NTFS
- Computer Name: P18PLUS-PC | User Name: P18plus | Logged in as Administrator.
- Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
- Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
- [color=#E56717]========== Processes (SafeList) ==========[/color]
- PRC - [2017-03-29 14:35:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\P18plus\Downloads\OTL.exe
- PRC - [2017-03-28 21:16:16 | 004,089,296 | ---- | M] () -- C:\Users\P18plus\Downloads\adw.exe
- PRC - [2017-03-13 16:41:22 | 001,280,720 | ---- | M] (Mirillis Ltd.) -- C:\Program Files (x86)\Mirillis\Action!\Action_x86.bin
- PRC - [2017-01-04 15:28:38 | 064,290,304 | ---- | M] (Hammer & Chisel, Inc.) -- C:\Users\P18plus\AppData\Local\Discord\app-0.0.297\Discord.exe
- [color=#E56717]========== Modules (No Company Name) ==========[/color]
- MOD - [2017-03-29 13:46:17 | 000,148,992 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Local\Temp\7F6C.tmp.node
- MOD - [2017-03-28 21:16:16 | 004,089,296 | ---- | M] () -- C:\Users\P18plus\Downloads\adw.exe
- MOD - [2017-03-26 19:35:34 | 002,665,976 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
- MOD - [2017-03-26 19:34:23 | 003,750,400 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
- MOD - [2017-03-26 19:34:23 | 002,658,304 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
- MOD - [2017-03-26 19:34:23 | 001,082,880 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
- MOD - [2017-03-26 19:34:23 | 000,914,432 | ---- | M] () -- \\?\C:\Users\P18plus\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
- MOD - [2017-01-04 15:28:38 | 001,958,912 | ---- | M] () -- C:\Users\P18plus\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
- MOD - [2016-10-31 21:43:12 | 000,564,736 | ---- | M] () -- C:\Users\P18plus\AppData\Local\MEGAsync\ShellExtX32.dll
- [color=#E56717]========== Services (SafeList) ==========[/color]
- SRV:[b]64bit:[/b] - [2017-03-26 18:36:07 | 000,314,696 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
- SRV:[b]64bit:[/b] - [2015-01-12 06:24:09 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
- SRV:[b]64bit:[/b] - [2014-11-22 04:35:29 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
- SRV:[b]64bit:[/b] - [2013-11-29 09:23:38 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
- SRV:[b]64bit:[/b] - [2012-04-20 14:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
- SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
- SRV - [2017-03-17 08:09:29 | 000,172,488 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
- SRV - [2015-01-12 06:31:41 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
- SRV - [2014-11-03 07:58:36 | 000,103,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
- SRV - [2014-10-25 12:59:46 | 000,016,064 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Mirillis\Action!\action_svc.exe -- (ACTION_SVC)
- SRV - [2014-02-17 10:47:48 | 001,579,880 | ---- | M] (IVT Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe -- (BlueSoleilCS)
- SRV - [2013-12-16 15:45:50 | 000,145,656 | ---- | M] (IVT Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe -- (BsHelpCS)
- SRV - [2013-11-15 11:10:38 | 000,031,864 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe -- (ASNB4LDRSvc)
- SRV - [2013-09-09 10:04:42 | 000,111,416 | ---- | M] (ASUSTek Computer Inc.) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
- SRV - [2013-02-21 13:01:58 | 000,277,464 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
- SRV - [2012-07-17 14:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
- SRV - [2012-07-17 14:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
- SRV - [2012-06-25 10:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
- SRV - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
- SRV - [2011-11-21 14:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
- [color=#E56717]========== Driver Services (SafeList) ==========[/color]
- DRV:[b]64bit:[/b] - [2017-03-26 18:36:59 | 002,502,288 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
- DRV:[b]64bit:[/b] - [2017-03-26 18:35:46 | 000,539,336 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\m76usb.sys -- (m76usb)
- DRV:[b]64bit:[/b] - [2017-03-26 18:34:21 | 000,181,304 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
- DRV:[b]64bit:[/b] - [2015-01-12 06:28:02 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
- DRV:[b]64bit:[/b] - [2015-01-12 06:22:49 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
- DRV:[b]64bit:[/b] - [2015-01-12 06:22:49 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
- DRV:[b]64bit:[/b] - [2015-01-12 06:15:37 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
- DRV:[b]64bit:[/b] - [2015-01-12 06:15:37 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
- DRV:[b]64bit:[/b] - [2015-01-12 06:13:13 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
- DRV:[b]64bit:[/b] - [2015-01-12 06:13:13 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
- DRV:[b]64bit:[/b] - [2014-01-20 10:19:28 | 000,051,936 | ---- | M] (Ralink Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtUrbBtFlt.sys -- (btUrbFilterDrv)
- DRV:[b]64bit:[/b] - [2013-04-26 18:18:00 | 000,054,064 | ---- | M] (Ralink Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BtL2caScoIf.sys -- (BthL2caScoIfSrv)
- DRV:[b]64bit:[/b] - [2013-02-21 13:01:44 | 005,358,464 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
- DRV:[b]64bit:[/b] - [2013-01-28 17:02:02 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
- DRV:[b]64bit:[/b] - [2012-12-04 06:21:12 | 000,791,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
- DRV:[b]64bit:[/b] - [2012-12-04 06:21:12 | 000,020,024 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
- DRV:[b]64bit:[/b] - [2012-12-04 06:21:10 | 000,358,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
- DRV:[b]64bit:[/b] - [2012-06-15 11:22:02 | 000,023,136 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BtAudioBus.sys -- (BtAudioBusSrv)
- DRV:[b]64bit:[/b] - [2012-06-12 22:00:48 | 000,726,160 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
- DRV:[b]64bit:[/b] - [2012-02-01 18:06:18 | 000,292,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsBaStor.sys -- (RSBASTOR)
- DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
- DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
- DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
- DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
- DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
- DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
- DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
- DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
- DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
- DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
- DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
- DRV - [2017-03-26 17:50:31 | 000,027,552 | ---- | M] (REALiX(tm)) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
- DRV - [2013-07-02 16:45:52 | 000,019,768 | ---- | M] (ASUSTek Computer Inc.) [Kernel | System | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
- DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
- DRV - [2009-07-02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
- [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
- [color=#E56717]========== Internet Explorer ==========[/color]
- IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
- IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
- IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
- IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
- IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
- IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
- IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C8 1E 2C 5D 51 A6 D2 01 [binary data]
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
- IE - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
- [color=#E56717]========== FireFox ==========[/color]
- FF - prefs.js..browser.search.countryCode: "PL"
- FF - prefs.js..browser.search.region: "PL"
- FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:52.0.1
- FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
- FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
- FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
- FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
- FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
- FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files (x86)\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
- FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll (Google Inc.)
- FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll (Google Inc.)
- FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 52.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
- FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 52.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2017-03-26 20:56:56 | 000,000,000 | ---D | M]
- [2017-03-26 19:15:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\P18plus\AppData\Roaming\mozilla\Extensions
- [2017-03-29 12:36:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\P18plus\AppData\Roaming\mozilla\Firefox\Profiles\ehdgjibn.default\extensions
- [2017-03-27 19:48:35 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\P18plus\AppData\Roaming\mozilla\Firefox\Profiles\ehdgjibn.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
- [2017-03-26 19:24:33 | 000,008,115 | ---- | M] () (No name found) -- C:\Users\P18plus\AppData\Roaming\mozilla\firefox\profiles\ehdgjibn.default\features\{13702438-db6d-4635-82a7-222325dc3de6}\deployment-checker@mozilla.org.xpi
- [2017-03-26 19:24:33 | 000,007,195 | ---- | M] () (No name found) -- C:\Users\P18plus\AppData\Roaming\mozilla\firefox\profiles\ehdgjibn.default\features\{13702438-db6d-4635-82a7-222325dc3de6}\e10srollout@mozilla.org.xpi
- [2017-03-26 19:15:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
- [2012-10-01 20:33:44 | 000,034,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
- [color=#E56717]========== Chrome ==========[/color]
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij\0.0.0.26_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.13.2_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpdmooaefpilleajjbcmbpnjiillmbak\12.202.10.29340_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\4.2.7_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhigneefebkcagnpnpbibganpmfgebnk\1.38.2_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg\5.14.0_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk\2.0.1.0_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojfphighcpfimfhblaigjckljcoeipga\1.1.3_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh\3.9.0_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.9.9.1_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
- CHR - Extension: No name found = C:\Users\P18plus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5717.116.0.4_0\
- O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
- O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
- O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
- O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
- O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
- O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
- O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
- O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
- O4 - HKLM..\Run: [] File not found
- O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.)
- O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
- O4 - HKLM..\Run: [BtTray] C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (IVT Corporation)
- O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
- O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
- O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
- O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
- O4 - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000..\Run: [BitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
- O4 - HKU\S-1-5-21-2923643836-3569258987-1987614516-1000..\Run: [GoogleChromeAutoLaunch_1EF49A2FB78BC4373E320F15679CC686] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
- O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
- O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
- O4 - Startup: C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk = C:\Users\P18plus\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
- O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
- O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
- O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
- O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
- O8:[b]64bit:[/b] - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
- O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\Office15\EXCEL.EXE/3000 File not found
- O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
- O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files (x86)\MICROS~1\Office15\ONBttnIE.dll/105 File not found
- O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
- O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\Office15\EXCEL.EXE/3000 File not found
- O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
- O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files (x86)\MICROS~1\Office15\ONBttnIE.dll/105 File not found
- O9:[b]64bit:[/b] - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
- O9:[b]64bit:[/b] - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
- O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
- O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
- O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
- O13[b]64bit:[/b] - gopher Prefix: missing
- O13 - gopher Prefix: missing
- O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
- O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9AB92D33-F6D0-456E-A3CF-E95ECC95CE1E}: DhcpNameServer = 192.168.1.1
- O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
- O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
- O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
- O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies)
- O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
- O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
- O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
- O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
- O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
- O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
- O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
- O32 - HKLM CDRom: AutoRun - 1
- O32 - AutoRun File - [2012-08-02 14:30:03 | 000,000,088 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
- O34 - HKLM BootExecute: (autocheck autochk *)
- O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
- O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
- O35 - HKLM\..comfile [open] -- "%1" %*
- O35 - HKLM\..exefile [open] -- "%1" %*
- O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
- O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
- O37 - HKLM\...com [@ = comfile] -- "%1" %*
- O37 - HKLM\...exe [@ = exefile] -- "%1" %*
- O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
- O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
- O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
- [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
- [2017-03-28 21:16:27 | 000,000,000 | ---D | C] -- C:\AdwCleaner
- [2017-03-27 20:42:19 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\gtk-2.0
- [2017-03-27 20:38:06 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\fontconfig
- [2017-03-27 20:38:05 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\gegl-0.2
- [2017-03-27 20:38:05 | 000,000,000 | ---D | C] -- C:\Users\P18plus\.gimp-2.8
- [2017-03-27 20:34:18 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2
- [2017-03-27 20:00:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownloadStudio
- [2017-03-27 20:00:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conceiva
- [2017-03-27 19:49:15 | 000,000,000 | ---D | C] -- C:\Downloads
- [2017-03-27 19:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
- [2017-03-27 19:48:34 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\BitComet
- [2017-03-27 19:48:30 | 000,000,000 | ---D | C] -- C:\Program Files\BitComet
- [2017-03-27 19:39:07 | 000,647,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
- [2017-03-27 19:38:50 | 003,229,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
- [2017-03-27 19:38:50 | 002,972,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
- [2017-03-27 19:38:50 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
- [2017-03-27 19:38:50 | 001,867,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
- [2017-03-27 19:38:50 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
- [2017-03-27 19:38:50 | 001,499,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
- [2017-03-27 19:38:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
- [2017-03-27 19:38:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
- [2017-03-27 19:38:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
- [2017-03-27 19:38:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
- [2017-03-27 19:38:14 | 005,573,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
- [2017-03-27 19:38:13 | 003,993,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
- [2017-03-27 19:38:13 | 003,938,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
- [2017-03-27 19:38:13 | 001,733,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
- [2017-03-27 19:38:12 | 001,461,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
- [2017-03-27 19:38:12 | 001,214,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
- [2017-03-27 19:38:12 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
- [2017-03-27 19:38:12 | 000,880,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
- [2017-03-27 19:38:12 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
- [2017-03-27 19:38:12 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
- [2017-03-27 19:38:12 | 000,535,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
- [2017-03-27 19:38:11 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
- [2017-03-27 19:38:11 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
- [2017-03-27 19:38:11 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
- [2017-03-27 19:38:11 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
- [2017-03-27 19:38:11 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
- [2017-03-27 19:38:11 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
- [2017-03-27 19:38:11 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxoci.dll
- [2017-03-27 19:38:10 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
- [2017-03-27 19:38:10 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
- [2017-03-27 19:38:10 | 000,299,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
- [2017-03-27 19:38:10 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
- [2017-03-27 19:38:10 | 000,251,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcryptprimitives.dll
- [2017-03-27 19:38:10 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
- [2017-03-27 19:38:10 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
- [2017-03-27 19:38:10 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
- [2017-03-27 19:38:10 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
- [2017-03-27 19:38:10 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
- [2017-03-27 19:38:10 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
- [2017-03-27 19:38:10 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxoci.dll
- [2017-03-27 19:38:10 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
- [2017-03-27 19:38:10 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
- [2017-03-27 19:38:10 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
- [2017-03-27 19:38:10 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
- [2017-03-27 19:38:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
- [2017-03-27 19:38:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
- [2017-03-27 19:38:10 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
- [2017-03-27 19:38:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
- [2017-03-27 19:38:10 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
- [2017-03-27 19:38:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
- [2017-03-27 19:38:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
- [2017-03-27 19:38:10 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
- [2017-03-27 19:38:10 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
- [2017-03-27 19:38:10 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
- [2017-03-27 19:38:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
- [2017-03-27 19:38:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
- [2017-03-27 19:38:09 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
- [2017-03-27 19:38:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
- [2017-03-27 19:38:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
- [2017-03-27 19:38:09 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
- [2017-03-27 19:38:09 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
- [2017-03-27 19:36:47 | 001,609,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
- [2017-03-27 19:36:47 | 001,239,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe
- [2017-03-27 19:36:47 | 000,646,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
- [2017-03-27 19:36:47 | 000,556,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
- [2017-03-27 19:36:47 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
- [2017-03-27 19:36:47 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\centel.dll
- [2017-03-27 19:36:47 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll
- [2017-03-27 19:36:47 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
- [2017-03-27 19:36:47 | 000,084,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
- [2017-03-27 19:36:46 | 001,285,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
- [2017-03-27 19:36:08 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jnwmon.dll
- [2017-03-27 19:36:05 | 000,396,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
- [2017-03-27 19:36:05 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
- [2017-03-27 19:25:17 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
- [2017-03-27 19:25:17 | 000,308,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
- [2017-03-27 19:25:17 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
- [2017-03-27 19:25:17 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
- [2017-03-27 19:25:16 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\els.dll
- [2017-03-27 19:25:16 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\els.dll
- [2017-03-27 19:25:13 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clfsw32.dll
- [2017-03-27 19:25:13 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clfsw32.dll
- [2017-03-27 19:14:33 | 001,424,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
- [2017-03-27 19:14:29 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
- [2017-03-27 19:14:29 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
- [2017-03-27 16:44:50 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-2-0.dll
- [2017-03-27 16:44:50 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-2-0.dll
- [2017-03-27 16:44:50 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-2-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-2-0.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-1.dll
- [2017-03-27 16:44:50 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-1.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-eventing-provider-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-eventing-provider-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l2-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l2-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-timezone-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-timezone-l1-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l2-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l2-1-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-2-0.dll
- [2017-03-27 16:44:50 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-2-0.dll
- [2017-03-27 16:44:49 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll
- [2017-03-27 16:44:49 | 000,020,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll
- [2017-03-27 16:44:49 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll
- [2017-03-27 16:44:49 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll
- [2017-03-27 16:44:49 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll
- [2017-03-27 16:44:49 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll
- [2017-03-27 16:44:48 | 000,064,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll
- [2017-03-27 16:44:48 | 000,062,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll
- [2017-03-27 16:44:48 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll
- [2017-03-27 16:44:47 | 000,961,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
- [2017-03-27 16:44:47 | 000,883,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
- [2017-03-27 15:14:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
- [2017-03-27 15:14:48 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Package Cache
- [2017-03-27 14:40:09 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
- [2017-03-27 14:16:19 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Discord
- [2017-03-26 21:52:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard
- [2017-03-26 21:52:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Visan
- [2017-03-26 21:52:00 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Photo Creations
- [2017-03-26 21:52:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP Photo Creations
- [2017-03-26 21:51:43 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\HpUpdate
- [2017-03-26 21:51:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
- [2017-03-26 21:51:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
- [2017-03-26 21:51:05 | 000,000,000 | ---D | C] -- C:\Program Files\HP
- [2017-03-26 21:51:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
- [2017-03-26 21:47:48 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\HP
- [2017-03-26 21:34:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
- [2017-03-26 21:31:24 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Opera Software
- [2017-03-26 21:31:24 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Opera Software
- [2017-03-26 21:00:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Toolkit
- [2017-03-26 20:57:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
- [2017-03-26 20:57:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
- [2017-03-26 20:57:07 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
- [2017-03-26 20:56:50 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
- [2017-03-26 20:56:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
- [2017-03-26 20:55:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
- [2017-03-26 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Microsoft Help
- [2017-03-26 20:55:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
- [2017-03-26 20:55:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
- [2017-03-26 20:54:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
- [2017-03-26 20:52:48 | 000,000,000 | RH-D | C] -- C:\MSOCache
- [2017-03-26 19:43:31 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Mega Limited
- [2017-03-26 19:43:28 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
- [2017-03-26 19:43:27 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\MEGAsync
- [2017-03-26 19:34:18 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
- [2017-03-26 19:34:17 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\discord
- [2017-03-26 19:34:02 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\SquirrelTemp
- [2017-03-26 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Mirillis
- [2017-03-26 19:25:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
- [2017-03-26 19:25:06 | 000,000,000 | ---D | C] -- C:\Users\P18plus\Documents\Action!
- [2017-03-26 19:25:02 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Mirillis
- [2017-03-26 19:24:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
- [2017-03-26 19:24:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mirillis
- [2017-03-26 19:19:23 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Bandicam Company
- [2017-03-26 19:19:17 | 000,000,000 | ---D | C] -- C:\Users\P18plus\Documents\Bandicam
- [2017-03-26 19:19:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
- [2017-03-26 19:19:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bandicam
- [2017-03-26 19:18:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BandiMPEG1
- [2017-03-26 19:15:49 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Mozilla
- [2017-03-26 19:15:47 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Mozilla
- [2017-03-26 19:15:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
- [2017-03-26 19:15:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
- [2017-03-26 18:58:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
- [2017-03-26 18:58:31 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Google
- [2017-03-26 18:53:25 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\IntelGraphicsProfiles
- [2017-03-26 18:47:42 | 000,524,800 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhsip64.dll
- [2017-03-26 18:47:42 | 000,519,680 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhsip32.dll
- [2017-03-26 18:47:42 | 000,241,664 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\IntelOpenCL64.dll
- [2017-03-26 18:47:42 | 000,216,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhcp64.dll
- [2017-03-26 18:47:42 | 000,196,096 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\IntelOpenCL32.dll
- [2017-03-26 18:47:42 | 000,116,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v2963.dll
- [2017-03-26 18:47:42 | 000,056,832 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\Intel_OpenCL_ICD64.dll
- [2017-03-26 18:47:42 | 000,056,320 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\Intel_OpenCL_ICD32.dll
- [2017-03-26 18:47:41 | 009,007,616 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxress.dll
- [2017-03-26 18:47:41 | 000,515,544 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.exe
- [2017-03-26 18:47:41 | 000,440,320 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrell.lrc
- [2017-03-26 18:47:41 | 000,439,808 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfra.lrc
- [2017-03-26 18:47:41 | 000,439,808 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxresn.lrc
- [2017-03-26 18:47:41 | 000,439,296 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrrus.lrc
- [2017-03-26 18:47:41 | 000,439,296 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrrom.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsky.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptg.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrplk.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnld.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrita.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrhrv.lrc
- [2017-03-26 18:47:41 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdeu.lrc
- [2017-03-26 18:47:41 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrhun.lrc
- [2017-03-26 18:47:41 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfin.lrc
- [2017-03-26 18:47:41 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcsy.lrc
- [2017-03-26 18:47:41 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtrk.lrc
- [2017-03-26 18:47:41 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsve.lrc
- [2017-03-26 18:47:41 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrslv.lrc
- [2017-03-26 18:47:41 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptb.lrc
- [2017-03-26 18:47:41 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnor.lrc
- [2017-03-26 18:47:41 | 000,437,248 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtha.lrc
- [2017-03-26 18:47:41 | 000,437,248 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdan.lrc
- [2017-03-26 18:47:41 | 000,435,712 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrheb.lrc
- [2017-03-26 18:47:41 | 000,432,128 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrjpn.lrc
- [2017-03-26 18:47:41 | 000,431,104 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrkor.lrc
- [2017-03-26 18:47:41 | 000,429,056 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcht.lrc
- [2017-03-26 18:47:41 | 000,428,544 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrchs.lrc
- [2017-03-26 18:47:41 | 000,410,624 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxTMM.dll
- [2017-03-26 18:47:41 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrenu.lrc
- [2017-03-26 18:47:41 | 000,180,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhcp32.dll
- [2017-03-26 18:47:41 | 000,171,992 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxtray.exe
- [2017-03-26 18:47:41 | 000,064,000 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.dll
- [2017-03-26 18:47:40 | 027,665,408 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdrcl64.dll
- [2017-03-26 18:47:40 | 027,644,928 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdrcl32.dll
- [2017-03-26 18:47:40 | 012,615,680 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdumd64.dll
- [2017-03-26 18:47:40 | 011,049,472 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumd32.dll
- [2017-03-26 18:47:40 | 005,358,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys
- [2017-03-26 18:47:40 | 003,511,296 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcmjit64.dll
- [2017-03-26 18:47:40 | 003,121,152 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxcmjit32.dll
- [2017-03-26 18:47:40 | 000,640,512 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxcmrt32.dll
- [2017-03-26 18:47:40 | 000,518,656 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcmrt64.dll
- [2017-03-26 18:47:40 | 000,483,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfx11cmrt64.dll
- [2017-03-26 18:47:40 | 000,459,264 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfx11cmrt32.dll
- [2017-03-26 18:47:40 | 000,442,880 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdev.dll
- [2017-03-26 18:47:40 | 000,442,328 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpers.exe
- [2017-03-26 18:47:40 | 000,435,712 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrara.lrc
- [2017-03-26 18:47:40 | 000,384,512 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpph.dll
- [2017-03-26 18:47:40 | 000,330,752 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxdv32.dll
- [2017-03-26 18:47:40 | 000,254,936 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxext.exe
- [2017-03-26 18:47:40 | 000,142,336 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdo.dll
- [2017-03-26 18:47:40 | 000,126,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcpl.cpl
- [2017-03-26 18:47:40 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxexps.dll
- [2017-03-26 18:47:40 | 000,025,088 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxexps32.dll
- [2017-03-26 18:47:39 | 027,457,024 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdfcl64.dll
- [2017-03-26 18:47:39 | 021,850,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdfcl32.dll
- [2017-03-26 18:47:39 | 012,858,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igd10umd64.dll
- [2017-03-26 18:47:39 | 011,634,688 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\ig7icd64.dll
- [2017-03-26 18:47:39 | 011,175,424 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10umd32.dll
- [2017-03-26 18:47:39 | 008,622,592 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\ig7icd32.dll
- [2017-03-26 18:47:39 | 003,580,928 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdbcl64.dll
- [2017-03-26 18:47:39 | 002,898,944 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdbcl32.dll
- [2017-03-26 18:47:38 | 005,905,880 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\GfxUI.exe
- [2017-03-26 18:47:38 | 000,399,832 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hkcmd.exe
- [2017-03-26 18:47:38 | 000,342,528 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\drivers\IntcDAud.sys
- [2017-03-26 18:47:38 | 000,185,816 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\difx64.exe
- [2017-03-26 18:47:38 | 000,175,104 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\gfxSrvc.dll
- [2017-03-26 18:47:38 | 000,110,592 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hccutils.dll
- [2017-03-26 18:47:38 | 000,016,896 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\IntcDAuC.dll
- [2017-03-26 18:47:04 | 000,000,000 | ---D | C] -- C:\Users\P18plus\Documents\Bluetooth
- [2017-03-26 18:47:01 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\bluesoleil
- [2017-03-26 18:36:59 | 002,502,288 | ---- | C] (MediaTek Inc.) -- C:\Windows\SysNative\drivers\netr28x.sys
- [2017-03-26 18:36:59 | 000,334,992 | ---- | C] (Mediatek Inc.) -- C:\Windows\SysNative\RaCoInstx.dll
- [2017-03-26 18:36:48 | 000,056,832 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.DLL
- [2017-03-26 18:36:48 | 000,056,320 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.DLL
- [2017-03-26 18:36:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
- [2017-03-26 18:36:09 | 000,734,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\MetroIntelGenericUIFramework.dll
- [2017-03-26 18:36:08 | 000,373,248 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxOSP.dll
- [2017-03-26 18:36:08 | 000,277,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\IntelCpHeciSvc.exe
- [2017-03-26 18:36:08 | 000,250,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxLHM.dll
- [2017-03-26 18:36:08 | 000,182,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v3643.dll
- [2017-03-26 18:36:07 | 015,647,200 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumdim32.dll
- [2017-03-26 18:36:07 | 004,590,152 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdusc64.dll
- [2017-03-26 18:36:07 | 003,658,520 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdusc32.dll
- [2017-03-26 18:36:07 | 000,655,360 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxDH.dll
- [2017-03-26 18:36:07 | 000,501,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxEM.exe
- [2017-03-26 18:36:07 | 000,314,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCUIService.exe
- [2017-03-26 18:36:07 | 000,267,264 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxDI.dll
- [2017-03-26 18:36:07 | 000,243,528 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxHK.exe
- [2017-03-26 18:36:07 | 000,213,504 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxDTCM.dll
- [2017-03-26 18:36:05 | 017,327,160 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igd10iumd64.dll
- [2017-03-26 18:36:05 | 016,942,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10iumd32.dll
- [2017-03-26 18:36:05 | 004,342,088 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\Gfxv4_0.exe
- [2017-03-26 18:36:05 | 004,338,504 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\Gfxv2_0.exe
- [2017-03-26 18:36:05 | 000,929,608 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\GfxUIEx.exe
- [2017-03-26 18:36:05 | 000,543,560 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\DPTopologyApp.exe
- [2017-03-26 18:36:05 | 000,543,048 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\DPTopologyAppv2_0.exe
- [2017-03-26 18:36:04 | 000,392,520 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\CustomModeApp.exe
- [2017-03-26 18:36:04 | 000,392,008 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\CustomModeAppv2_0.exe
- [2017-03-26 18:35:46 | 000,539,336 | ---- | C] (Ralink Technology Corp.) -- C:\Windows\SysNative\drivers\m76usb.sys
- [2017-03-26 18:34:21 | 001,795,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01011.dll
- [2017-03-26 18:34:21 | 000,181,304 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\TeeDriverx64.sys
- [2017-03-26 18:18:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ralink Corporation
- [2017-03-26 17:53:51 | 000,000,000 | ---D | C] -- C:\ProgramData\ASUS
- [2017-03-26 17:50:43 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\EmieUserList
- [2017-03-26 17:50:43 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\EmieSiteList
- [2017-03-26 17:50:43 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\EmieBrowserModeList
- [2017-03-26 17:50:43 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
- [2017-03-26 17:50:42 | 000,000,000 | ---D | C] -- C:\Windows\IObit
- [2017-03-26 17:50:32 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
- [2017-03-26 17:50:31 | 000,027,552 | ---- | C] (REALiX(tm)) -- C:\Windows\SysWow64\drivers\HWiNFO64A.SYS
- [2017-03-26 17:50:31 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\IObit
- [2017-03-26 17:50:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
- [2017-03-26 17:50:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
- [2017-03-26 17:50:05 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Programs
- [2017-03-26 17:47:09 | 000,041,984 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\USB3Ver.dll
- [2017-03-26 17:47:04 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
- [2017-03-26 17:47:04 | 000,791,608 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3xhc.sys
- [2017-03-26 17:47:04 | 000,358,456 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hub.sys
- [2017-03-26 17:47:04 | 000,020,024 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hcs.sys
- [2017-03-26 17:45:46 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll
- [2017-03-26 17:45:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
- [2017-03-26 17:45:40 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
- [2017-03-26 17:45:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
- [2017-03-26 17:45:22 | 000,062,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys
- [2017-03-26 17:45:20 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\InstallShield
- [2017-03-26 17:42:46 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda
- [2017-03-26 17:42:31 | 009,888,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RtsBaStorIcon.dll
- [2017-03-26 17:42:31 | 000,292,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsBaStor.sys
- [2017-03-26 17:38:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
- [2017-03-26 17:38:38 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
- [2017-03-26 17:38:21 | 003,744,328 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
- [2017-03-26 17:38:21 | 002,794,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
- [2017-03-26 17:38:21 | 002,103,040 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll
- [2017-03-26 17:38:21 | 001,662,024 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
- [2017-03-26 17:38:21 | 001,361,336 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll
- [2017-03-26 17:38:21 | 001,003,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
- [2017-03-26 17:38:21 | 000,946,736 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
- [2017-03-26 17:38:21 | 000,836,544 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll
- [2017-03-26 17:38:21 | 000,613,448 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
- [2017-03-26 17:38:21 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
- [2017-03-26 17:38:21 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
- [2017-03-26 17:38:21 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
- [2017-03-26 17:38:21 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
- [2017-03-26 17:38:21 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
- [2017-03-26 17:38:21 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
- [2017-03-26 17:38:21 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
- [2017-03-26 17:38:21 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
- [2017-03-26 17:38:21 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
- [2017-03-26 17:38:21 | 000,148,416 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll
- [2017-03-26 17:38:21 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
- [2017-03-26 17:38:21 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
- [2017-03-26 17:38:21 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
- [2017-03-26 17:38:21 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
- [2017-03-26 17:38:21 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
- [2017-03-26 17:38:21 | 000,065,944 | ---- | C] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll
- [2017-03-26 17:38:21 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
- [2017-03-26 17:38:20 | 026,987,520 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
- [2017-03-26 17:38:20 | 014,035,712 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek64.dll
- [2017-03-26 17:38:20 | 009,123,608 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnA64.dll
- [2017-03-26 17:38:20 | 007,164,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
- [2017-03-26 17:38:20 | 002,032,896 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
- [2017-03-26 17:38:20 | 001,903,872 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll
- [2017-03-26 17:38:20 | 001,284,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
- [2017-03-26 17:38:20 | 000,434,960 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
- [2017-03-26 17:38:20 | 000,394,616 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
- [2017-03-26 17:38:20 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
- [2017-03-26 17:38:20 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
- [2017-03-26 17:38:20 | 000,142,920 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
- [2017-03-26 17:38:20 | 000,141,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
- [2017-03-26 17:38:20 | 000,124,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
- [2017-03-26 17:38:20 | 000,075,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
- [2017-03-26 17:38:19 | 002,735,648 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
- [2017-03-26 17:38:19 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
- [2017-03-26 17:38:19 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
- [2017-03-26 17:38:19 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
- [2017-03-26 17:38:19 | 000,920,320 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll
- [2017-03-26 17:38:19 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
- [2017-03-26 17:38:19 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
- [2017-03-26 17:38:19 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
- [2017-03-26 17:38:19 | 000,612,728 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll
- [2017-03-26 17:38:19 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
- [2017-03-26 17:38:19 | 000,501,192 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
- [2017-03-26 17:38:19 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
- [2017-03-26 17:38:19 | 000,487,368 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
- [2017-03-26 17:38:19 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
- [2017-03-26 17:38:19 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
- [2017-03-26 17:38:19 | 000,415,688 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
- [2017-03-26 17:38:19 | 000,395,208 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
- [2017-03-26 17:38:19 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
- [2017-03-26 17:38:19 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
- [2017-03-26 17:38:19 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
- [2017-03-26 17:38:19 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
- [2017-03-26 17:38:19 | 000,110,592 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
- [2017-03-26 17:38:18 | 000,208,072 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
- [2017-03-26 17:38:18 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
- [2017-03-26 17:38:15 | 002,079,816 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
- [2017-03-26 17:38:15 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
- [2017-03-26 17:38:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
- [2017-03-26 17:37:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Ralink Driver
- [2017-03-26 17:35:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
- [2017-03-26 17:35:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASUS
- [2017-03-26 17:33:26 | 000,726,160 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
- [2017-03-26 17:33:26 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
- [2017-03-26 17:33:26 | 000,074,344 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
- [2017-03-26 17:33:22 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
- [2017-03-26 17:33:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
- [2017-03-26 17:31:13 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
- [2017-03-26 17:31:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
- [2017-03-26 17:30:56 | 000,000,000 | ---D | C] -- C:\Intel
- [2017-03-26 17:30:52 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\WinRAR
- [2017-03-26 17:30:43 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
- [2017-03-26 17:30:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
- [2017-03-26 17:30:42 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
- [2017-03-26 17:07:35 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Adobe
- [2017-03-26 17:07:34 | 000,000,000 | R--D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
- [2017-03-26 17:07:34 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Searches
- [2017-03-26 17:07:34 | 000,000,000 | R--D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
- [2017-03-26 17:07:26 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Identities
- [2017-03-26 17:07:24 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Contacts
- [2017-03-26 17:07:20 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\VirtualStore
- [2017-03-26 17:06:56 | 000,000,000 | --SD | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Videos
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Saved Games
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Pictures
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Music
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Links
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Favorites
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Downloads
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Documents
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\Desktop
- [2017-03-26 17:06:56 | 000,000,000 | R--D | C] -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Ustawienia lokalne
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\Temporary Internet Files
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Szablony
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\SendTo
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Recent
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\PrintHood
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\NetHood
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Documents\Moje wideo
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Documents\Moje obrazy
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Moje dokumenty
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Documents\Moja muzyka
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Menu Start
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\Historia
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Dane aplikacji
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\AppData\Local\Dane aplikacji
- [2017-03-26 17:06:56 | 000,000,000 | -HSD | C] -- C:\Users\P18plus\Cookies
- [2017-03-26 17:06:56 | 000,000,000 | -H-D | C] -- C:\Users\P18plus\AppData
- [2017-03-26 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Temp
- [2017-03-26 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Local\Microsoft
- [2017-03-26 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\P18plus\AppData\Roaming\Media Center Programs
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
- [2017-03-26 17:06:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
- [2017-03-26 17:02:46 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
- [2017-03-26 16:59:17 | 000,000,000 | ---D | C] -- C:\Windows\CSC
- [2017-03-26 16:58:38 | 000,000,000 | -HSD | C] -- C:\System Volume Information
- [1 C:\Users\P18plus\*.tmp files -> C:\Users\P18plus\*.tmp -> ]
- [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
- [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
- [2017-03-29 13:11:14 | 000,801,628 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
- [2017-03-29 13:11:14 | 000,674,650 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
- [2017-03-29 13:11:14 | 000,175,966 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
- [2017-03-29 13:11:14 | 000,141,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
- [2017-03-29 13:11:14 | 000,006,204 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
- [2017-03-29 13:06:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
- [2017-03-29 13:06:39 | 3131,207,680 | -HS- | M] () -- C:\hiberfil.sys
- [2017-03-29 13:04:19 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
- [2017-03-29 13:04:15 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
- [2017-03-29 13:02:07 | 000,000,296 | ---- | M] () -- C:\Windows\tasks\Driver Booster Scheduler.job
- [2017-03-29 13:01:22 | 000,000,252 | ---- | M] () -- C:\Windows\tasks\Driver Booster SkipUAC (P18plus).job
- [2017-03-29 12:56:44 | 000,004,268 | ---- | M] () -- C:\Windows\SysWow64\LOCALSERVICE.INI
- [2017-03-29 12:56:43 | 000,000,966 | ---- | M] () -- C:\Windows\SysWow64\bscs.ini
- [2017-03-29 12:56:42 | 000,001,964 | ---- | M] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk
- [2017-03-29 12:56:39 | 000,000,043 | ---- | M] () -- C:\Windows\SysWow64\LOCALDEVICE.INI
- [2017-03-28 15:52:25 | 000,006,471 | ---- | M] () -- C:\Users\P18plus\AppData\Local\recently-used.xbel
- [2017-03-28 14:23:42 | 385,938,045 | ---- | M] () -- C:\Windows\MEMORY.DMP
- [2017-03-27 20:01:26 | 000,000,033 | ---- | M] () -- C:\Windows\DownloadStudioScheduleMonitor.INI
- [2017-03-27 19:48:35 | 000,000,816 | ---- | M] () -- C:\Users\Public\Desktop\BitComet.lnk
- [2017-03-27 14:16:30 | 000,002,136 | ---- | M] () -- C:\Users\P18plus\Desktop\Discord.lnk
- [2017-03-26 21:52:00 | 000,002,005 | ---- | M] () -- C:\Users\Public\Desktop\HP Photo Creations.lnk
- [2017-03-26 21:51:30 | 000,002,216 | ---- | M] () -- C:\Users\Public\Desktop\HP Deskjet 1510 series.lnk
- [2017-03-26 21:51:30 | 000,001,163 | ---- | M] () -- C:\Users\Public\Desktop\Zakup materiałów eksploatacyjnych - HP Deskjet 1510 series.lnk
- [2017-03-26 21:48:30 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
- [2017-03-26 21:45:35 | 000,433,896 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
- [2017-03-26 21:31:21 | 000,001,259 | ---- | M] () -- C:\Users\P18plus\Desktop\Opera.lnk
- [2017-03-26 19:46:38 | 000,000,988 | ---- | M] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
- [2017-03-26 19:43:28 | 000,001,024 | ---- | M] () -- C:\Users\P18plus\Desktop\MEGAsync.lnk
- [2017-03-26 19:24:52 | 000,002,049 | ---- | M] () -- C:\Users\Public\Desktop\Action!.lnk
- [2017-03-26 19:19:09 | 000,001,002 | ---- | M] () -- C:\Users\Public\Desktop\Bandicam.lnk
- [2017-03-26 19:15:41 | 000,001,161 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
- [2017-03-26 19:04:09 | 000,002,275 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
- [2017-03-26 18:57:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
- [2017-03-26 18:51:16 | 000,015,784 | ---- | M] () -- C:\Windows\SysNative\results.xml
- [2017-03-26 18:47:02 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_BtL2caScoIf_01009.Wdf
- [2017-03-26 18:46:57 | 000,000,451 | ---- | M] () -- C:\Windows\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
- [2017-03-26 18:36:59 | 002,502,288 | ---- | M] (MediaTek Inc.) -- C:\Windows\SysNative\drivers\netr28x.sys
- [2017-03-26 18:36:59 | 000,334,992 | ---- | M] (Mediatek Inc.) -- C:\Windows\SysNative\RaCoInstx.dll
- [2017-03-26 18:36:59 | 000,016,103 | ---- | M] () -- C:\Windows\SysNative\RaCoInst.dat
- [2017-03-26 18:36:11 | 000,187,348 | ---- | M] () -- C:\Windows\SysNative\resTHA.cui
- [2017-03-26 18:36:11 | 000,180,164 | ---- | M] () -- C:\Windows\SysNative\resELL.cui
- [2017-03-26 18:36:11 | 000,176,020 | ---- | M] () -- C:\Windows\SysNative\resRUS.cui
- [2017-03-26 18:36:11 | 000,161,876 | ---- | M] () -- C:\Windows\SysNative\resARA.cui
- [2017-03-26 18:36:11 | 000,161,332 | ---- | M] () -- C:\Windows\SysNative\resHEB.cui
- [2017-03-26 18:36:11 | 000,161,268 | ---- | M] () -- C:\Windows\SysNative\resJPN.cui
- [2017-03-26 18:36:11 | 000,156,692 | ---- | M] () -- C:\Windows\SysNative\resFRA.cui
- [2017-03-26 18:36:11 | 000,156,676 | ---- | M] () -- C:\Windows\SysNative\resHUN.cui
- [2017-03-26 18:36:11 | 000,154,980 | ---- | M] () -- C:\Windows\SysNative\resKOR.cui
- [2017-03-26 18:36:11 | 000,154,884 | ---- | M] () -- C:\Windows\SysNative\resITA.cui
- [2017-03-26 18:36:11 | 000,154,884 | ---- | M] () -- C:\Windows\SysNative\resDEU.cui
- [2017-03-26 18:36:11 | 000,154,724 | ---- | M] () -- C:\Windows\SysNative\resROM.cui
- [2017-03-26 18:36:11 | 000,154,612 | ---- | M] () -- C:\Windows\SysNative\resESN.cui
- [2017-03-26 18:36:11 | 000,154,180 | ---- | M] () -- C:\Windows\SysNative\resPLK.cui
- [2017-03-26 18:36:11 | 000,154,036 | ---- | M] () -- C:\Windows\SysNative\resSKY.cui
- [2017-03-26 18:36:11 | 000,153,844 | ---- | M] () -- C:\Windows\SysNative\resNLD.cui
- [2017-03-26 18:36:11 | 000,153,284 | ---- | M] () -- C:\Windows\SysNative\resPTB.cui
- [2017-03-26 18:36:11 | 000,153,140 | ---- | M] () -- C:\Windows\SysNative\resTRK.cui
- [2017-03-26 18:36:11 | 000,153,108 | ---- | M] () -- C:\Windows\SysNative\resCSY.cui
- [2017-03-26 18:36:11 | 000,152,980 | ---- | M] () -- C:\Windows\SysNative\resPTG.cui
- [2017-03-26 18:36:11 | 000,152,564 | ---- | M] () -- C:\Windows\SysNative\resFIN.cui
- [2017-03-26 18:36:11 | 000,152,132 | ---- | M] () -- C:\Windows\SysNative\resHRV.cui
- [2017-03-26 18:36:11 | 000,151,684 | ---- | M] () -- C:\Windows\SysNative\resSVE.cui
- [2017-03-26 18:36:11 | 000,151,508 | ---- | M] () -- C:\Windows\SysNative\resSLV.cui
- [2017-03-26 18:36:11 | 000,150,580 | ---- | M] () -- C:\Windows\SysNative\resNOR.cui
- [2017-03-26 18:36:11 | 000,150,068 | ---- | M] () -- C:\Windows\SysNative\resDAN.cui
- [2017-03-26 18:36:11 | 000,148,756 | ---- | M] () -- C:\Windows\SysNative\resENU.cui
- [2017-03-26 18:36:11 | 000,146,980 | ---- | M] () -- C:\Windows\SysNative\resCHT.cui
- [2017-03-26 18:36:11 | 000,146,148 | ---- | M] () -- C:\Windows\SysNative\resCHS.cui
- [2017-03-26 18:36:09 | 000,734,720 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\MetroIntelGenericUIFramework.dll
- [2017-03-26 18:36:08 | 000,373,248 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxOSP.dll
- [2017-03-26 18:36:08 | 000,250,368 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxLHM.dll
- [2017-03-26 18:36:08 | 000,243,528 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxHK.exe
- [2017-03-26 18:36:08 | 000,182,784 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v3643.dll
- [2017-03-26 18:36:08 | 000,005,120 | ---- | M] ( ) -- C:\Windows\SysNative\igfxLHMLibv2_0.dll
- [2017-03-26 18:36:08 | 000,005,120 | ---- | M] ( ) -- C:\Windows\SysNative\igfxLHMLib.dll
- [2017-03-26 18:36:07 | 016,121,536 | ---- | M] () -- C:\Windows\SysNative\igdumdim64.dll
- [2017-03-26 18:36:07 | 015,647,200 | ---- | M] (Intel Corporation) -- C:\Windows\SysWow64\igdumdim32.dll
- [2017-03-26 18:36:07 | 004,590,152 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igdusc64.dll
- [2017-03-26 18:36:07 | 003,658,520 | ---- | M] (Intel Corporation) -- C:\Windows\SysWow64\igdusc32.dll
- [2017-03-26 18:36:07 | 000,655,360 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxDH.dll
- [2017-03-26 18:36:07 | 000,501,064 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxEM.exe
- [2017-03-26 18:36:07 | 000,314,696 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxCUIService.exe
- [2017-03-26 18:36:07 | 000,267,264 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxDI.dll
- [2017-03-26 18:36:07 | 000,213,504 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igfxDTCM.dll
- [2017-03-26 18:36:07 | 000,070,144 | ---- | M] () -- C:\Windows\SysNative\igfxCUIServicePS.dll
- [2017-03-26 18:36:07 | 000,069,632 | ---- | M] ( ) -- C:\Windows\SysNative\igfxDHLibv2_0.dll
- [2017-03-26 18:36:07 | 000,057,856 | ---- | M] ( ) -- C:\Windows\SysNative\igfxDHLib.dll
- [2017-03-26 18:36:07 | 000,010,752 | ---- | M] ( ) -- C:\Windows\SysNative\igfxDILib.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | M] ( ) -- C:\Windows\SysNative\igfxEMLibv2_0.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | M] ( ) -- C:\Windows\SysNative\igfxEMLib.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | M] ( ) -- C:\Windows\SysNative\igfxDILibv2_0.dll
- [2017-03-26 18:36:06 | 017,327,160 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\igd10iumd64.dll
- [2017-03-26 18:36:06 | 000,435,096 | ---- | M] () -- C:\Windows\SysNative\igdmd64.dll
- [2017-03-26 18:36:06 | 000,349,112 | ---- | M] () -- C:\Windows\SysWow64\igdmd32.dll
- [2017-03-26 18:36:06 | 000,160,256 | ---- | M] () -- C:\Windows\SysNative\igdail64.dll
- [2017-03-26 18:36:06 | 000,142,848 | ---- | M] () -- C:\Windows\SysWow64\igdail32.dll
- [2017-03-26 18:36:05 | 016,942,976 | ---- | M] (Intel Corporation) -- C:\Windows\SysWow64\igd10iumd32.dll
- [2017-03-26 18:36:05 | 004,342,088 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\Gfxv4_0.exe
- [2017-03-26 18:36:05 | 004,338,504 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\Gfxv2_0.exe
- [2017-03-26 18:36:05 | 000,929,608 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\GfxUIEx.exe
- [2017-03-26 18:36:05 | 000,543,560 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\DPTopologyApp.exe
- [2017-03-26 18:36:05 | 000,543,048 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\DPTopologyAppv2_0.exe
- [2017-03-26 18:36:05 | 000,094,208 | ---- | M] () -- C:\Windows\SysNative\IccLibDll_x64.dll
- [2017-03-26 18:36:05 | 000,000,895 | ---- | M] () -- C:\Windows\SysNative\Gfxv2_0.exe.config
- [2017-03-26 18:36:05 | 000,000,895 | ---- | M] () -- C:\Windows\SysNative\DPTopologyAppv2_0.exe.config
- [2017-03-26 18:36:05 | 000,000,889 | ---- | M] () -- C:\Windows\SysNative\Gfxv4_0.exe.config
- [2017-03-26 18:36:05 | 000,000,889 | ---- | M] () -- C:\Windows\SysNative\DPTopologyApp.exe.config
- [2017-03-26 18:36:04 | 000,392,520 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\CustomModeApp.exe
- [2017-03-26 18:36:04 | 000,392,008 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\CustomModeAppv2_0.exe
- [2017-03-26 18:36:04 | 000,000,895 | ---- | M] () -- C:\Windows\SysNative\CustomModeAppv2_0.exe.config
- [2017-03-26 18:36:04 | 000,000,889 | ---- | M] () -- C:\Windows\SysNative\CustomModeApp.exe.config
- [2017-03-26 18:35:46 | 000,539,336 | ---- | M] (Ralink Technology Corp.) -- C:\Windows\SysNative\drivers\m76usb.sys
- [2017-03-26 18:34:24 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
- [2017-03-26 18:34:21 | 001,795,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01011.dll
- [2017-03-26 18:34:21 | 000,181,304 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\TeeDriverx64.sys
- [2017-03-26 18:19:37 | 000,000,032 | ---- | M] () -- C:\Windows\0
- [2017-03-26 18:18:56 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\0
- [2017-03-26 17:51:30 | 000,002,178 | ---- | M] () -- C:\Users\Public\Desktop\Driver Booster 3.lnk
- [2017-03-26 17:50:31 | 000,027,552 | ---- | M] (REALiX(tm)) -- C:\Windows\SysWow64\drivers\HWiNFO64A.SYS
- [2017-03-26 17:47:24 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
- [2017-03-26 17:43:53 | 000,001,030 | ---- | M] () -- C:\Users\Public\Desktop\LifeFrame.lnk
- [2017-03-26 17:38:42 | 000,081,908 | ---- | M] () -- C:\Windows\SysNative\drivers\RTWAVES30.dat
- [2017-03-26 17:04:55 | 000,188,313 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
- [2017-03-26 17:04:55 | 000,188,313 | ---- | M] () -- C:\Windows\SysNative\license.rtf
- [2017-03-26 17:03:49 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
- [1 C:\Users\P18plus\*.tmp files -> C:\Users\P18plus\*.tmp -> ]
- [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
- [color=#E56717]========== Files Created - No Company Name ==========[/color]
- [2017-03-29 13:02:07 | 000,000,296 | ---- | C] () -- C:\Windows\tasks\Driver Booster Scheduler.job
- [2017-03-29 13:01:22 | 000,000,252 | ---- | C] () -- C:\Windows\tasks\Driver Booster SkipUAC (P18plus).job
- [2017-03-28 15:52:25 | 000,006,471 | ---- | C] () -- C:\Users\P18plus\AppData\Local\recently-used.xbel
- [2017-03-27 20:34:45 | 000,001,124 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
- [2017-03-27 20:01:26 | 000,000,033 | ---- | C] () -- C:\Windows\DownloadStudioScheduleMonitor.INI
- [2017-03-27 19:48:35 | 000,000,816 | ---- | C] () -- C:\Users\Public\Desktop\BitComet.lnk
- [2017-03-27 14:40:08 | 385,938,045 | ---- | C] () -- C:\Windows\MEMORY.DMP
- [2017-03-27 14:16:30 | 000,002,136 | ---- | C] () -- C:\Users\P18plus\Desktop\Discord.lnk
- [2017-03-26 21:52:42 | 000,001,964 | ---- | C] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk
- [2017-03-26 21:52:00 | 000,002,005 | ---- | C] () -- C:\Users\Public\Desktop\HP Photo Creations.lnk
- [2017-03-26 21:51:30 | 000,002,216 | ---- | C] () -- C:\Users\Public\Desktop\HP Deskjet 1510 series.lnk
- [2017-03-26 21:51:30 | 000,001,163 | ---- | C] () -- C:\Users\Public\Desktop\Zakup materiałów eksploatacyjnych - HP Deskjet 1510 series.lnk
- [2017-03-26 21:48:30 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
- [2017-03-26 21:31:23 | 000,001,259 | ---- | C] () -- C:\Users\P18plus\Desktop\Opera.lnk
- [2017-03-26 21:31:23 | 000,001,259 | ---- | C] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera.lnk
- [2017-03-26 19:46:38 | 000,000,988 | ---- | C] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
- [2017-03-26 19:43:28 | 000,001,024 | ---- | C] () -- C:\Users\P18plus\Desktop\MEGAsync.lnk
- [2017-03-26 19:24:52 | 000,002,049 | ---- | C] () -- C:\Users\Public\Desktop\Action!.lnk
- [2017-03-26 19:19:09 | 000,001,002 | ---- | C] () -- C:\Users\Public\Desktop\Bandicam.lnk
- [2017-03-26 19:15:41 | 000,001,173 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
- [2017-03-26 19:15:41 | 000,001,161 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
- [2017-03-26 19:04:09 | 000,002,287 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
- [2017-03-26 19:04:09 | 000,002,275 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
- [2017-03-26 18:57:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
- [2017-03-26 18:51:16 | 000,015,784 | ---- | C] () -- C:\Windows\SysNative\results.xml
- [2017-03-26 18:47:42 | 001,981,696 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.cpa
- [2017-03-26 18:47:42 | 000,598,384 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
- [2017-03-26 18:47:42 | 000,598,384 | ---- | C] () -- C:\Windows\SysNative\igvpkrng700.bin
- [2017-03-26 18:47:42 | 000,059,425 | ---- | C] () -- C:\Windows\SysNative\iglhxo64.vp
- [2017-03-26 18:47:42 | 000,059,398 | ---- | C] () -- C:\Windows\SysNative\iglhxg64.vp
- [2017-03-26 18:47:42 | 000,059,230 | ---- | C] () -- C:\Windows\SysNative\iglhxc64.vp
- [2017-03-26 18:47:42 | 000,059,104 | ---- | C] () -- C:\Windows\SysNative\iglhxc64_dev.vp
- [2017-03-26 18:47:42 | 000,058,796 | ---- | C] () -- C:\Windows\SysNative\iglhxg64_dev.vp
- [2017-03-26 18:47:42 | 000,058,109 | ---- | C] () -- C:\Windows\SysNative\iglhxo64_dev.vp
- [2017-03-26 18:47:42 | 000,017,110 | ---- | C] () -- C:\Windows\SysNative\iglhxs64.vp
- [2017-03-26 18:47:42 | 000,001,074 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.vp
- [2017-03-26 18:47:40 | 000,009,728 | ---- | C] ( ) -- C:\Windows\SysNative\IGFXDEVLib.dll
- [2017-03-26 18:47:39 | 000,754,652 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
- [2017-03-26 18:47:39 | 000,754,652 | ---- | C] () -- C:\Windows\SysNative\igcodeckrng700.bin
- [2017-03-26 18:47:39 | 000,080,384 | ---- | C] () -- C:\Windows\SysNative\igdde64.dll
- [2017-03-26 18:47:39 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
- [2017-03-26 18:47:38 | 000,223,664 | ---- | C] () -- C:\Windows\SysNative\Gfxres.th-TH.resources
- [2017-03-26 18:47:38 | 000,210,106 | ---- | C] () -- C:\Windows\SysNative\Gfxres.el-GR.resources
- [2017-03-26 18:47:38 | 000,194,245 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ru-RU.resources
- [2017-03-26 18:47:38 | 000,166,170 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ar-SA.resources
- [2017-03-26 18:47:38 | 000,163,421 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ja-JP.resources
- [2017-03-26 18:47:38 | 000,159,008 | ---- | C] () -- C:\Windows\SysNative\Gfxres.he-IL.resources
- [2017-03-26 18:47:38 | 000,149,682 | ---- | C] () -- C:\Windows\SysNative\Gfxres.it-IT.resources
- [2017-03-26 18:47:38 | 000,148,042 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ko-KR.resources
- [2017-03-26 18:47:38 | 000,147,393 | ---- | C] () -- C:\Windows\SysNative\Gfxres.de-DE.resources
- [2017-03-26 18:47:38 | 000,147,288 | ---- | C] () -- C:\Windows\SysNative\Gfxres.es-ES.resources
- [2017-03-26 18:47:38 | 000,146,004 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ro-RO.resources
- [2017-03-26 18:47:38 | 000,145,491 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fr-FR.resources
- [2017-03-26 18:47:38 | 000,144,645 | ---- | C] () -- C:\Windows\SysNative\Gfxres.tr-TR.resources
- [2017-03-26 18:47:38 | 000,144,260 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-BR.resources
- [2017-03-26 18:47:38 | 000,144,020 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nl-NL.resources
- [2017-03-26 18:47:38 | 000,143,932 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hu-HU.resources
- [2017-03-26 18:47:38 | 000,142,882 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sv-SE.resources
- [2017-03-26 18:47:38 | 000,142,877 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-PT.resources
- [2017-03-26 18:47:38 | 000,142,717 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pl-PL.resources
- [2017-03-26 18:47:38 | 000,142,289 | ---- | C] () -- C:\Windows\SysNative\Gfxres.cs-CZ.resources
- [2017-03-26 18:47:38 | 000,142,008 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fi-FI.resources
- [2017-03-26 18:47:38 | 000,141,838 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sk-SK.resources
- [2017-03-26 18:47:38 | 000,141,049 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hr-HR.resources
- [2017-03-26 18:47:38 | 000,137,889 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sl-SI.resources
- [2017-03-26 18:47:38 | 000,137,784 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nb-NO.resources
- [2017-03-26 18:47:38 | 000,137,141 | ---- | C] () -- C:\Windows\SysNative\Gfxres.da-DK.resources
- [2017-03-26 18:47:38 | 000,132,623 | ---- | C] () -- C:\Windows\SysNative\Gfxres.en-US.resources
- [2017-03-26 18:47:38 | 000,126,300 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-TW.resources
- [2017-03-26 18:47:38 | 000,124,650 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-CN.resources
- [2017-03-26 18:47:38 | 000,000,268 | ---- | C] () -- C:\Windows\SysNative\GfxUI.exe.config
- [2017-03-26 18:47:02 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_BtL2caScoIf_01009.Wdf
- [2017-03-26 18:47:00 | 000,004,268 | ---- | C] () -- C:\Windows\SysWow64\LOCALSERVICE.INI
- [2017-03-26 18:47:00 | 000,000,043 | ---- | C] () -- C:\Windows\SysWow64\LOCALDEVICE.INI
- [2017-03-26 18:46:57 | 000,000,451 | ---- | C] () -- C:\Windows\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
- [2017-03-26 18:36:59 | 000,016,103 | ---- | C] () -- C:\Windows\SysNative\RaCoInst.dat
- [2017-03-26 18:36:11 | 000,187,348 | ---- | C] () -- C:\Windows\SysNative\resTHA.cui
- [2017-03-26 18:36:11 | 000,180,164 | ---- | C] () -- C:\Windows\SysNative\resELL.cui
- [2017-03-26 18:36:11 | 000,176,020 | ---- | C] () -- C:\Windows\SysNative\resRUS.cui
- [2017-03-26 18:36:11 | 000,161,876 | ---- | C] () -- C:\Windows\SysNative\resARA.cui
- [2017-03-26 18:36:11 | 000,161,332 | ---- | C] () -- C:\Windows\SysNative\resHEB.cui
- [2017-03-26 18:36:11 | 000,161,268 | ---- | C] () -- C:\Windows\SysNative\resJPN.cui
- [2017-03-26 18:36:11 | 000,156,692 | ---- | C] () -- C:\Windows\SysNative\resFRA.cui
- [2017-03-26 18:36:11 | 000,156,676 | ---- | C] () -- C:\Windows\SysNative\resHUN.cui
- [2017-03-26 18:36:11 | 000,154,980 | ---- | C] () -- C:\Windows\SysNative\resKOR.cui
- [2017-03-26 18:36:11 | 000,154,884 | ---- | C] () -- C:\Windows\SysNative\resITA.cui
- [2017-03-26 18:36:11 | 000,154,884 | ---- | C] () -- C:\Windows\SysNative\resDEU.cui
- [2017-03-26 18:36:11 | 000,154,724 | ---- | C] () -- C:\Windows\SysNative\resROM.cui
- [2017-03-26 18:36:11 | 000,154,612 | ---- | C] () -- C:\Windows\SysNative\resESN.cui
- [2017-03-26 18:36:11 | 000,154,180 | ---- | C] () -- C:\Windows\SysNative\resPLK.cui
- [2017-03-26 18:36:11 | 000,154,036 | ---- | C] () -- C:\Windows\SysNative\resSKY.cui
- [2017-03-26 18:36:11 | 000,153,844 | ---- | C] () -- C:\Windows\SysNative\resNLD.cui
- [2017-03-26 18:36:11 | 000,153,284 | ---- | C] () -- C:\Windows\SysNative\resPTB.cui
- [2017-03-26 18:36:11 | 000,153,140 | ---- | C] () -- C:\Windows\SysNative\resTRK.cui
- [2017-03-26 18:36:11 | 000,153,108 | ---- | C] () -- C:\Windows\SysNative\resCSY.cui
- [2017-03-26 18:36:11 | 000,152,980 | ---- | C] () -- C:\Windows\SysNative\resPTG.cui
- [2017-03-26 18:36:11 | 000,152,564 | ---- | C] () -- C:\Windows\SysNative\resFIN.cui
- [2017-03-26 18:36:11 | 000,152,132 | ---- | C] () -- C:\Windows\SysNative\resHRV.cui
- [2017-03-26 18:36:11 | 000,151,684 | ---- | C] () -- C:\Windows\SysNative\resSVE.cui
- [2017-03-26 18:36:11 | 000,151,508 | ---- | C] () -- C:\Windows\SysNative\resSLV.cui
- [2017-03-26 18:36:11 | 000,150,580 | ---- | C] () -- C:\Windows\SysNative\resNOR.cui
- [2017-03-26 18:36:11 | 000,150,068 | ---- | C] () -- C:\Windows\SysNative\resDAN.cui
- [2017-03-26 18:36:11 | 000,148,756 | ---- | C] () -- C:\Windows\SysNative\resENU.cui
- [2017-03-26 18:36:11 | 000,146,980 | ---- | C] () -- C:\Windows\SysNative\resCHT.cui
- [2017-03-26 18:36:11 | 000,146,148 | ---- | C] () -- C:\Windows\SysNative\resCHS.cui
- [2017-03-26 18:36:08 | 000,005,120 | ---- | C] ( ) -- C:\Windows\SysNative\igfxLHMLibv2_0.dll
- [2017-03-26 18:36:08 | 000,005,120 | ---- | C] ( ) -- C:\Windows\SysNative\igfxLHMLib.dll
- [2017-03-26 18:36:07 | 016,121,536 | ---- | C] () -- C:\Windows\SysNative\igdumdim64.dll
- [2017-03-26 18:36:07 | 000,070,144 | ---- | C] () -- C:\Windows\SysNative\igfxCUIServicePS.dll
- [2017-03-26 18:36:07 | 000,069,632 | ---- | C] ( ) -- C:\Windows\SysNative\igfxDHLibv2_0.dll
- [2017-03-26 18:36:07 | 000,057,856 | ---- | C] ( ) -- C:\Windows\SysNative\igfxDHLib.dll
- [2017-03-26 18:36:07 | 000,010,752 | ---- | C] ( ) -- C:\Windows\SysNative\igfxDILib.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | C] ( ) -- C:\Windows\SysNative\igfxEMLibv2_0.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | C] ( ) -- C:\Windows\SysNative\igfxEMLib.dll
- [2017-03-26 18:36:07 | 000,010,240 | ---- | C] ( ) -- C:\Windows\SysNative\igfxDILibv2_0.dll
- [2017-03-26 18:36:06 | 000,435,096 | ---- | C] () -- C:\Windows\SysNative\igdmd64.dll
- [2017-03-26 18:36:06 | 000,349,112 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll
- [2017-03-26 18:36:06 | 000,160,256 | ---- | C] () -- C:\Windows\SysNative\igdail64.dll
- [2017-03-26 18:36:06 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
- [2017-03-26 18:36:05 | 000,094,208 | ---- | C] () -- C:\Windows\SysNative\IccLibDll_x64.dll
- [2017-03-26 18:36:05 | 000,000,895 | ---- | C] () -- C:\Windows\SysNative\Gfxv2_0.exe.config
- [2017-03-26 18:36:05 | 000,000,895 | ---- | C] () -- C:\Windows\SysNative\DPTopologyAppv2_0.exe.config
- [2017-03-26 18:36:05 | 000,000,889 | ---- | C] () -- C:\Windows\SysNative\Gfxv4_0.exe.config
- [2017-03-26 18:36:05 | 000,000,889 | ---- | C] () -- C:\Windows\SysNative\DPTopologyApp.exe.config
- [2017-03-26 18:36:04 | 000,000,895 | ---- | C] () -- C:\Windows\SysNative\CustomModeAppv2_0.exe.config
- [2017-03-26 18:36:04 | 000,000,889 | ---- | C] () -- C:\Windows\SysNative\CustomModeApp.exe.config
- [2017-03-26 18:34:24 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
- [2017-03-26 18:19:31 | 000,002,235 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Miejsca Bluetooth.lnk
- [2017-03-26 18:18:56 | 000,000,032 | ---- | C] () -- C:\Windows\0
- [2017-03-26 18:18:56 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\0
- [2017-03-26 17:50:30 | 000,002,178 | ---- | C] () -- C:\Users\Public\Desktop\Driver Booster 3.lnk
- [2017-03-26 17:47:24 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
- [2017-03-26 17:43:52 | 000,001,030 | ---- | C] () -- C:\Users\Public\Desktop\LifeFrame.lnk
- [2017-03-26 17:38:42 | 000,081,908 | ---- | C] () -- C:\Windows\SysNative\drivers\RTWAVES30.dat
- [2017-03-26 17:38:23 | 000,000,024 | ---- | C] () -- C:\Windows\SysNative\drivers\rtkhdaud.dat
- [2017-03-26 17:38:20 | 000,583,849 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
- [2017-03-26 17:37:17 | 000,382,708 | ---- | C] () -- C:\Windows\SysWow64\drivers\FW7650.bin
- [2017-03-26 17:37:17 | 000,382,708 | ---- | C] () -- C:\Windows\SysNative\drivers\FW7650.bin
- [2017-03-26 17:07:35 | 000,001,437 | ---- | C] () -- C:\Users\P18plus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
- [2017-03-26 17:03:49 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
- [2017-03-26 16:58:49 | 000,433,896 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
- [2017-03-26 16:58:38 | 3131,207,680 | -HS- | C] () -- C:\hiberfil.sys
- [2017-01-26 09:26:44 | 000,071,176 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
- [2017-01-26 09:26:38 | 000,071,152 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll
- [color=#E56717]========== ZeroAccess Check ==========[/color]
- [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
- [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
- [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
- [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
- [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
- [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
- "" = C:\Windows\SysNative\shell32.dll -- [2016-08-29 17:31:19 | 014,183,424 | ---- | M] (Microsoft Corporation)
- "ThreadingModel" = Apartment
- [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
- "" = %SystemRoot%\system32\shell32.dll -- [2016-08-29 17:12:50 | 012,880,384 | ---- | M] (Microsoft Corporation)
- "ThreadingModel" = Apartment
- [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
- "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
- "ThreadingModel" = Free
- [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
- "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
- "ThreadingModel" = Free
- [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
- "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
- "ThreadingModel" = Both
- [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
- [color=#E56717]========== LOP Check ==========[/color]
- [2017-03-26 19:19:23 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\Bandicam Company
- [2017-03-29 13:01:43 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\BitComet
- [2017-03-28 15:01:17 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\discord
- [2017-03-26 17:50:42 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\IObit
- [2017-03-26 19:25:09 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\Mirillis
- [2017-03-26 21:31:24 | 000,000,000 | ---D | M] -- C:\Users\P18plus\AppData\Roaming\Opera Software
- [color=#E56717]========== Purity Check ==========[/color]
- < End of report >
- -----------------------------------------------------------------------------------------------------
- OTL Extras logfile created on: 2017-03-29 14:47:04 - Run 1
- OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\P18plus\Downloads
- 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
- Internet Explorer (Version = 9.11.9600.17501)
- Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
- 3,89 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 62,01% Memory free
- 7,77 Gb Paging File | 6,23 Gb Available in Paging File | 80,11% Paging File free
- Paging file location(s): ?:\pagefile.sys [binary data]
- %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
- Drive C: | 205,08 Gb Total Space | 176,04 Gb Free Space | 85,84% Space Free | Partition Type: NTFS
- Drive D: | 117,19 Gb Total Space | 105,91 Gb Free Space | 90,38% Space Free | Partition Type: NTFS
- Drive E: | 143,40 Gb Total Space | 143,30 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
- Drive F: | 557,22 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
- Drive G: | 28,64 Gb Total Space | 19,62 Gb Free Space | 68,50% Space Free | Partition Type: NTFS
- Computer Name: P18PLUS-PC | User Name: P18plus | Logged in as Administrator.
- Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
- Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
- [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
- [color=#E56717]========== File Associations ==========[/color]
- [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
- .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
- .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
- .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
- .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
- [HKEY_USERS\S-1-5-21-2923643836-3569258987-1987614516-1000\SOFTWARE\Classes\<extension>]
- .html [@ = ChromeHTML] -- Reg Error: Key error. File not found
- [color=#E56717]========== Shell Spawning ==========[/color]
- [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
- batfile [open] -- "%1" %*
- cmdfile [open] -- "%1" %*
- comfile [open] -- "%1" %*
- exefile [open] -- "%1" %*
- helpfile [open] -- Reg Error: Key error.
- htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
- InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
- InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
- piffile [open] -- "%1" %*
- regfile [merge] -- Reg Error: Key error.
- scrfile [config] -- "%1"
- scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
- scrfile [open] -- "%1" /S
- txtfile [edit] -- Reg Error: Key error.
- Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
- Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
- Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Folder [explore] -- Reg Error: Value error.
- Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
- batfile [open] -- "%1" %*
- cmdfile [open] -- "%1" %*
- comfile [open] -- "%1" %*
- cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
- exefile [open] -- "%1" %*
- helpfile [open] -- Reg Error: Key error.
- htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
- piffile [open] -- "%1" %*
- regfile [merge] -- Reg Error: Key error.
- scrfile [config] -- "%1"
- scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
- scrfile [open] -- "%1" /S
- txtfile [edit] -- Reg Error: Key error.
- Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
- Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
- Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Folder [explore] -- Reg Error: Value error.
- Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
- CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
- [color=#E56717]========== Security Center Settings ==========[/color]
- [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
- "cval" = 1
- [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
- [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
- "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
- "AntiVirusOverride" = 0
- "AntiSpywareOverride" = 0
- "FirewallOverride" = 0
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
- [color=#E56717]========== Firewall Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
- "EnableFirewall" = 1
- "DisableNotifications" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
- "EnableFirewall" = 1
- "DisableNotifications" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
- "EnableFirewall" = 1
- "DisableNotifications" = 0
- [color=#E56717]========== Authorized Applications List ==========[/color]
- [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
- "{5953C017-E5B4-434C-8DF4-CB8B4658EB02}" = lport=17407 | protocol=17 | dir=in | name=bitcomet 17407 udp |
- "{5A2009E7-0C71-429E-9A08-1CB502AC75D0}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office15\outlook.exe |
- "{8BFD5FA0-309F-4EA9-BE6F-FC8F0070914E}" = lport=5353 | protocol=17 | dir=in | app=c:\users\p18plus\appdata\local\programs\opera\44.0.2510.857\opera.exe |
- "{EDFAB5E0-2446-423E-8965-F00F30150F83}" = lport=17407 | protocol=6 | dir=in | name=bitcomet 17407 tcp |
- "{FE135A0B-3B91-4B88-8E28-5556D902A81D}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
- [color=#E56717]========== Vista Active Application Exception List ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
- "{0DAB7C57-3939-458E-B0E1-7E483D68A811}" = protocol=6 | dir=in | app=c:\program files (x86)\ralink corporation\ralink bluetooth stack\bluesoleilcs.exe |
- "{2486C2E9-6F8D-4FDA-8967-DA7C5487CE54}" = dir=in | app=c:\program files\hp\hp deskjet 1510 series\bin\hpnetworkcommunicatorcom.exe |
- "{2D0C00F2-24AF-44A1-9FD7-835F368158C6}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office15\lync.exe |
- "{67038A15-9027-46FB-B293-57EE1FEDE046}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office15\ucmapi.exe |
- "{6BAD23A0-4384-49E8-97A5-AB2953554B51}" = protocol=17 | dir=in | app=c:\program files (x86)\ralink corporation\ralink bluetooth stack\bluesoleilcs.exe |
- "{6C67F02A-810C-42E7-B365-37E1A99F3151}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
- "{898BD076-508B-40F5-BB5C-30DBB4E03940}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office15\ucmapi.exe |
- "{941F213D-8DF4-4230-9592-184030DF8BD2}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
- "{9EB3812D-29B8-4B51-9B5E-0BB1CFFC046D}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
- "{AB1C1B77-3BC1-45CE-B2DD-A7E3B540CCD3}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
- "{AF91A5A2-0E60-46B7-BE03-58BB1C909B2C}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office15\lync.exe |
- "{DDEDDBD9-038B-4EDB-9F21-F3081F432DDE}" = dir=in | app=c:\program files\hp\hp deskjet 1510 series\bin\usbsetup.exe |
- [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
- 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "{021AA127-6B6D-46EF-9697-5089FA686FB6}" = HP Deskjet 1510 series — podstawowe oprogramowanie urządzenia
- "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
- "{201842BD-6AB0-422A-9A01-DD1DA9BC03B9}" = Badanie mające na celu poprawę produktów HP Deskjet 1510 series
- "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
- "{90150000-002A-0000-1000-0000000FF1CE}" = Microsoft Office 64-bit Components 2013
- "{90150000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2013
- "{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
- "{9ACFC67B-786F-CC9B-847A-D0350FF6F5E0}" = Mediatek Bluetooth
- "{D3415F15-8C15-328C-933C-9075E60843CA}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK
- "{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
- "GIMP-2_is1" = GIMP 2.8.20
- "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
- "Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK" = Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
- "WinRAR archiver" = WinRAR 5.31 (64-bitowy)
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "{065AAC3B-F0A7-4D13-A40B-3133D319E4EB}" = HP Deskjet 1510 series Pomoc
- "{19EA33FB-B34E-40EA-8B8A-61743AEB795A}" = Wireless Console 3
- "{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
- "{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
- "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
- "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
- "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
- "{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}" = Ralink RT2860 Wireless LAN Card
- "{90150000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
- "{90150000-0015-0415-0000-0000000FF1CE}" = Microsoft Access MUI (Polish) 2013
- "{90150000-0016-0415-0000-0000000FF1CE}" = Microsoft Excel MUI (Polish) 2013
- "{90150000-0018-0415-0000-0000000FF1CE}" = Microsoft PowerPoint MUI (Polish) 2013
- "{90150000-0019-0415-0000-0000000FF1CE}" = Microsoft Publisher MUI (Polish) 2013
- "{90150000-001A-0415-0000-0000000FF1CE}" = Microsoft Outlook MUI (Polish) 2013
- "{90150000-001B-0415-0000-0000000FF1CE}" = Microsoft Word MUI (Polish) 2013
- "{90150000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
- "{90150000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
- "{90150000-001F-0415-0000-0000000FF1CE}" = Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski
- "{90150000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2013
- "{90150000-0044-0415-0000-0000000FF1CE}" = Microsoft InfoPath MUI (Polish) 2013
- "{90150000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2013
- "{90150000-0090-0415-0000-0000000FF1CE}" = Microsoft DCF MUI (Polish) 2013
- "{90150000-00A1-0415-0000-0000000FF1CE}" = Microsoft OneNote MUI (Polish) 2013
- "{90150000-00BA-0415-0000-0000000FF1CE}" = Microsoft Groove MUI (Polish) 2013
- "{90150000-00E1-0415-0000-0000000FF1CE}" = Microsoft Office OSM MUI (Polish) 2013
- "{90150000-00E2-0415-0000-0000000FF1CE}" = Microsoft Office OSM UX MUI (Polish) 2013
- "{90150000-012B-0415-0000-0000000FF1CE}" = Microsoft Lync MUI (Polish) 2013
- "{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update
- "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
- "{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
- "{B763CDE9-3E9C-4F19-BCAF-773D48ECD9F1}" = DownloadStudio
- "{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
- "{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
- "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
- "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
- "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
- "{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
- "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
- "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
- "Bandicam" = Bandicam
- "BandiMPEG1" = Bandicam MPEG-1 Decoder
- "BitComet_x64" = BitComet 1.45
- "Driver Booster_is1" = Driver Booster 3.5
- "Google Chrome" = Google Chrome
- "HP Photo Creations" = HP Photo Creations
- "MEGAsync" = MEGAsync
- "Mirillis Action!" = Action!
- "Mozilla Firefox 52.0.1 (x86 pl)" = Mozilla Firefox 52.0.1 (x86 pl)
- "MozillaMaintenanceService" = Mozilla Maintenance Service
- "Office15.PROPLUS" = Microsoft Office Professional Plus 2013
- [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
- [HKEY_USERS\S-1-5-21-2923643836-3569258987-1987614516-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "Discord" = Discord
- "Opera 44.0.2510.857" = Opera Stable 44.0.2510.857
- [color=#E56717]========== Last 20 Event Log Errors ==========[/color]
- [ Application Events ]
- Error - 2017-03-27 08:15:52 | Computer Name = P18plus-PC | Source = WinMgmt | ID = 10
- Description =
- Error - 2017-03-27 08:28:39 | Computer Name = P18plus-PC | Source = Application Error | ID = 1000
- Description = Nazwa aplikacji powodującej błąd: svchost.exe_wuauserv, wersja: 6.1.7600.16385,
- sygnatura czasowa: 0x4a5bc3c1 Nazwa modułu powodującego błąd: ntdll.dll, wersja:
- 6.1.7601.18247, sygnatura czasowa: 0x521eaf24 Kod wyjątku: 0xc0000006 Przesunięcie
- błędu: 0x0000000000055bce Identyfikator procesu powodującego błąd: 0x22c Godzina
- uruchomienia aplikacji powodującej błąd: 0x01d2a6f3a342d7d7 Ścieżka aplikacji powodującej
- błąd: C:\Windows\system32\svchost.exe Ścieżka modułu powodującego błąd: C:\Windows\SYSTEM32\ntdll.dll
- Identyfikator
- raportu: e74b9f93-12e8-11e7-86e8-e03f49b8a2db
- Error - 2017-03-27 08:28:39 | Computer Name = P18plus-PC | Source = Application Error | ID = 1005
- Description = System Windows nie może uzyskać dostępu do pliku z jednej z następujących
- przyczyn: problem z połączeniem sieciowym; problem z dyskiem, na którym jest przechowywany
- plik; problem ze sterownikami magazynu zainstalowanymi na tym komputerze; brak
- dysku. System Windows zamknął program Proces hosta dla usług systemu Windows z powodu
- tego błędu. Program: Proces hosta dla usług systemu Windows Plik: Wartość błędu jest
- wyświetlona w sekcji Dodatkowe dane. Akcja użytkownika 1. Otwórz plik ponownie. Ta
- sytuacja może być przejściowym problemem, który sam się rozwiąże po ponownym uruchomieniu
- programu. 2. Jeśli nadal nie można uzyskać dostępu do pliku i - jest w sieci, administrator
- sieci powinien sprawdzić, czy nie ma problemu z siecią i czy można skontaktować
- się z serwerem. - jest na dysku wymiennym, na przykład dyskietce lub dysku CD-ROM,
- sprawdź, czy cały dysk jest włożony do komputera. 3. Sprawdź i napraw system plików,
- uruchamiając program CHKDSK. Aby uruchomić program CHKDSK, kliknij przycisk Start,
- kliknij polecenie Uruchom, wpisz polecenie CMD, a następnie kliknij przycisk OK.
- W wierszu polecenia wpisz polecenie CHKDSK /F, a następnie naciśnij klawisz ENTER.
- 4.
- Jeżeli problem nie ustąpi, przywróć plik z kopii zapasowej. 5. Ustal, czy można
- otworzyć inne pliki na tym samym dysku. Jeśli nie, dysk może być uszkodzony. Jeśli
- jest to dysk twardy, skontaktuj się z administratorem komputera lub dostawcą sprzętu
- komputerowego,
- aby uzyskać dalszą pomoc. Dodatkowe dane Wartość błędu: C0000185 Typ dysku: 0
- Error - 2017-03-27 08:41:45 | Computer Name = P18plus-PC | Source = WinMgmt | ID = 10
- Description =
- Error - 2017-03-27 12:14:58 | Computer Name = P18plus-PC | Source = Application Hang | ID = 1002
- Description = Program Windows Movie Maker 2012 [1].exe w wersji 16.4.3528.331 zatrzymał
- interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych
- więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu
- sterowania Centrum akcji. Identyfikator procesu: e14 Godzina rozpoczęcia: 01d2a715311104c4
- Godzina
- zakończenia: 5 Ścieżka aplikacji: C:\Users\P18plus\Downloads\Windows Movie Maker
- 2012 [1].exe Identyfikator raportu:
- Error - 2017-03-27 12:15:51 | Computer Name = P18plus-PC | Source = Application Hang | ID = 1002
- Description = Program Windows Movie Maker 2012 [1].exe w wersji 16.4.3528.331 zatrzymał
- interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych
- więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu
- sterowania Centrum akcji. Identyfikator procesu: 1150 Godzina rozpoczęcia: 01d2a7154cddf8ea
- Godzina
- zakończenia: 3 Ścieżka aplikacji: C:\Users\P18plus\Downloads\Windows Movie Maker
- 2012 [1].exe Identyfikator raportu:
- Error - 2017-03-27 13:12:37 | Computer Name = P18plus-PC | Source = WinMgmt | ID = 10
- Description =
- Error - 2017-03-27 14:00:24 | Computer Name = P18plus-PC | Source = Application Error | ID = 1000
- Description = Nazwa aplikacji powodującej błąd: downloadstudio-setup.exe, wersja:
- 16.0.0.400, sygnatura czasowa: 0x4ab84bb7 Nazwa modułu powodującego błąd: ISSetup.dll,
- wersja: 16.0.0.400, sygnatura czasowa: 0x4ab84b70 Kod wyjątku: 0xc0000005 Przesunięcie
- błędu: 0x000a7a6f Identyfikator procesu powodującego błąd: 0x1390 Godzina uruchomienia
- aplikacji powodującej błąd: 0x01d2a723fdadc785 Ścieżka aplikacji powodującej błąd:
- C:\Users\P18plus\Downloads\downloadstudio-setup.exe Ścieżka modułu powodującego
- błąd: C:\Users\P18plus\AppData\Local\Temp\{EE867A29-60E5-45E8-A2BD-3C99D39B86D2}\Disk1\ISSetup.dll
- Identyfikator
- raportu: 3f9be523-1317-11e7-808c-54353005545a
- Error - 2017-03-27 14:05:48 | Computer Name = P18plus-PC | Source = Application Error | ID = 1000
- Description = Nazwa aplikacji powodującej błąd: setup.exe_InstallShield, wersja:
- 16.0.0.400, sygnatura czasowa: 0x4ab84bb7 Nazwa modułu powodującego błąd: ISSetup.dll,
- wersja: 16.0.0.400, sygnatura czasowa: 0x4ab84b70 Kod wyjątku: 0xc0000005 Przesunięcie
- błędu: 0x000a7a6f Identyfikator procesu powodującego błąd: 0x171c Godzina uruchomienia
- aplikacji powodującej błąd: 0x01d2a724c21b60c0 Ścieżka aplikacji powodującej błąd:
- C:\Users\P18plus\AppData\Local\Temp\{F38111AB-88BA-49D9-8B95-C3EF42338861}\setup.exe
- Ścieżka
- modułu powodującego błąd: C:\Users\P18plus\AppData\Local\Temp\{F38111AB-88BA-49D9-8B95-C3EF42338861}\ISSetup.dll
- Identyfikator
- raportu: 00ffbfe4-1318-11e7-808c-54353005545a
- Error - 2017-03-28 07:32:40 | Computer Name = P18plus-PC | Source = WinMgmt | ID = 10
- Description =
- [ System Events ]
- Error - 2017-03-27 08:29:30 | Computer Name = P18plus-PC | Source = atapi | ID = 262155
- Description = Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.
- Error - 2017-03-27 08:29:30 | Computer Name = P18plus-PC | Source = atapi | ID = 262155
- Description = Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.
- Error - 2017-03-27 08:29:30 | Computer Name = P18plus-PC | Source = atapi | ID = 262155
- Description = Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.
- Error - 2017-03-27 08:29:30 | Computer Name = P18plus-PC | Source = atapi | ID = 262155
- Description = Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.
- Error - 2017-03-27 08:29:48 | Computer Name = P18plus-PC | Source = Service Control Manager | ID = 7011
- Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji
- z usługi ShellHWDetection.
- Error - 2017-03-27 08:40:09 | Computer Name = P18plus-PC | Source = EventLog | ID = 6008
- Description = Poprzednie zamknięcie systemu przy 14:28:01 na ?2017-?03-?27 było
- nieoczekiwane.
- Error - 2017-03-27 08:40:13 | Computer Name = P18plus-PC | Source = BugCheck | ID = 1001
- Description =
- Error - 2017-03-27 09:12:13 | Computer Name = P18plus-PC | Source = Service Control Manager | ID = 7011
- Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji
- z usługi WinDefend.
- Error - 2017-03-28 07:30:58 | Computer Name = P18plus-PC | Source = EventLog | ID = 6008
- Description = Poprzednie zamknięcie systemu przy 23:40:49 na ?2017-?03-?27 było
- nieoczekiwane.
- Error - 2017-03-28 08:11:30 | Computer Name = P18plus-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
- Description = Instalacja nie powiodła się: system Windows nie mógł zainstalować
- następującej aktualizacji, ponieważ wystąpił błąd 0x800f0902: Aktualizacja zabezpieczeń
- systemu Windows 7 dla systemów opartych na procesorach x64 (KB3101722).
- < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement