Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-11-2019
- Uruchomiony przez paula (administrator) DESKTOP-TNOGGSB (LENOVO 80QQ) (25-11-2019 18:55:27)
- Uruchomiony z C:\Users\paula\Downloads
- Załadowane profile: paula (Dostępne profile: paula)
- Platform: Windows 10 Pro Wersja 1809 17763.864 (X64) Język: Polski (Polska)
- Domyślna przeglądarka: Chrome
- Tryb startu: Normal
- Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
- ==================== Procesy (filtrowane) =================
- (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
- ( ) [Brak podpisu cyfrowego] C:\ProgramData\EventSvc\work0.exe
- ( ) [Brak podpisu cyfrowego] C:\ProgramData\NtvHost\native.exe
- () [Brak podpisu cyfrowego] C:\Users\paula\AppData\Local\Temp\is-A22LG.tmp\anug5mbc1sc.tmp
- (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.5.245.0\AvastBrowserCrashHandler.exe
- (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.5.245.0\AvastBrowserCrashHandler64.exe
- (CloudBees, Inc.) [Brak podpisu cyfrowego] C:\ProgramData\EventSvc\eventsvc.exe
- (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
- (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
- (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
- (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
- (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
- (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
- (EnigmaSoft Limited -> EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe
- (EnigmaSoft Limited -> EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
- (Merit) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bathou\317253759.exe
- (Merit) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bathou\817915740.exe
- (Merit) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bathou\844478514.exe
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
- (Microsoft Corporation) [Brak podpisu cyfrowego] C:\ProgramData\winnmgr\svcnetwk.exe
- (Microsoft Corporation) [Brak podpisu cyfrowego] C:\ProgramData\winnmgr\trz40A7.tmp
- (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.34.15002.0_x64__8wekyb3d8bbwe\GameBar.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
- (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
- (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
- (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe
- (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe
- ==================== Rejestr (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
- HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [916184 2014-07-02] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
- HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
- HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
- HKLM\...\RunOnce: [fo0a2tt0kvj] => C:\Program Files (x86)\Bathou\844478514.exe [481280 2019-11-23] (Merit) [Brak podpisu cyfrowego]
- HKLM\...\RunOnce: [pst1jqysw2k] => C:\Program Files (x86)\Bathou\317253759.exe [481280 2019-11-23] (Merit) [Brak podpisu cyfrowego]
- HKLM\...\RunOnce: [q2b3plsg22w] => C:\Program Files (x86)\Bathou\817915740.exe [481280 2019-11-23] (Merit) [Brak podpisu cyfrowego]
- HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [6495628] => C:\Users\paula\AppData\Local\Temp\is-PH4IE.tmp\Coursers.exe [738579 2019-11-22] ( ) [Brak podpisu cyfrowego] <==== UWAGA
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [7464317] => C:\Users\paula\AppData\Local\Temp\is-IOF0N.tmp\Coursers.exe [738579 2019-11-22] ( ) [Brak podpisu cyfrowego] <==== UWAGA
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [1409931] => C:\Users\paula\AppData\Local\Temp\is-LF3IV.tmp\Coursers.exe [738579 2019-11-22] ( ) [Brak podpisu cyfrowego] <==== UWAGA
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [7947509] => "C:\Users\paula\AppData\Local\Temp\is-SUB50.tmp\Coursers.exe" /VERYSILENT <==== UWAGA
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\Run: [2316180] => C:\Users\paula\AppData\Roaming\zq1dre1tro3\anug5mbc1sc.exe [4330381 2019-11-25] ( ) [Brak podpisu cyfrowego]
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\...\MountPoints2: {fb4665e2-62cd-11e9-8d21-184f320ce024} - "F:\HiSuiteDownLoader.exe"
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [807424 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
- HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.108\Installer\chrmstp.exe [2019-11-24] (Google LLC -> Google LLC)
- HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\77.1.1831.91\Installer\chrmstp.exe [2019-11-24] (AVAST Software s.r.o. -> AVAST Software)
- AppInit_DLLs: C:\ProgramData\Quoteex\Damjob.dll => C:\ProgramData\Quoteex\Damjob.dll [342528 2019-11-24] () [Brak podpisu cyfrowego]
- AppInit_DLLs-x32: C:\ProgramData\Quoteex\Ronzimnix.dll => Brak pliku
- BootExecute: autocheck autochk * aswBoot.exe /M:1caab4d7d /dir:"C:\Program Files\AVAST Software\Avast"
- GroupPolicy: Ograniczenia - Chrome <==== UWAGA
- FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
- CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
- ==================== Zaplanowane zadania (filtrowane) ============
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- Task: {0A69E4F9-D98C-46AC-B4D1-09B63287A5A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-11-24] (CloudBees, Inc.) [Brak podpisu cyfrowego]
- Task: {1A050D5F-3A43-4D45-BEE3-DFC651F7C340} - System32\Tasks\RyVdMRuJrFpvTQ => rundll32 "C:\Program Files (x86)\FEoZIHJcyOcU2\LtyNFqrghvDym.dll",#1
- Task: {2265B84E-9277-418A-8F5D-EC799414EDA3} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2170168 2019-11-24] (Microsoft Corporation -> Microsoft Corporation)
- Task: {25B9A571-3AB5-403F-9E80-9FBF84787E16} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-11-24] (CloudBees, Inc.) [Brak podpisu cyfrowego]
- Task: {2E056063-0F86-4FD9-950F-0DC18DB69802} - System32\Tasks\Updater_Online_Application => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== UWAGA
- Task: {394201F0-43DE-4673-8BDD-EEDCA130A6A5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [155992 2019-11-24] (Microsoft Corporation -> Microsoft Corporation)
- Task: {4078A3FB-7011-4565-9A20-1C86BD1951AF} - System32\Tasks\gvVywgorzMDAb2 => C:\Windows\system32\wscript.exe "C:\ProgramData\KzqIhdLMAbFSuYVB\zkTrZAC.wsf"
- Task: {4A3B440C-2885-4E4A-B03C-BCC752B34248} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- Task: {4C48B546-F6D9-453A-8985-C43DDB046E49} - System32\Tasks\OZuycACZFPpjRdw2 => rundll32 "C:\Program Files (x86)\malhLxIDU\mAEHxg.dll",#1
- Task: {513E6C8D-FE43-4D9F-BC20-EAAB9E6EB0FF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367288 2019-11-17] (Microsoft Corporation -> Microsoft Corporation)
- Task: {5A9B415C-64E0-41F2-A1C8-01772810245E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367288 2019-11-17] (Microsoft Corporation -> Microsoft Corporation)
- Task: {6DD48B93-0A11-4F68-847F-D27299F19641} - System32\Tasks\fMbKWJvlURLuzEMtb2 => rundll32 "C:\Program Files (x86)\RbAMuAKQlBOkrQZUeUR\njxwxvc.dll",#1
- Task: {9A845D96-1D31-453D-AD38-B392804DB91A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- Task: {A3B22004-2A68-43E8-B3B6-D98F9F48F44B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2170168 2019-11-24] (Microsoft Corporation -> Microsoft Corporation)
- Task: {A557AF97-CE99-437C-A6C6-D007C25E25EB} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [202392 2019-11-24] (AVAST Software s.r.o. -> AVAST Software)
- Task: {A6BA2853-B0A6-4D56-AAD0-FB0FE91BB280} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- Task: {B5C946C6-8FEF-4BC0-9F53-D88517124FA0} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2035488 2019-09-25] (AVAST Software s.r.o. -> AVAST Software)
- Task: {CE65ECF0-D7BE-4D21-9F6E-0CD2F03F6A6E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- Task: {CF48031D-CA2B-49BC-99DB-E9F122266AA0} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [202392 2019-11-24] (AVAST Software s.r.o. -> AVAST Software)
- Task: {F6FE7CB9-882B-4C1A-A5CB-1F446E41221C} - System32\Tasks\FtWAaXskhGyPkYAgsQK2 => rundll32 "C:\Program Files (x86)\njcqHiQFWuxsC\NUyCdlW.dll",#1
- Task: {FE72E22D-4D50-4795-99EE-15B378F26AA5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [155992 2019-11-24] (Microsoft Corporation -> Microsoft Corporation)
- (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
- Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== UWAGA
- Task: C:\Windows\Tasks\Online Application V2G4.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== UWAGA
- Task: C:\Windows\Tasks\Online Application V2G5.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== UWAGA
- Task: C:\Windows\Tasks\Online Application V2G6.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== UWAGA
- Task: C:\Windows\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== UWAGA
- ==================== Internet (filtrowane) ====================
- (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
- Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
- Tcpip\..\Interfaces\{ab3330b5-f68b-47e7-8385-7c9b30df8e01}: [DhcpNameServer] 37.8.214.2 31.11.202.254
- ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080
- Internet Explorer:
- ==================
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYpEu3QWpfYxwNGsiS5Sz4pbehwe7cONIzJZJgtGiyRJV-qHKJD-0NDBv6AP83p-C9x0x-CDWwYtLTcPhxdjmiIr65D_OG_7co3yPfpSvtNfiQRrJjOFpFsY_VmlnotDxVf9JQ-Nlj9may4hj5gnV6GLIE5dn-p&q={searchTerms}
- HKU\S-1-5-21-2858759977-1372284025-741021665-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYpEu3QWpfYxwNGsiS5Sz4pbehwe7cONIzJZJgtGiyRJV-qHKJD-0NDBv6AP83p-C99eNNeTYqRhbg1RHOgeROFllbHwx7KixeoM7hJmF5LUQopywWzbBzCGE3PsOKIL6stYjIB2YMqEVMvqDH8E8jLBDEDE1Wa
- SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
- SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYpEu3QWpfYxwNGsiS5Sz4pbehwe7cONIzJZJgtGiyRJV-qHKJD-0NDBv6AP83p-C9x0x-CDWwYtLTcPhxdjmiIr65D_OG_7co3yPfpSvtNfiQRrJjOFpFsY_VmlnotDxVf9JQ-Nlj9may4hj5gnV6GLIE5dn-p&q={searchTerms}
- SearchScopes: HKU\S-1-5-21-2858759977-1372284025-741021665-1001 -> DefaultScope {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYpEu3QWpfYxwNGsiS5Sz4pbehwe7cONIzJZJgtGiyRJV-qHKJD-0NDBv6AP83p-C9x0x-CDWwYtLTcPhxdjmiIr65D_OG_7co3yPfpSvtNfiQRrJjOFpFsY_VmlnotDxVf9JQ-Nlj9may4hj5gnV6GLIE5dn-p&q={searchTerms}
- SearchScopes: HKU\S-1-5-21-2858759977-1372284025-741021665-1001 -> {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYpEu3QWpfYxwNGsiS5Sz4pbehwe7cONIzJZJgtGiyRJV-qHKJD-0NDBv6AP83p-C9x0x-CDWwYtLTcPhxdjmiIr65D_OG_7co3yPfpSvtNfiQRrJjOFpFsY_VmlnotDxVf9JQ-Nlj9may4hj5gnV6GLIE5dn-p&q={searchTerms}
- BHO: YoutubeAdBlock -> {1C77EC69-5EA3-4241-87D8-AC5A3B0ADAD1} -> C:\Program Files (x86)\DleyWJGFVIE\teQuruW.dll => Brak pliku
- BHO-x32: YoutubeAdBlock -> {1C77EC69-5EA3-4241-87D8-AC5A3B0ADAD1} -> C:\Program Files (x86)\DleyWJGFVIE\k3RMwvtS.dll => Brak pliku
- BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-07-28] (Microsoft Corporation -> Microsoft Corporation)
- Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)
- FireFox:
- ========
- FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-07-28] (Microsoft Corporation -> Microsoft Corporation)
- FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-07-28] (Microsoft Corporation -> Microsoft Corporation)
- FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-11] (Google Inc -> Google LLC)
- FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-11] (Google Inc -> Google LLC)
- Chrome:
- =======
- CHR StartupUrls: Default -> "hxxp://google.pl/"
- CHR Profile: C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default [2019-11-25]
- CHR Extension: (Prezentacje) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-19]
- CHR Extension: (Adblocker for Youtube™) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\akfiofjpdmonbapobibfbknjnecgaach [2019-11-24] [UpdateUrl:hxxps://clients88.google.com/service/update2/crx] <==== UWAGA
- CHR Extension: (Dokumenty) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-19]
- CHR Extension: (Dysk Google) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-04-19]
- CHR Extension: (YouTube) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-19]
- CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-11-25]
- CHR Extension: (Arkusze) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-19]
- CHR Extension: (Dokumenty Google offline) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-04-19]
- CHR Extension: (Avast Online Security) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-11-25]
- CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
- CHR Extension: (Gmail) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-19]
- CHR Extension: (Chrome Media Router) - C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-11-12]
- CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
- CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
- ==================== Usługi (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [202392 2019-11-24] (AVAST Software s.r.o. -> AVAST Software)
- S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [202392 2019-11-24] (AVAST Software s.r.o. -> AVAST Software)
- S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\77.1.1831.91\elevation_service.exe [1133064 2019-09-25] (AVAST Software s.r.o. -> AVAST Software)
- S2 backlh; C:\ProgramData\Logic Cramble\set.exe [3780096 2019-11-24] () [Brak podpisu cyfrowego] <==== UWAGA
- R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11650416 2019-11-17] (Microsoft Corporation -> Microsoft Corporation)
- S2 CloudPrinter; C:\ProgramData\\CloudPrinter\\CloudPrinter.exe [1044480 2019-11-24] () [Brak podpisu cyfrowego]
- R2 EsgShKernel; C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe [11776224 2019-11-24] (EnigmaSoft Limited -> EnigmaSoft Limited)
- R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134888 2016-08-14] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
- R2 EventSvc; C:\ProgramData\EventSvc\eventsvc.exe [360448 2018-07-24] (CloudBees, Inc.) [Brak podpisu cyfrowego] <==== UWAGA
- S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-11-24] (CloudBees, Inc.) [Brak podpisu cyfrowego]
- S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-11-24] (CloudBees, Inc.) [Brak podpisu cyfrowego]
- R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373680 2017-05-26] (Intel(R) pGFX -> Intel Corporation)
- S2 Main Service; C:\Program Files (x86)\MachinerData\ModularInstaller.exe [2780076 2019-11-25] () [Brak podpisu cyfrowego]
- S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2304304 2019-04-26] (Electronic Arts, Inc. -> Electronic Arts)
- S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3175728 2019-04-26] (Electronic Arts, Inc. -> Electronic Arts)
- R2 RtkBtManServ; C:\Windows\RtkBtManServ.exe [709168 2019-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
- S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5378320 2019-10-13] (Microsoft Windows Publisher -> Microsoft Corporation)
- R2 ShMonitor; C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe [519904 2019-11-24] (EnigmaSoft Limited -> EnigmaSoft Limited)
- R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
- ===================== Sterowniki (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R3 EnigmaFileMonDriver; C:\Windows\System32\drivers\EnigmaFileMonDriver.sys [68424 2019-11-25] (EnigmaSoft Limited -> EnigmaSoft Limited)
- R3 ETDSMBus; C:\Windows\System32\drivers\ETDSMBus.sys [32344 2016-08-14] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
- R3 glavcam; C:\Windows\system32\DRIVERS\glavcam.sys [3476736 2015-10-16] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
- R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation -> NVIDIA Corporation)
- R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek )
- R3 RtkBtFilter; C:\Windows\System32\drivers\RtkBtfilter.sys [779104 2019-05-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
- R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [426504 2016-08-16] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
- R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [8178120 2018-04-20] (WDKTestCert AutoRelease,131164306308484710 -> Realtek Semiconductor Corporation )
- S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [156568 2018-11-08] (Oracle Corporation -> Oracle Corporation)
- S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-10-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
- R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [351968 2019-10-18] (Microsoft Windows -> Microsoft Corporation)
- R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-18] (Microsoft Windows -> Microsoft Corporation)
- ==================== NetSvcs (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- ==================== Jeden miesiąc (utworzone) ===================
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2019-11-25 18:55 - 2019-11-25 18:57 - 000027109 _____ C:\Users\paula\Downloads\FRST.txt
- 2019-11-25 18:54 - 2019-11-25 18:56 - 000000000 ____D C:\FRST
- 2019-11-25 18:52 - 2019-11-25 18:52 - 000000000 ____D C:\Program Files (x86)\MachinerData
- 2019-11-25 18:51 - 2019-11-25 18:51 - 000001745 _____ C:\Users\paula\Desktop\Garbage Cleaner.lnk
- 2019-11-25 18:51 - 2019-11-25 18:51 - 000000000 ____D C:\ProgramData\Garbage Cleaner
- 2019-11-25 18:10 - 2019-11-25 18:10 - 002262016 _____ (Farbar) C:\Users\paula\Downloads\Niepotwierdzony 486936.crdownload
- 2019-11-25 18:10 - 2019-11-25 18:10 - 002262016 _____ (Farbar) C:\Users\paula\Downloads\Niepotwierdzony 365948.crdownload
- 2019-11-25 18:10 - 2019-11-25 18:10 - 002262016 _____ (Farbar) C:\Users\paula\Downloads\FRST64.exe
- 2019-11-25 18:10 - 2019-11-25 18:10 - 000000000 ____D C:\avast! sandbox
- 2019-11-25 17:52 - 2019-11-25 18:51 - 006320352 _____ C:\Users\paula\Desktop\DriverPack.exe
- 2019-11-25 17:52 - 2019-11-25 18:51 - 000001997 _____ C:\Users\paula\Desktop\InstallPack.lnk
- 2019-11-25 17:50 - 2019-11-25 18:55 - 000000000 ____D C:\Program Files\XOA8L2ZESJ
- 2019-11-25 17:50 - 2019-11-25 18:55 - 000000000 ____D C:\Program Files\ADHNT25FRF
- 2019-11-25 17:50 - 2019-11-25 18:55 - 000000000 ____D C:\Program Files\4EA0HTD2Q0
- 2019-11-25 17:50 - 2019-11-25 17:54 - 000000000 ____D C:\Users\paula\AppData\Roaming\qydosc0fukc
- 2019-11-25 17:50 - 2019-11-25 17:54 - 000000000 ____D C:\Users\paula\AppData\Roaming\dj3ef3bj2h3
- 2019-11-25 17:50 - 2019-11-25 17:50 - 000000000 ____D C:\Users\paula\AppData\Roaming\zq1dre1tro3
- 2019-11-24 19:12 - 2019-11-25 18:51 - 000000000 ____D C:\Users\paula\AppData\Local\GoogleChromeUserData
- 2019-11-24 19:08 - 2019-11-24 19:11 - 000000000 ____D C:\Users\paula\AppData\Local\GoogleChromeApplication
- 2019-11-24 16:47 - 2019-11-25 18:54 - 000000000 ____D C:\Users\paula\AppData\Local\CrashDumps
- 2019-11-24 13:26 - 2019-11-25 17:49 - 000002594 _____ C:\Users\paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
- 2019-11-24 13:26 - 2019-11-25 17:49 - 000002541 _____ C:\Users\paula\Desktop\Avast Secure Browser.lnk
- 2019-11-24 12:58 - 2019-11-25 17:50 - 000068424 _____ (EnigmaSoft Limited) C:\Windows\system32\Drivers\EnigmaFileMonDriver.sys
- 2019-11-24 12:57 - 2019-11-24 12:57 - 000001055 _____ C:\Users\Public\Desktop\SpyHunter5.lnk
- 2019-11-24 12:57 - 2019-11-24 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EnigmaSoft
- 2019-11-24 12:57 - 2019-11-24 12:57 - 000000000 ____D C:\ProgramData\EnigmaSoft Limited
- 2019-11-24 12:56 - 2019-11-24 12:56 - 000000000 ____D C:\Program Files\EnigmaSoft
- 2019-11-24 12:55 - 2019-11-24 12:55 - 006946736 _____ (EnigmaSoft Limited) C:\Users\paula\Downloads\sh-remover.exe
- 2019-11-24 12:50 - 2019-11-24 12:50 - 000003856 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
- 2019-11-24 12:47 - 2019-11-24 12:47 - 000003604 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineUA
- 2019-11-24 12:47 - 2019-11-24 12:47 - 000003480 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineCore
- 2019-11-24 12:46 - 2019-11-24 12:46 - 000000000 ____D C:\Users\paula\AppData\Local\AVAST Software
- 2019-11-24 12:46 - 2019-11-24 12:46 - 000000000 ____D C:\Program Files (x86)\AVAST Software
- 2019-11-24 12:41 - 2019-11-24 12:41 - 000000000 ____D C:\Users\paula\AppData\Roaming\AVAST Software
- 2019-11-24 12:40 - 2019-11-24 12:40 - 000000000 ____D C:\Users\paula\AppData\Local\CEF
- 2019-11-24 12:38 - 2019-11-24 12:38 - 000002160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
- 2019-11-24 12:38 - 2019-11-24 12:38 - 000002148 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
- 2019-11-24 12:31 - 2019-11-24 12:33 - 000848432 _____ (AVAST Software) C:\Windows\system32\Drivers\asw11c6c5b7f9f347ee.tmp
- 2019-11-24 12:31 - 2019-11-24 12:33 - 000460448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswf39ff344de5dc7ed.tmp
- 2019-11-24 12:31 - 2019-11-24 12:33 - 000161544 _____ (AVAST Software) C:\Windows\system32\Drivers\asweb58dafb07ae8905.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000355720 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000316528 _____ (AVAST Software) C:\Windows\system32\Drivers\asw9b94d52feb7a8a50.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000276952 _____ (AVAST Software) C:\Windows\system32\Drivers\asw4474b89bf8e4751d.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000236024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswe3fabf9f13d801af.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000110320 _____ (AVAST Software) C:\Windows\system32\Drivers\asw9fdc5847d69c9d28.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000083792 _____ (AVAST Software) C:\Windows\system32\Drivers\asw414dc24e45dcfff0.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000042736 _____ (AVAST Software) C:\Windows\system32\Drivers\asw26f471ab98e85bf0.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000016304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswafb3a33e1b2f5897.tmp
- 2019-11-24 12:31 - 2019-11-24 12:31 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
- 2019-11-24 12:31 - 2019-11-24 12:30 - 000274456 _____ (AVAST Software) C:\Windows\system32\Drivers\asw5d837c7161879f80.tmp
- 2019-11-24 12:31 - 2019-11-24 12:30 - 000209552 _____ (AVAST Software) C:\Windows\system32\Drivers\asw076d58bfa3968c35.tmp
- 2019-11-24 12:31 - 2019-11-24 12:30 - 000204824 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3d203b66a8253030.tmp
- 2019-11-24 12:31 - 2019-11-24 12:30 - 000065120 _____ (AVAST Software) C:\Windows\system32\Drivers\asw98f9949f86133a8f.tmp
- 2019-11-24 12:31 - 2019-11-24 12:30 - 000037616 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbed747682766f886.tmp
- 2019-11-24 12:29 - 2019-11-24 12:29 - 000000000 ____D C:\Program Files\AVAST Software
- 2019-11-24 12:28 - 2019-11-24 12:31 - 000000000 ____D C:\ProgramData\AVAST Software
- 2019-11-24 12:17 - 2019-11-25 18:52 - 000000000 ____D C:\ProgramData\winnmgr
- 2019-11-24 12:17 - 2019-11-24 19:11 - 000000000 ____D C:\ProgramData\NtvHost
- 2019-11-24 12:16 - 2019-11-25 18:59 - 000000000 ____D C:\ProgramData\EventSvc
- 2019-11-24 12:13 - 2019-11-24 12:13 - 000000266 __RSH C:\Users\paula\ntuser.pol
- 2019-11-24 12:09 - 2019-11-24 12:09 - 000000000 ____D C:\Users\paula\AppData\Roaming\ScreenToGif
- 2019-11-24 12:08 - 2019-11-24 12:08 - 000003356 _____ C:\Windows\system32\Tasks\RyVdMRuJrFpvTQ
- 2019-11-24 12:08 - 2019-11-24 12:08 - 000003044 _____ C:\Windows\system32\Tasks\gvVywgorzMDAb2
- 2019-11-24 12:08 - 2019-11-24 12:08 - 000003008 _____ C:\Windows\system32\Tasks\OZuycACZFPpjRdw2
- 2019-11-24 12:08 - 2019-11-24 12:08 - 000000000 ____D C:\ProgramData\KzqIhdLMAbFSuYVB
- 2019-11-24 12:07 - 2019-11-24 16:44 - 000000000 ____D C:\Program Files (x86)\Bathou
- 2019-11-24 12:07 - 2019-11-24 12:07 - 000015606 _____ C:\Windows\SysWOW64\findit.xml
- 2019-11-24 12:07 - 2019-11-24 12:07 - 000003034 _____ C:\Windows\system32\Tasks\fMbKWJvlURLuzEMtb2
- 2019-11-24 12:07 - 2019-11-24 12:07 - 000003026 _____ C:\Windows\system32\Tasks\FtWAaXskhGyPkYAgsQK2
- 2019-11-24 12:07 - 2019-11-24 12:07 - 000000000 ____D C:\Users\paula\AppData\Roaming\Mozilla
- 2019-11-24 12:07 - 2019-11-24 12:07 - 000000000 ____D C:\ProgramData\Quoteexs
- 2019-11-24 12:06 - 2019-11-24 12:52 - 000000000 ____D C:\ProgramData\Quoteex
- 2019-11-24 12:06 - 2019-11-24 12:07 - 000003258 __RSH C:\ProgramData\ntuser.pol
- 2019-11-24 12:06 - 2019-11-24 12:07 - 000000000 ____D C:\ProgramData\Logic Cramble
- 2019-11-24 12:05 - 2019-11-24 12:13 - 000000414 _____ C:\Windows\Tasks\Updater_Online_Application.job
- 2019-11-24 12:05 - 2019-11-24 12:13 - 000000382 _____ C:\Windows\Tasks\Online Application V2G6.job
- 2019-11-24 12:05 - 2019-11-24 12:13 - 000000382 _____ C:\Windows\Tasks\Online Application V2G5.job
- 2019-11-24 12:05 - 2019-11-24 12:13 - 000000382 _____ C:\Windows\Tasks\Online Application V2G4.job
- 2019-11-24 12:05 - 2019-11-24 12:13 - 000000382 _____ C:\Windows\Tasks\Online Application V2G3.job
- 2019-11-24 12:05 - 2019-11-24 12:08 - 000003308 _____ C:\Windows\system32\Tasks\Updater_Online_Application
- 2019-11-24 12:05 - 2019-11-24 12:05 - 000000000 ____D C:\Users\paula\AppData\Roaming\Microleaves
- 2019-11-24 12:05 - 2019-11-24 12:05 - 000000000 ____D C:\Users\paula\AppData\Local\AdvinstAnalytics
- 2019-11-24 12:05 - 2019-11-24 12:05 - 000000000 ____D C:\ProgramData\CloudPrinter
- 2019-11-24 12:05 - 2019-11-24 12:05 - 000000000 ____D C:\Program Files (x86)\Microleaves
- 2019-11-24 11:44 - 2019-11-24 12:34 - 000000000 ____D C:\Users\paula\AppData\LocalLow\uTorrent
- 2019-11-24 11:35 - 2019-11-24 11:35 - 000000000 ___HD C:\OneDriveTemp
- 2019-11-16 15:47 - 2019-11-16 15:47 - 011724288 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
- 2019-11-16 15:47 - 2019-11-16 15:47 - 009941504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
- 2019-11-16 15:47 - 2019-11-16 15:47 - 000249856 _____ (Gracenote, Inc.) C:\Windows\SysWOW64\gnsdk_fp.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 019014144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 012258816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 006065152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 005436696 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 003906560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 003703296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 003624448 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 003550384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 002393600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 001312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 001267240 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
- 2019-11-16 15:46 - 2019-11-16 15:46 - 001200920 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 001024712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000936960 _____ (Microsoft Corporation) C:\Windows\system32\assignedaccessmanagersvc.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000808960 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000629248 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessManager.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000547328 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000486400 _____ C:\Windows\system32\AssignedAccessCsp.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000350208 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnphost.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000263360 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
- 2019-11-16 15:46 - 2019-11-16 15:46 - 000058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\udhisapi.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 023455232 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 012960256 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 007872000 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 006547896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 006318328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 005770240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 005608336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 004873216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 004661760 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 003872336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 003656792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 003496448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AI.MachineLearning.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 002918200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 002765312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 002698752 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 002628112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 002348544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001994976 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001918792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001708544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001677808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001674480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001668752 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001465472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001388032 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001291264 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 001098136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000877568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000808272 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000782968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000729088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000703488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000676352 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000661264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000590336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000588816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000553472 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000548864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000542320 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000535080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000495616 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000481280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000474936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000473832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000462336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000455168 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000435512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000383288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000360960 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000349184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000262152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000177664 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ComposableShellProxyStub.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000122368 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000112168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000105832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpenWith.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CapabilityAccessManagerClient.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\udhisapi.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ApiSetHost.AppExecutionAlias.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000047616 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AssignedAccessRuntime.dll
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compact.exe
- 2019-11-16 15:45 - 2019-11-16 15:45 - 000038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 022137120 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 006934016 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 005575168 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 004303872 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 002871824 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 002699976 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 002072176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001966096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001751432 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001729024 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001726480 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001702600 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001486472 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001473296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001346216 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001262592 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001183504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 001180248 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000948224 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000811536 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000773208 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000747536 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000638480 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000613376 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000553784 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000520704 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000465416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000427832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000420864 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000408064 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000324624 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\ComposableShellProxyStub.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000273408 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000164368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000120352 _____ (Microsoft Corporation) C:\Windows\system32\OpenWith.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\CoreShellExtFramework.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000086744 _____ (Microsoft Corporation) C:\Windows\system32\taskhostw.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000071696 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\compact.exe
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000023768 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
- 2019-11-16 15:44 - 2019-11-16 15:44 - 000020144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 009667896 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 007656072 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 007645392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 005573232 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 004866560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AI.MachineLearning.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 004413936 _____ (Microsoft Corporation) C:\Windows\explorer.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 004049920 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 003637760 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 003363640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 003333632 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 003082752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 002848768 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 002421248 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 002192384 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 002050560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001904128 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001666440 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001644544 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001608192 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001388032 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001054712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001050112 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 001022464 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000862008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000834048 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000807424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000801792 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000774144 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000741688 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000591160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000574464 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000505640 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000394240 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000292352 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000281088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\wpnservice.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000226816 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000198144 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000161792 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000160272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000154624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000132608 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\ApiSetHost.AppExecutionAlias.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000086840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessRuntime.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
- 2019-11-16 15:43 - 2019-11-16 15:43 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\WiredNetworkCSP.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 007700696 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 003576832 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 002707968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
- 2019-11-16 15:42 - 2019-11-16 15:42 - 002645504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 002109960 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001933408 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001929728 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001668784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001538560 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001331536 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001294792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001258512 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001054224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
- 2019-11-16 15:42 - 2019-11-16 15:42 - 001049608 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000888560 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000869888 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000856424 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000775768 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000764928 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000750592 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000680184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000652088 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000604344 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000536320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000514600 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000509968 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000462352 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000450632 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000445752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000415760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000389408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000385848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000367104 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000213304 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000193336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000152896 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000141736 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000118480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wldp.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\WinHvPlatform.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000090632 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000087080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000080400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000061480 _____ (Microsoft Corporation) C:\Windows\system32\hvhostsvc.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000036368 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
- 2019-11-16 15:42 - 2019-11-16 15:42 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
- 2019-11-16 15:41 - 2019-11-16 15:41 - 000667664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
- 2019-11-16 15:41 - 2019-11-16 15:41 - 000520208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Vid.sys
- 2019-11-16 15:41 - 2019-11-16 15:41 - 000198968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
- 2019-10-31 17:41 - 2019-10-31 17:41 - 000000108 ____H C:\Users\paula\Desktop\.~lock.Listopad PL103 (4).xlsx#
- 2019-10-31 17:39 - 2019-10-31 17:39 - 000000108 ____H C:\Users\paula\Desktop\.~lock.Listopad PL103 (3).xlsx#
- 2019-10-31 17:26 - 2019-10-31 17:26 - 000000108 ____H C:\Users\paula\Desktop\.~lock.Listopad PL103 (2).xlsx#
- 2019-10-31 17:19 - 2019-10-31 17:19 - 000000108 ____H C:\Users\paula\Desktop\.~lock.Listopad PL103 (6).xlsx#
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002405 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
- 2019-10-31 15:49 - 2019-10-31 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office
- ==================== Jeden miesiąc (zmodyfikowane) ==================
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2019-11-25 18:35 - 2019-04-19 18:55 - 000000000 ____D C:\Windows\system32\SleepStudy
- 2019-11-25 18:35 - 2019-04-19 15:23 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
- 2019-11-25 17:56 - 2019-04-19 19:43 - 000000000 ___RD C:\Users\paula\OneDrive
- 2019-11-25 17:49 - 2019-04-19 19:39 - 000000000 __SHD C:\Users\paula\IntelGraphicsProfiles
- 2019-11-25 17:49 - 2019-04-19 18:58 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
- 2019-11-25 17:48 - 2019-04-19 18:56 - 000000006 ____H C:\Windows\Tasks\SA.DAT
- 2019-11-24 20:26 - 2019-04-19 15:08 - 000786432 _____ C:\Windows\system32\config\BBI
- 2019-11-24 12:48 - 2019-04-19 15:12 - 000000000 ____D C:\Windows\CbsTemp
- 2019-11-24 12:35 - 2019-04-19 19:44 - 000000000 ____D C:\Users\paula\AppData\Local\PlaceholderTileLogoFolder
- 2019-11-24 12:34 - 2019-04-19 20:03 - 000000000 ____D C:\Users\paula\AppData\Roaming\uTorrent
- 2019-11-24 12:31 - 2019-04-19 15:23 - 000000000 ___HD C:\Windows\ELAMBKUP
- 2019-11-24 12:19 - 2019-04-19 20:04 - 000000000 ____D C:\Users\paula\AppData\Local\BitTorrentHelper
- 2019-11-24 12:13 - 2019-04-19 19:36 - 000000000 ____D C:\Users\paula
- 2019-11-24 12:07 - 2019-09-14 13:28 - 000000000 ____D C:\Users\paula\Desktop\gd
- 2019-11-24 12:07 - 2019-07-03 12:17 - 000000000 ____D C:\Users\paula\Desktop\tele
- 2019-11-24 12:07 - 2019-04-19 19:51 - 000002319 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
- 2019-11-24 12:07 - 2019-04-19 19:51 - 000002278 _____ C:\Users\Public\Desktop\Google Chrome.lnk
- 2019-11-24 12:06 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\system32\GroupPolicy
- 2019-11-24 11:57 - 2019-04-19 15:23 - 000000000 ___HD C:\Program Files\WindowsApps
- 2019-11-24 11:57 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\AppReadiness
- 2019-11-24 11:48 - 2019-04-19 15:23 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
- 2019-11-24 11:46 - 2019-07-28 17:28 - 000000000 ____D C:\Program Files\Microsoft Office
- 2019-11-24 11:35 - 2019-04-19 19:43 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2858759977-1372284025-741021665-1001
- 2019-11-24 11:35 - 2019-04-19 19:36 - 000002407 _____ C:\Users\paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
- 2019-11-17 13:02 - 2019-04-19 15:20 - 000000000 ____D C:\Windows\INF
- 2019-11-17 12:59 - 2019-04-19 19:12 - 001768484 _____ C:\Windows\system32\PerfStringBackup.INI
- 2019-11-17 12:59 - 2019-04-19 15:30 - 000785768 _____ C:\Windows\system32\perfh015.dat
- 2019-11-17 12:59 - 2019-04-19 15:30 - 000152530 _____ C:\Windows\system32\perfc015.dat
- 2019-11-17 12:55 - 2019-04-19 19:39 - 000000000 __RHD C:\Users\Public\AccountPictures
- 2019-11-17 12:55 - 2019-04-19 19:39 - 000000000 ___RD C:\Users\paula\3D Objects
- 2019-11-17 12:52 - 2019-04-19 18:55 - 000468576 _____ C:\Windows\system32\FNTCACHE.DAT
- 2019-11-16 17:22 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\SysWOW64\Dism
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\system32\oobe
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\system32\Dism
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\system32\appraiser
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\ShellExperiences
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\PolicyDefinitions
- 2019-11-16 17:21 - 2019-04-19 15:23 - 000000000 ____D C:\Windows\bcastdvr
- 2019-11-16 16:49 - 2019-04-20 07:49 - 000000000 ____D C:\Windows\system32\MRT
- 2019-11-16 16:30 - 2019-04-20 07:48 - 128443096 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
- 2019-11-16 13:35 - 2019-04-19 19:37 - 000748816 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
- 2019-11-11 12:10 - 2019-04-19 19:49 - 000003570 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
- 2019-11-11 12:10 - 2019-04-19 19:49 - 000003446 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
- 2019-11-11 12:08 - 2019-04-19 19:49 - 000000000 ____D C:\Program Files (x86)\Google
- 2019-11-03 15:46 - 2019-04-19 19:39 - 000000000 ____D C:\ProgramData\Packages
- ==================== SigCheck ============================
- (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
- ==================== Koniec FRST.txt ========================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement