API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 6th, 2015
196
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 120.82 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2015-12-06 11:33:50 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Wn3ku\Downloads
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 6,00 Gb Total Physical Memory | 3,39 Gb Available Physical Memory | 56,51% Memory free
  8. 12,00 Gb Paging File | 9,00 Gb Available in Paging File | 75,05% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 150,26 Gb Total Space | 73,42 Gb Free Space | 48,86% Space Free | Partition Type: NTFS
  13. Drive D: | 634,67 Gb Total Space | 136,82 Gb Free Space | 21,56% Space Free | Partition Type: NTFS
  14. Drive E: | 146,48 Gb Total Space | 72,97 Gb Free Space | 49,81% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: WN3KU-KOMPUTER | User Name: Wn3ku | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2015-12-06 11:25:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Wn3ku\Downloads\OTL.exe
  23. PRC - [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\ProgramData\752613\RuntimeBroker.exe
  24. PRC - [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\Program Files (x86)\RDPManager.exe
  25. PRC - [2015-11-24 09:00:56 | 000,741,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  26. PRC - [2015-11-10 03:44:38 | 003,011,152 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\Steam.exe
  27. PRC - [2015-11-10 03:44:38 | 001,939,536 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  28. PRC - [2015-11-10 03:44:38 | 000,836,176 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  29. PRC - [2015-10-19 16:24:56 | 000,219,136 | ---- | M] () -- C:\Program Files (x86)\Screenhero, Inc\Screenhero\Screenhero.daemon.exe
  30. PRC - [2015-10-12 08:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  31. PRC - [2015-10-12 08:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  32. PRC - [2015-08-04 11:47:08 | 000,923,696 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  33. PRC - [2015-06-03 22:06:12 | 002,754,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  34. PRC - [2015-06-03 22:06:06 | 001,893,008 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  35. PRC - [2015-05-28 04:52:26 | 000,410,768 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  36. PRC - [2015-05-26 00:03:12 | 000,500,936 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
  37. PRC - [2013-09-04 18:21:42 | 002,112,000 | ---- | M] () -- D:\Program Files (x86)\screenSHU\screenSHU.exe
  38. PRC - [2013-03-19 20:49:53 | 000,485,632 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\ShowTip.exe
  39. PRC - [2013-03-19 20:49:53 | 000,417,536 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe
  40. PRC - [2013-02-25 14:41:10 | 000,446,720 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (All) ==========[/color]
  44.  
  45. MOD - [2015-12-06 11:25:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Wn3ku\Downloads\OTL.exe
  46. MOD - [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\ProgramData\752613\RuntimeBroker.exe
  47. MOD - [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\Program Files (x86)\RDPManager.exe
  48. MOD - [2015-12-04 11:04:16 | 001,374,136 | ---- | M] (NVIDIA Corporation) -- C:\Users\Wn3ku\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\Ontology.dll
  49. MOD - [2015-11-24 09:00:56 | 000,741,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. MOD - [2015-11-24 09:00:53 | 001,583,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libglesv2.dll
  51. MOD - [2015-11-24 09:00:52 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libegl.dll
  52. MOD - [2015-11-24 09:00:51 | 042,480,968 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\chrome_child.dll
  53. MOD - [2015-11-24 09:00:51 | 000,133,960 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\chrome_elf.dll
  54. MOD - [2015-11-24 09:00:49 | 033,985,864 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\chrome.dll
  55. MOD - [2015-11-24 07:45:21 | 003,466,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\D3DCompiler_47.dll
  56. MOD - [2015-11-10 03:44:42 | 002,541,648 | ---- | M] () -- D:\Program Files (x86)\Steam\video.dll
  57. MOD - [2015-11-10 03:44:42 | 000,265,808 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\vstdlib_s.dll
  58. MOD - [2015-11-10 03:44:40 | 010,156,624 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\steamclient.dll
  59. MOD - [2015-11-10 03:44:40 | 000,278,096 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\tier0_s.dll
  60. MOD - [2015-11-10 03:44:38 | 010,109,008 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\SteamUI.dll
  61. MOD - [2015-11-10 03:44:38 | 003,011,152 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\Steam.exe
  62. MOD - [2015-11-10 03:44:38 | 002,680,912 | ---- | M] (Valve Corporation) -- d:\Program Files (x86)\Steam\bin\friendsui.dll
  63. MOD - [2015-11-10 03:44:38 | 001,939,536 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  64. MOD - [2015-11-10 03:44:38 | 001,847,888 | ---- | M] (Valve Corporation) -- d:\Program Files (x86)\Steam\bin\serverbrowser.dll
  65. MOD - [2015-11-10 03:44:38 | 000,806,992 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\chromehtml.dll
  66. MOD - [2015-11-10 03:44:38 | 000,722,512 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\bin\vgui2_s.dll
  67. MOD - [2015-11-10 03:44:38 | 000,307,792 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\crashhandler.dll
  68. MOD - [2015-11-10 03:44:38 | 000,168,016 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\bin\filesystem_stdio.dll
  69. MOD - [2015-11-05 00:46:38 | 000,198,464 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll
  70. MOD - [2015-11-03 23:00:12 | 000,201,728 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\openvr_api.dll
  71. MOD - [2015-10-19 16:24:56 | 000,219,136 | ---- | M] () -- C:\Program Files (x86)\Screenhero, Inc\Screenhero\Screenhero.daemon.exe
  72. MOD - [2015-10-08 23:20:18 | 045,010,208 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\libcef.dll
  73. MOD - [2015-10-05 17:18:14 | 000,778,752 | ---- | M] () -- D:\Program Files (x86)\Steam\SDL2.dll
  74. MOD - [2015-09-30 18:54:29 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll
  75. MOD - [2015-09-25 00:56:28 | 000,119,208 | ---- | M] () -- D:\Program Files (x86)\Steam\winh264.dll
  76. MOD - [2015-09-24 01:33:18 | 002,549,248 | ---- | M] () -- D:\Program Files (x86)\Steam\libavcodec-56.dll
  77. MOD - [2015-09-24 01:33:18 | 000,491,008 | ---- | M] () -- D:\Program Files (x86)\Steam\libavformat-56.dll
  78. MOD - [2015-09-24 01:33:18 | 000,485,888 | ---- | M] () -- D:\Program Files (x86)\Steam\libswscale-3.dll
  79. MOD - [2015-09-24 01:33:18 | 000,442,880 | ---- | M] () -- D:\Program Files (x86)\Steam\libavutil-54.dll
  80. MOD - [2015-09-24 01:33:18 | 000,332,800 | ---- | M] () -- D:\Program Files (x86)\Steam\libavresample-2.dll
  81. MOD - [2015-09-16 13:12:52 | 000,039,384 | ---- | M] () -- D:\Program Files\FileZilla FTP Client\fzshellext.dll
  82. MOD - [2015-08-04 11:47:26 | 000,597,552 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  83. MOD - [2015-08-04 11:47:08 | 000,923,696 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  84. MOD - [2015-07-03 17:12:46 | 004,962,816 | ---- | M] () -- D:\Program Files (x86)\Steam\v8.dll
  85. MOD - [2015-07-03 17:12:28 | 001,556,992 | ---- | M] () -- D:\Program Files (x86)\Steam\icui18n.dll
  86. MOD - [2015-07-03 17:12:28 | 001,187,840 | ---- | M] () -- D:\Program Files (x86)\Steam\icuuc.dll
  87. MOD - [2015-06-20 04:46:20 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
  88. MOD - [2015-06-03 22:06:12 | 002,754,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  89. MOD - [2015-06-03 22:06:11 | 000,011,920 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
  90. MOD - [2015-06-03 22:04:55 | 001,320,304 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWOW64\nvspcap.dll
  91. MOD - [2015-05-28 08:04:11 | 012,852,152 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWOW64\nvd3dum.dll
  92. MOD - [2015-05-28 04:52:35 | 001,169,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll
  93. MOD - [2015-05-26 00:03:12 | 000,500,936 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
  94. MOD - [2015-04-15 22:07:32 | 001,586,688 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Ruby22\bin\libeay32.dll
  95. MOD - [2015-04-15 22:07:32 | 000,386,048 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Ruby22\bin\ssleay32.dll
  96. MOD - [2015-04-15 22:07:32 | 000,091,648 | ---- | M] () -- C:\Ruby22\bin\zlib1.dll
  97. MOD - [2014-04-11 22:08:08 | 000,516,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
  98. MOD - [2013-10-05 01:38:22 | 000,970,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcr120.dll
  99. MOD - [2013-10-05 01:38:22 | 000,455,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcp120.dll
  100. MOD - [2013-09-04 18:21:42 | 002,112,000 | ---- | M] () -- D:\Program Files (x86)\screenSHU\screenSHU.exe
  101. MOD - [2013-09-04 18:02:54 | 002,894,336 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\QtCore4.dll
  102. MOD - [2013-06-28 00:51:38 | 000,288,256 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\imageformats\qjpeg4.dll
  103. MOD - [2013-06-28 00:50:34 | 000,529,408 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\sqldrivers\qsqlite4.dll
  104. MOD - [2013-06-27 21:41:28 | 010,159,104 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\QtGui4.dll
  105. MOD - [2013-06-27 21:18:42 | 000,275,968 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\QtSql4.dll
  106. MOD - [2013-06-27 21:18:12 | 001,308,672 | ---- | M] (Digia Plc and/or its subsidiary(-ies)) -- D:\Program Files (x86)\screenSHU\QtNetwork4.dll
  107. MOD - [2013-03-19 20:49:53 | 000,485,632 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\ShowTip.exe
  108. MOD - [2013-03-19 20:49:53 | 000,417,536 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe
  109. MOD - [2013-02-25 14:41:10 | 000,446,720 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe
  110. MOD - [2011-06-08 08:32:26 | 000,011,362 | ---- | M] () -- D:\Program Files (x86)\screenSHU\mingwm10.dll
  111. MOD - [2011-06-08 08:32:24 | 000,043,008 | ---- | M] () -- D:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll
  112. MOD - [2009-11-25 20:47:33 | 000,297,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mscoree.dll
  113. MOD - [2009-07-14 18:55:04 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
  114. MOD - [2009-07-14 06:00:48 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\965b1fa2decab0efc0c837ab7252bba1\Microsoft.VisualBasic.ni.dll
  115. MOD - [2009-07-14 05:55:32 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\fedf1ba58dced4f0b3f8c457648ceed9\System.Windows.Forms.ni.dll
  116. MOD - [2009-07-14 05:55:26 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ead6be8b410d56b5576b10e56af2c180\System.Drawing.ni.dll
  117. MOD - [2009-07-14 05:55:09 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll
  118. MOD - [2009-07-14 05:55:05 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll
  119. MOD - [2009-07-14 05:55:00 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll
  120. MOD - [2009-07-14 02:17:54 | 000,249,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcryptprimitives.dll
  121. MOD - [2009-07-14 02:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll
  122. MOD - [2009-07-14 02:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
  123. MOD - [2009-07-14 02:16:21 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll
  124. MOD - [2009-07-14 02:16:20 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wpc.dll
  125. MOD - [2009-07-14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll
  126. MOD - [2009-07-14 02:16:20 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wtsapi32.dll
  127. MOD - [2009-07-14 02:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wsock32.dll
  128. MOD - [2009-07-14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wship6.dll
  129. MOD - [2009-07-14 02:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WSHTCPIP.DLL
  130. MOD - [2009-07-14 02:16:19 | 000,977,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wininet.dll
  131. MOD - [2009-07-14 02:16:19 | 000,348,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winhttp.dll
  132. MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
  133. MOD - [2009-07-14 02:16:19 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winmm.dll
  134. MOD - [2009-07-14 02:16:19 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
  135. MOD - [2009-07-14 02:16:19 | 000,156,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winsta.dll
  136. MOD - [2009-07-14 02:16:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wlanapi.dll
  137. MOD - [2009-07-14 02:16:19 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wkscli.dll
  138. MOD - [2009-07-14 02:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winrnr.dll
  139. MOD - [2009-07-14 02:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winnsi.dll
  140. MOD - [2009-07-14 02:16:19 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wlanutil.dll
  141. MOD - [2009-07-14 02:16:18 | 001,011,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll
  142. MOD - [2009-07-14 02:16:18 | 000,377,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wer.dll
  143. MOD - [2009-07-14 02:16:18 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\webio.dll
  144. MOD - [2009-07-14 02:16:18 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wevtapi.dll
  145. MOD - [2009-07-14 02:16:18 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wdscore.dll
  146. MOD - [2009-07-14 02:16:17 | 001,224,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\urlmon.dll
  147. MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
  148. MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
  149. MOD - [2009-07-14 02:16:17 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbemcomn.dll
  150. MOD - [2009-07-14 02:16:17 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll
  151. MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
  152. MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
  153. MOD - [2009-07-14 02:16:15 | 000,496,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\taskschd.dll
  154. MOD - [2009-07-14 02:16:15 | 000,189,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sqmapi.dll
  155. MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
  156. MOD - [2009-07-14 02:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll
  157. MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
  158. MOD - [2009-07-14 02:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll
  159. MOD - [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
  160. MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
  161. MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
  162. MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
  163. MOD - [2009-07-14 02:16:13 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schannel.dll
  164. MOD - [2009-07-14 02:16:13 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SensorsApi.dll
  165. MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
  166. MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
  167. MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
  168. MOD - [2009-07-14 02:16:13 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll
  169. MOD - [2009-07-14 02:16:13 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rtutils.dll
  170. MOD - [2009-07-14 02:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
  171. MOD - [2009-07-14 02:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SensApi.dll
  172. MOD - [2009-07-14 02:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
  173. MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
  174. MOD - [2009-07-14 02:16:12 | 000,791,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\opengl32.dll
  175. MOD - [2009-07-14 02:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
  176. MOD - [2009-07-14 02:16:12 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasapi32.dll
  177. MOD - [2009-07-14 02:16:12 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pdh.dll
  178. MOD - [2009-07-14 02:16:12 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleacc.dll
  179. MOD - [2009-07-14 02:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\powrprof.dll
  180. MOD - [2009-07-14 02:16:12 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oledlg.dll
  181. MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
  182. MOD - [2009-07-14 02:16:12 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasman.dll
  183. MOD - [2009-07-14 02:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pnrpnsp.dll
  184. MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
  185. MOD - [2009-07-14 02:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasadhlp.dll
  186. MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
  187. MOD - [2009-07-14 02:16:11 | 000,565,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\odbc32.dll
  188. MOD - [2009-07-14 02:16:11 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntshrui.dll
  189. MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
  190. MOD - [2009-07-14 02:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdsapi.dll
  191. MOD - [2009-07-14 02:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nsi.dll
  192. MOD - [2009-07-14 02:16:03 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nlaapi.dll
  193. MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
  194. MOD - [2009-07-14 02:16:02 | 000,219,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ncrypt.dll
  195. MOD - [2009-07-14 02:16:02 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll
  196. MOD - [2009-07-14 02:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\NapiNSP.dll
  197. MOD - [2009-07-14 02:15:52 | 001,386,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msxml6.dll
  198. MOD - [2009-07-14 02:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mswsock.dll
  199. MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
  200. MOD - [2009-07-14 02:15:48 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mssprxy.dll
  201. MOD - [2009-07-14 02:15:46 | 002,134,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msmpeg2vdec.dll
  202. MOD - [2009-07-14 02:15:44 | 002,340,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msi.dll
  203. MOD - [2009-07-14 02:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msimg32.dll
  204. MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
  205. MOD - [2009-07-14 02:15:43 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msdmo.dll
  206. MOD - [2009-07-14 02:15:42 | 000,481,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mscms.dll
  207. MOD - [2009-07-14 02:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.dll
  208. MOD - [2009-07-14 02:15:42 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll
  209. MOD - [2009-07-14 02:15:41 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MMDevAPI.dll
  210. MOD - [2009-07-14 02:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll
  211. MOD - [2009-07-14 02:15:41 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Defender\MpOav.dll
  212. MOD - [2009-07-14 02:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\midimap.dll
  213. MOD - [2009-07-14 02:15:39 | 001,136,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mfc42.dll
  214. MOD - [2009-07-14 02:15:39 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mfplat.dll
  215. MOD - [2009-07-14 02:15:39 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mfreadwrite.dll
  216. MOD - [2009-07-14 02:15:38 | 003,177,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mf.dll
  217. MOD - [2009-07-14 02:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\linkinfo.dll
  218. MOD - [2009-07-14 02:15:35 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ksuser.dll
  219. MOD - [2009-07-14 02:15:33 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IPHLPAPI.DLL
  220. MOD - [2009-07-14 02:15:31 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imagehlp.dll
  221. MOD - [2009-07-14 02:15:28 | 010,973,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ieframe.dll
  222. MOD - [2009-07-14 02:15:28 | 002,058,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iertutil.dll
  223. MOD - [2009-07-14 02:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\hid.dll
  224. MOD - [2009-07-14 02:15:22 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gameux.dll
  225. MOD - [2009-07-14 02:15:22 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\glu32.dll
  226. MOD - [2009-07-14 02:15:22 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gpapi.dll
  227. MOD - [2009-07-14 02:15:21 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\FWPUCLNT.DLL
  228. MOD - [2009-07-14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\fastprox.dll
  229. MOD - [2009-07-14 02:15:19 | 001,495,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ExplorerFrame.dll
  230. MOD - [2009-07-14 02:15:19 | 000,488,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\evr.dll
  231. MOD - [2009-07-14 02:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll
  232. MOD - [2009-07-14 02:15:13 | 001,069,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\DWrite.dll
  233. MOD - [2009-07-14 02:15:13 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dui70.dll
  234. MOD - [2009-07-14 02:15:13 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dsound.dll
  235. MOD - [2009-07-14 02:15:13 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\duser.dll
  236. MOD - [2009-07-14 02:15:13 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dxva2.dll
  237. MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
  238. MOD - [2009-07-14 02:15:12 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dnsapi.dll
  239. MOD - [2009-07-14 02:15:11 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dinput8.dll
  240. MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
  241. MOD - [2009-07-14 02:15:11 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc.dll
  242. MOD - [2009-07-14 02:15:11 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devrtl.dll
  243. MOD - [2009-07-14 02:15:11 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc6.dll
  244. MOD - [2009-07-14 02:15:10 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ddraw.dll
  245. MOD - [2009-07-14 02:15:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devenum.dll
  246. MOD - [2009-07-14 02:15:09 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dciman32.dll
  247. MOD - [2009-07-14 02:15:08 | 001,826,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d9.dll
  248. MOD - [2009-07-14 02:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d8thk.dll
  249. MOD - [2009-07-14 02:15:07 | 001,151,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll
  250. MOD - [2009-07-14 02:15:07 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\comctl32.dll
  251. MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
  252. MOD - [2009-07-14 02:15:07 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\credui.dll
  253. MOD - [2009-07-14 02:15:07 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptnet.dll
  254. MOD - [2009-07-14 02:15:07 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptsp.dll
  255. MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
  256. MOD - [2009-07-14 02:15:07 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll
  257. MOD - [2009-07-14 02:15:07 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\credssp.dll
  258. MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
  259. MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
  260. MOD - [2009-07-14 02:15:00 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cabinet.dll
  261. MOD - [2009-07-14 02:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\avrt.dll
  262. MOD - [2009-07-14 02:14:57 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\AudioSes.dll
  263. MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
  264. MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
  265. MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
  266. MOD - [2009-07-14 02:14:52 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\actxprxy.dll
  267. MOD - [2009-07-14 02:14:11 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ksproxy.ax
  268. MOD - [2009-07-14 02:14:11 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Kswdmcap.ax
  269. MOD - [2009-07-14 02:14:11 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vidcap.ax
  270. MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
  271. MOD - [2009-07-14 02:14:08 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bthprops.cpl
  272. MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
  273. MOD - [2009-07-14 02:14:08 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wdmaud.drv
  274. MOD - [2009-07-14 02:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.drv
  275. MOD - [2009-07-14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
  276. MOD - [2009-07-14 02:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
  277. MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
  278. MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
  279. MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
  280. MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
  281. MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
  282. MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
  283. MOD - [2009-07-14 02:11:20 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcrypt.dll
  284. MOD - [2009-07-14 02:09:14 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\odbcint.dll
  285. MOD - [2009-07-14 02:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll
  286. MOD - [2009-07-14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
  287. MOD - [2009-07-14 02:03:50 | 001,624,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\GdiPlus.dll
  288. MOD - [2009-06-10 22:23:09 | 005,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
  289. MOD - [2009-06-10 22:23:05 | 000,363,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
  290. MOD - [2007-04-04 18:53:42 | 000,081,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xinput1_3.dll
  291.  
  292.  
  293. [color=#E56717]========== Services (SafeList) ==========[/color]
  294.  
  295. SRV:[b]64bit:[/b] - [2015-12-05 21:00:10 | 000,116,736 | ---- | M] (Stas'M Corp.) [Auto | Running] -- C:\Windows\SysNative\rdpwrap.dll -- (TermService)
  296. SRV:[b]64bit:[/b] - [2015-06-18 13:57:18 | 001,268,568 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
  297. SRV:[b]64bit:[/b] - [2015-06-03 22:06:06 | 001,152,656 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
  298. SRV:[b]64bit:[/b] - [2015-06-03 22:06:03 | 023,007,376 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
  299. SRV:[b]64bit:[/b] - [2014-08-15 20:16:15 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
  300. SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  301. SRV - [2015-12-05 14:58:22 | 000,236,832 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Windows\SysWOW64\EasyAntiCheat.exe -- (EasyAntiCheat)
  302. SRV - [2015-12-03 14:28:58 | 001,616,440 | ---- | M] (GOG.com) [On_Demand | Stopped] -- C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe -- (GalaxyClientService)
  303. SRV - [2015-12-03 14:25:35 | 006,952,504 | ---- | M] (GOG.com) [On_Demand | Stopped] -- C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe -- (GalaxyCommunication)
  304. SRV - [2015-12-02 05:45:08 | 002,104,840 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- D:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
  305. SRV - [2015-11-10 03:44:38 | 000,836,176 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  306. SRV - [2015-10-12 08:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  307. SRV - [2015-10-12 08:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  308. SRV - [2015-10-09 17:04:45 | 000,149,160 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  309. SRV - [2015-10-08 18:59:18 | 000,136,048 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  310. SRV - [2015-10-08 18:59:18 | 000,136,048 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  311. SRV - [2015-10-05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Stopped] -- D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  312. SRV - [2015-07-09 12:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  313. SRV - [2015-06-03 22:06:06 | 001,893,008 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  314. SRV - [2015-05-28 04:52:26 | 000,410,768 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  315. SRV - [2014-04-11 22:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  316. SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  317.  
  318.  
  319. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  320.  
  321. DRV:[b]64bit:[/b] - [2015-12-03 23:53:38 | 000,021,832 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  322. DRV:[b]64bit:[/b] - [2015-10-26 10:43:08 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
  323. DRV:[b]64bit:[/b] - [2015-10-05 09:50:18 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  324. DRV:[b]64bit:[/b] - [2015-10-05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  325. DRV:[b]64bit:[/b] - [2015-09-08 10:47:40 | 000,117,768 | ---- | M] (Oracle Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp6.sys -- (VBoxNetAdp)
  326. DRV:[b]64bit:[/b] - [2015-08-14 22:04:38 | 000,086,352 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\gunbod64.sys -- (GunBod)
  327. DRV:[b]64bit:[/b] - [2015-06-03 22:06:03 | 000,019,600 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
  328. DRV:[b]64bit:[/b] - [2015-05-28 08:04:11 | 000,195,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  329. DRV:[b]64bit:[/b] - [2015-05-19 04:29:01 | 000,046,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  330. DRV:[b]64bit:[/b] - [2014-08-15 20:16:15 | 002,159,728 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
  331. DRV:[b]64bit:[/b] - [2011-11-03 03:01:00 | 000,056,208 | ---- | M] (Rovi Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  332. DRV:[b]64bit:[/b] - [2010-08-12 11:07:50 | 000,350,952 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
  333. DRV:[b]64bit:[/b] - [2009-08-21 00:52:10 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  334. DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  335. DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  336. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  337. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  338. DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  339. DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  340. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  341. DRV:[b]64bit:[/b] - [2009-07-14 01:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
  342. DRV:[b]64bit:[/b] - [2009-06-10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
  343. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  344. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  345. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  346. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  347. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  348.  
  349.  
  350. [color=#E56717]========== Standard Registry (All) ==========[/color]
  351.  
  352.  
  353. [color=#E56717]========== Internet Explorer ==========[/color]
  354.  
  355. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  356. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  357. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  358. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  359. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  360. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  361. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  362. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  363. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  364. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  365. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  366. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  367. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  368. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  369. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  370. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  371. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  372. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  373. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  374.  
  375. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  376. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  377. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  378. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
  379. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl
  380. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CC A4 BB 2B E4 AA D0 01 [binary data]
  381. IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  382. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  383. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  384.  
  385. [color=#E56717]========== FireFox ==========[/color]
  386.  
  387. FF - prefs.js..browser.search.countryCode: "PL"
  388. FF - prefs.js..browser.search.region: "PL"
  389. FF - prefs.js..browser.startup.homepage: "https://www.malwarebytes.org/restorebrowser//?serie=209&b=2&installkey=xzgeJDC72RrCIfkbl8jL"
  390. FF - prefs.js..extensions.enabledAddons: %7B6AC85730-7D0F-4de0-B3FA-21142DD85326%7D:2.8.2
  391. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:40.0.3
  392. FF - user.js - File not found
  393.  
  394. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
  395. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  396. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  397. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
  398. FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
  399. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  400. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
  401. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  402. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  403. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  404. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
  405. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
  406. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
  407. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Wn3ku\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  408.  
  409. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  410. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  411. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  412. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  413.  
  414. [2015-08-07 09:39:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wn3ku\AppData\Roaming\mozilla\Extensions
  415. [2015-10-15 21:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wn3ku\AppData\Roaming\mozilla\Firefox\Profiles\qtm3k7cx.default\extensions
  416. [2015-09-16 13:40:31 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\Wn3ku\AppData\Roaming\mozilla\Firefox\Profiles\qtm3k7cx.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
  417. [2015-10-09 17:04:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  418. [2015-10-09 17:04:46 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  419.  
  420. [color=#E56717]========== Chrome ==========[/color]
  421.  
  422. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
  423. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  424. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  425. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  426. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
  427. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
  428. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\
  429. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhjgdbihpkphlammdaeicdemggagfbdo\1.8.9.1_0\
  430. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  431. CHR - Extension: No name found = C:\Users\Wn3ku\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  432.  
  433. O1 HOSTS File: ([2015-06-20 04:46:16 | 000,000,921 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  434. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
  435. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
  436. O1 - Hosts: 127.0.0.1 sls.microsoft.com
  437. O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  438. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
  439. O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
  440. O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  441. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
  442. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  443. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  444. O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
  445. O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
  446. O4 - HKLM..\Run: [CancelAutoPlay_df] C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe ()
  447. O4 - HKLM..\Run: [CheckNDISPortF0ac70] C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe ()
  448. O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
  449. O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
  450. O4 - HKCU..\RunOnce: [RuntimeBroker] C:\ProgramData\752613\RuntimeBroker.exe ()
  451. O4 - Startup: C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk = File not found
  452. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  453. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  454. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  455. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  456. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  457. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  458. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  459. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  460. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  461. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  462. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  463. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  464. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  465. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  466. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  467. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  468. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  469. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  470. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  471. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  472. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  473. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  474. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  475. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  476. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  477. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  478. O8:[b]64bit:[/b] - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  479. O8:[b]64bit:[/b] - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  480. O8:[b]64bit:[/b] - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  481. O8:[b]64bit:[/b] - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  482. O8:[b]64bit:[/b] - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
  483. O8:[b]64bit:[/b] - Extra context menu item: Nowa notatka - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html ()
  484. O8:[b]64bit:[/b] - Extra context menu item: Wytnij obraz - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 File not found
  485. O8:[b]64bit:[/b] - Extra context menu item: Wytnij tę stronę - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 File not found
  486. O8:[b]64bit:[/b] - Extra context menu item: Wytnij zakładkę - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 File not found
  487. O8:[b]64bit:[/b] - Extra context menu item: Wytnij zaznaczenie - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 File not found
  488. O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  489. O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  490. O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  491. O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  492. O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
  493. O8 - Extra context menu item: Nowa notatka - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html ()
  494. O8 - Extra context menu item: Wytnij obraz - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 File not found
  495. O8 - Extra context menu item: Wytnij tę stronę - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 File not found
  496. O8 - Extra context menu item: Wytnij zakładkę - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 File not found
  497. O8 - Extra context menu item: Wytnij zaznaczenie - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 File not found
  498. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  499. O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html ()
  500. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html ()
  501. O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  502. O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
  503. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
  504. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  505. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  506. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  507. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  508. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  509. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  510. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  511. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  512. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  513. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  514. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  515. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  516. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  517. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  518. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  519. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  520. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  521. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  522. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  523. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  524. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  525. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  526. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  527. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  528. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  529. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  530. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  531. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  532. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  533. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  534. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  535. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  536. O13[b]64bit:[/b] - gopher Prefix: missing
  537. O13 - gopher Prefix: missing
  538. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  539. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{773E16D4-B65B-4939-AC4A-2DAEEC70409E}: DhcpNameServer = 192.168.0.1
  540. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  541. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  542. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  543. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  544. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  545. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  546. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  547. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  548. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  549. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  550. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  551. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  552. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  553. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  554. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  555. O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  556. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  557. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  558. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  559. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  560. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  561. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  562. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  563. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  564. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  565. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  566. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  567. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  568. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  569. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  570. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  571. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  572. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  573. O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  574. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  575. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  576. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  577. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  578. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  579. O18:[b]64bit:[/b] - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  580. O18:[b]64bit:[/b] - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  581. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  582. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  583. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  584. O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  585. O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  586. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  587. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  588. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  589. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  590. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  591. O20 - HKLM Winlogon: UserInit - ("C:\Windows\system32\clientmonitor.exe") - C:\Windows\SysWow64\clientmonitor.exe ()
  592. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  593. O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  594. O20 - HKCU Winlogon: Shell - ("C:\ProgramData\752613\RuntimeBroker.exe") - C:\ProgramData\752613\RuntimeBroker.exe ()
  595. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  596. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  597. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  598. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  599. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  600. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  601. O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
  602. O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  603. O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
  604. O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
  605. O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
  606. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
  607. O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
  608. O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  609. O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
  610. O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
  611. O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
  612. O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
  613. O31 - SafeBoot: AlternateShell - cmd.exe
  614. O32 - HKLM CDRom: AutoRun - 1
  615. O33 - MountPoints2\{50fc17f4-7bba-11e5-a19f-364b50b7efa2}\Shell - "" = AutoRun
  616. O33 - MountPoints2\{50fc17f4-7bba-11e5-a19f-364b50b7efa2}\Shell\AutoRun\command - "" = H:\autorun.exe
  617. O34 - HKLM BootExecute: (autocheck autochk *)
  618. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  619. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  620. O35 - HKLM\..comfile [open] -- "%1" %*
  621. O35 - HKLM\..exefile [open] -- "%1" %*
  622. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  623. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  624. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  625. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  626. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  627. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  628. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  629.  
  630. [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]
  631.  
  632. [2015-12-06 11:21:21 | 000,000,000 | ---D | C] -- C:\Program Files\Reimage
  633. [2015-12-06 10:00:27 | 000,000,000 | ---D | C] -- C:\Windows\pss
  634. [2015-12-05 21:00:10 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
  635. [2015-12-05 21:00:10 | 000,116,736 | ---- | C] (Stas'M Corp.) -- C:\Windows\SysNative\rdpwrap.dll
  636. [2015-12-05 20:08:37 | 000,000,000 | RHSD | C] -- C:\ProgramData\752713
  637. [2015-12-05 20:08:37 | 000,000,000 | RHSD | C] -- C:\ProgramData\752613
  638. [2015-12-05 14:59:50 | 000,236,832 | ---- | C] (EasyAntiCheat Ltd) -- C:\Windows\SysWow64\EasyAntiCheat.exe
  639. [2015-12-05 11:33:38 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
  640. [2015-12-05 11:33:33 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\discord
  641. [2015-12-05 11:33:21 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Discord
  642. [2015-12-04 00:30:51 | 000,000,000 | ---D | C] -- C:\GOG Games
  643. [2015-12-03 23:54:24 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Hamachi
  644. [2015-12-03 23:53:38 | 000,021,832 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
  645. [2015-12-03 23:37:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\embedded
  646. [2015-12-03 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Witcher 2
  647. [2015-12-03 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\The Witcher 2
  648. [2015-12-03 14:32:22 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\The Witcher 3
  649. [2015-12-03 14:10:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cdp.pl
  650. [2015-12-03 13:09:14 | 000,000,000 | ---D | C] -- C:\ProgramData\GOG.com
  651. [2015-12-03 13:09:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GalaxyClient
  652. [2015-12-02 23:50:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic II
  653. [2015-12-02 23:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWood
  654. [2015-12-02 09:55:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
  655. [2015-11-30 22:48:58 | 000,000,000 | ---D | C] -- C:\Program Files\Neat Video v4 for Sony Vegas
  656. [2015-11-29 23:16:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screenhero
  657. [2015-11-29 23:10:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atlassian
  658. [2015-11-29 23:10:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atlassian
  659. [2015-11-29 22:47:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Atlassian
  660. [2015-11-29 22:34:39 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Atlassian
  661. [2015-11-29 22:34:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Caphyon
  662. [2015-11-29 22:32:53 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Atlassian
  663. [2015-11-29 20:17:31 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ToonCar
  664. [2015-11-29 20:17:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ToonCar
  665. [2015-11-29 20:17:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ToonCar
  666. [2015-11-29 18:32:33 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\TubeTycoon
  667. [2015-11-29 14:21:10 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
  668. [2015-11-29 14:21:10 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
  669. [2015-11-29 14:21:10 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
  670. [2015-11-29 14:21:09 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
  671. [2015-11-29 14:21:08 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
  672. [2015-11-29 14:21:08 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
  673. [2015-11-29 14:21:08 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
  674. [2015-11-29 14:21:07 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
  675. [2015-11-29 14:21:06 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
  676. [2015-11-29 14:21:06 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
  677. [2015-11-29 14:21:06 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
  678. [2015-11-29 14:21:06 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
  679. [2015-11-29 14:21:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
  680. [2015-11-29 14:21:05 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
  681. [2015-11-29 14:21:05 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
  682. [2015-11-29 14:21:04 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
  683. [2015-11-29 14:21:04 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
  684. [2015-11-29 14:21:04 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
  685. [2015-11-29 14:21:03 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
  686. [2015-11-29 14:21:01 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
  687. [2015-11-29 14:20:58 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
  688. [2015-11-29 14:20:58 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
  689. [2015-11-29 14:20:58 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
  690. [2015-11-29 14:20:58 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
  691. [2015-11-29 14:20:57 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
  692. [2015-11-29 14:20:57 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
  693. [2015-11-29 14:20:57 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
  694. [2015-11-26 14:41:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
  695. [2015-11-26 14:41:14 | 019,087,360 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll
  696. [2015-11-26 14:41:14 | 001,306,624 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
  697. [2015-11-26 14:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
  698. [2015-11-25 22:48:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
  699. [2015-11-25 17:25:28 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Day 1 Studios
  700. [2015-11-25 06:01:21 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
  701. [2015-11-25 06:01:20 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
  702. [2015-11-25 06:01:19 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
  703. [2015-11-25 06:01:19 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
  704. [2015-11-25 06:01:19 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
  705. [2015-11-25 06:01:18 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
  706. [2015-11-25 06:01:17 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
  707. [2015-11-25 06:01:17 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
  708. [2015-11-25 06:01:15 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
  709. [2015-11-25 06:01:15 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
  710. [2015-11-25 06:01:15 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
  711. [2015-11-25 06:01:14 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
  712. [2015-11-25 06:01:12 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
  713. [2015-11-25 06:01:09 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
  714. [2015-11-25 06:01:09 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
  715. [2015-11-25 06:01:08 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
  716. [2015-11-25 06:01:08 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
  717. [2015-11-25 06:01:08 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
  718. [2015-11-25 06:01:08 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
  719. [2015-11-25 06:01:07 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
  720. [2015-11-24 05:36:41 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Desktop\My website
  721. [2015-11-23 13:48:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Fall
  722. [2015-11-23 13:48:09 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Silver Style Entertainment
  723. [2015-11-23 13:42:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Silver Style Entertainment
  724. [2015-11-21 14:18:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\directx
  725. [2015-11-20 15:41:17 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Thief
  726. [2015-11-19 00:24:27 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
  727. [2015-11-19 00:24:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
  728. [2015-11-17 13:04:47 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Darksiders
  729. [2015-11-17 13:03:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
  730. [2015-11-17 13:03:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\THQ
  731. [2015-11-12 17:22:54 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
  732. [2015-11-12 17:22:54 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
  733. [2015-11-12 17:22:54 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
  734. [2015-11-12 17:22:54 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
  735. [2015-11-12 17:22:52 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
  736. [2015-11-12 17:22:52 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
  737. [2015-11-12 17:22:52 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
  738. [2015-11-12 17:22:52 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
  739. [2015-11-12 17:22:52 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
  740. [2015-11-12 17:22:52 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
  741. [2015-11-12 17:22:52 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
  742. [2015-11-12 17:22:52 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
  743. [2015-11-12 17:22:50 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
  744. [2015-11-12 17:22:50 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
  745. [2015-11-12 17:22:50 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
  746. [2015-11-12 17:22:50 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
  747. [2015-11-12 17:22:49 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
  748. [2015-11-12 17:22:49 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
  749. [2015-11-12 17:22:46 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
  750. [2015-11-12 17:22:46 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
  751. [2015-11-12 17:22:45 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
  752. [2015-11-12 17:22:45 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
  753. [2015-11-12 17:22:45 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
  754. [2015-11-12 17:22:44 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
  755. [2015-11-12 17:22:44 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
  756. [2015-11-12 17:22:44 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
  757. [2015-11-12 17:22:44 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
  758. [2015-11-12 17:22:44 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
  759. [2015-11-12 17:22:44 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
  760. [2015-11-12 17:22:43 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
  761. [2015-11-12 17:22:43 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
  762. [2015-11-12 17:22:43 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
  763. [2015-11-12 17:22:43 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
  764. [2015-11-12 17:22:41 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
  765. [2015-11-12 17:22:41 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
  766. [2015-11-12 17:22:41 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
  767. [2015-11-12 17:22:41 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
  768. [2015-11-12 17:22:41 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
  769. [2015-11-12 17:22:41 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
  770. [2015-11-12 17:22:40 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
  771. [2015-11-12 17:22:40 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
  772. [2015-11-12 17:22:38 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
  773. [2015-11-12 17:22:38 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
  774. [2015-11-12 17:22:38 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
  775. [2015-11-12 17:22:38 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
  776. [2015-11-12 17:22:37 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
  777. [2015-11-12 17:22:37 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
  778. [2015-11-12 17:22:37 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
  779. [2015-11-12 17:22:37 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
  780. [2015-11-12 17:22:36 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
  781. [2015-11-12 17:22:36 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
  782. [2015-11-12 17:22:36 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
  783. [2015-11-12 17:22:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
  784. [2015-11-12 17:22:35 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
  785. [2015-11-12 17:22:35 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
  786. [2015-11-12 17:22:35 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
  787. [2015-11-12 17:22:35 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
  788. [2015-11-12 17:22:33 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
  789. [2015-11-12 17:22:33 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
  790. [2015-11-12 17:22:33 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
  791. [2015-11-12 17:22:33 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
  792. [2015-11-12 17:22:31 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
  793. [2015-11-12 17:22:31 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
  794. [2015-11-12 17:22:31 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
  795. [2015-11-12 17:22:31 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
  796. [2015-11-12 17:22:30 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
  797. [2015-11-12 17:22:30 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
  798. [2015-11-12 17:22:30 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
  799. [2015-11-12 17:22:30 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
  800. [2015-11-12 17:22:29 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
  801. [2015-11-12 17:22:29 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
  802. [2015-11-12 17:22:29 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
  803. [2015-11-12 17:22:29 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
  804. [2015-11-12 17:22:28 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
  805. [2015-11-12 17:22:28 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
  806. [2015-11-12 17:22:28 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
  807. [2015-11-12 17:22:28 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
  808. [2015-11-12 17:22:26 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
  809. [2015-11-12 17:22:26 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
  810. [2015-11-12 17:22:24 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
  811. [2015-11-12 17:22:24 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
  812. [2015-11-12 17:22:24 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
  813. [2015-11-12 17:22:24 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
  814. [2015-11-12 17:22:23 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
  815. [2015-11-12 17:22:23 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
  816. [2015-11-12 17:22:22 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
  817. [2015-11-12 17:22:22 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
  818. [2015-11-12 17:22:22 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
  819. [2015-11-12 17:22:22 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
  820. [2015-11-12 17:22:22 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
  821. [2015-11-12 17:22:22 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
  822. [2015-11-12 17:22:21 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
  823. [2015-11-12 17:22:21 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
  824. [2015-11-12 17:22:20 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
  825. [2015-11-12 17:22:20 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
  826. [2015-11-12 17:22:20 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
  827. [2015-11-12 17:22:20 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
  828. [2015-11-12 17:22:20 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
  829. [2015-11-12 17:22:20 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
  830. [2015-11-12 17:22:20 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
  831. [2015-11-12 17:22:20 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
  832. [2015-11-12 17:22:19 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
  833. [2015-11-12 17:22:19 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
  834. [2015-11-12 17:22:10 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
  835. [2015-11-12 17:22:10 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
  836. [2015-11-12 17:22:06 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
  837. [2015-11-12 17:22:06 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
  838. [2015-11-12 17:22:06 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
  839. [2015-11-12 17:22:06 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
  840. [2015-11-12 17:22:04 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
  841. [2015-11-12 17:22:04 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
  842. [2015-11-12 17:22:01 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
  843. [2015-11-12 17:22:01 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
  844. [2015-11-12 17:21:59 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
  845. [2015-11-12 17:21:59 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
  846. [2015-11-12 17:21:57 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
  847. [2015-11-12 17:21:57 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
  848. [2015-11-12 17:21:49 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
  849. [2015-11-12 17:21:49 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
  850. [2015-11-12 17:21:46 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
  851. [2015-11-12 17:21:46 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
  852. [2015-11-12 16:48:52 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\11bitstudios
  853. [2015-11-12 12:14:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  854. [2015-11-12 07:18:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
  855. [2015-11-10 22:35:04 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Fallout
  856. [2015-11-10 14:19:33 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Dream_2
  857. [2015-11-10 14:09:48 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\BadDream
  858. [2015-11-08 12:06:15 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chłopaki Nie Płaczą
  859. [2015-11-08 12:06:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chłopaki Nie Płaczą
  860. [2015-11-08 02:18:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
  861. [2015-11-08 01:19:06 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\PACE Anti-Piracy
  862. [2015-11-08 01:19:06 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\PACE Anti-Piracy
  863. [2015-11-08 01:19:06 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy
  864. [2015-11-08 01:19:03 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Adobe
  865. [2015-11-08 01:03:01 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
  866. [2015-11-08 01:00:30 | 000,056,208 | ---- | C] (Rovi Corporation) -- C:\Windows\SysNative\drivers\PxHlpa64.sys
  867. [2015-11-08 01:00:30 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdralw2k.sys
  868. [2015-11-08 01:00:30 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdr4_xp.sys
  869. [2015-11-08 01:00:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sonic Shared
  870. [2015-11-08 01:00:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
  871. [2015-11-08 01:00:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\My Company Name
  872. [2015-11-07 22:36:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ffmpeg For Audacity
  873. [2015-11-07 21:53:01 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\obs-studio
  874. [2015-11-07 21:52:29 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform
  875. [2015-11-07 20:09:42 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Bioshock
  876. [2015-11-07 20:09:42 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Bioshock
  877. [2015-11-06 11:59:16 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Bluestacks
  878. [2015-11-05 15:20:16 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Doublefine
  879. [2015-11-05 15:19:50 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
  880. [2015-11-05 15:19:50 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
  881. [2015-11-05 15:19:49 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
  882. [2015-11-05 15:19:48 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
  883. [2015-11-05 15:19:46 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
  884. [2015-11-05 15:19:45 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
  885. [2015-11-05 15:19:44 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
  886. [2015-11-04 19:33:12 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\TeamViewer
  887. [2015-11-04 19:17:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
  888. [2015-11-04 14:10:35 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Desktop\Angielski
  889. [2015-11-04 11:24:54 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Lucius
  890. [2015-11-03 17:03:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
  891. [2015-11-01 14:32:55 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
  892. [2015-11-01 14:32:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Drakensang Online
  893. [2015-10-27 07:16:33 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Unity
  894. [2015-10-27 07:16:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Unity
  895. [2015-10-27 07:15:57 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2015 Tools for Unity
  896. [2015-10-27 07:15:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
  897. [2015-10-27 07:09:24 | 000,000,000 | ---D | C] -- C:\ProgramData\VsTelemetry
  898. [2015-10-27 07:07:43 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Unity Projects
  899. [2015-10-27 06:37:41 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Desktop\Tworzenie gier
  900. [2015-10-27 06:36:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.2.2f1 (64-bit)
  901. [2015-10-27 06:06:38 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Disc_Soft_Ltd
  902. [2015-10-26 10:50:24 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Aspyr
  903. [2015-10-26 10:50:24 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Aspyr
  904. [2015-10-26 10:45:13 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
  905. [2015-10-26 10:45:13 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
  906. [2015-10-26 10:45:12 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
  907. [2015-10-26 10:43:08 | 000,030,264 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtlitescsibus.sys
  908. [2015-10-26 10:43:07 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\DAEMON Tools Lite
  909. [2015-10-26 10:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
  910. [2015-10-26 10:43:04 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
  911. [2015-10-26 10:42:47 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
  912. [2015-10-22 21:26:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
  913. [2015-10-22 21:26:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Xbox 360 Accessories
  914. [2015-10-22 20:33:53 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\driveridentifier
  915. [2015-10-22 19:05:09 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Ubisoft
  916. [2015-10-22 04:34:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
  917. [2015-10-22 04:34:22 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
  918. [2015-10-21 10:43:30 | 000,000,000 | ---D | C] -- C:\Program Files\Andy
  919. [2015-10-21 10:43:29 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Andy
  920. [2015-10-21 10:43:23 | 000,000,000 | R--D | C] -- C:\Users\Wn3ku\AppData\Roaming\Andy_45.5_Online
  921. [2015-10-20 19:17:32 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
  922. [2015-10-20 19:17:30 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\FluxSoftware
  923. [2015-10-20 17:27:47 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\4A Games
  924. [2015-10-20 14:58:38 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\4A Games
  925. [2015-10-19 15:52:14 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Steven_Colling
  926. [2015-10-15 00:09:44 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Twine
  927. [2015-10-15 00:09:43 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Twine
  928. [2015-10-15 00:09:34 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twine 2
  929. [2015-10-14 12:18:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
  930. [2015-10-14 00:21:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Otchlan 1.3
  931. [2015-10-13 23:33:49 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\CodeBlocks
  932. [2015-10-13 23:33:30 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
  933. [2015-10-13 23:33:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
  934. [2015-10-13 23:06:42 | 000,000,000 | -H-D | C] -- C:\$Windows.~BT
  935. [2015-10-13 23:02:56 | 000,000,000 | ---D | C] -- C:\ESD
  936. [2015-10-13 22:26:07 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacksSetup
  937. [2015-10-13 21:11:57 | 000,000,000 | -H-D | C] -- C:\$Windows.~WS
  938. [2015-10-13 19:51:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
  939. [2015-10-13 19:48:03 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
  940. [2015-10-13 19:48:02 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
  941. [2015-10-13 19:48:01 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  942. [2015-10-13 19:48:01 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  943. [2015-10-13 19:48:00 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  944. [2015-10-11 21:49:58 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\The Witcher
  945. [2015-10-11 21:49:58 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\The Witcher
  946. [2015-10-11 18:57:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wiedźmin Edycja rozszerzona
  947. [2015-10-11 18:36:36 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\The Witcher
  948. [2015-10-09 17:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  949. [2015-10-09 16:23:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
  950. [2015-10-09 16:18:56 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Image-Line
  951. [2015-10-09 16:18:55 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\Documents\Image-Line
  952. [2015-10-09 16:18:52 | 000,000,000 | ---D | C] -- C:\Program Files\Image-Line
  953. [2015-10-09 16:18:49 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
  954. [2015-10-09 16:18:35 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\FlowStone
  955. [2015-10-09 16:18:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DSPRobotics
  956. [2015-10-09 16:15:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Image-Line
  957. [2015-10-08 19:08:01 | 000,000,000 | R--D | C] -- C:\Users\Wn3ku\Dropbox
  958. [2015-10-08 19:06:27 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Roaming\Dropbox
  959. [2015-10-08 18:59:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dropbox
  960. [2015-10-08 18:59:18 | 000,000,000 | ---D | C] -- C:\Users\Wn3ku\AppData\Local\Dropbox
  961. [2015-10-08 18:59:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Dropbox
  962. [2015-10-08 18:47:37 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  963. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  964.  
  965. [color=#E56717]========== Files - Modified Within 60 Days ==========[/color]
  966.  
  967. [2015-12-06 11:22:58 | 000,000,139 | ---- | M] () -- C:\Windows\Reimage.ini
  968. [2015-12-06 11:04:07 | 000,001,150 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineUA.job
  969. [2015-12-06 10:44:19 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  970. [2015-12-06 10:09:06 | 000,000,000 | ---- | M] () -- C:\Users\Wn3ku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
  971. [2015-12-06 10:06:36 | 000,001,146 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineCore.job
  972. [2015-12-06 10:06:36 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  973. [2015-12-06 10:06:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  974. [2015-12-06 10:06:16 | 536,272,895 | -HS- | M] () -- C:\hiberfil.sys
  975. [2015-12-06 10:05:30 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  976. [2015-12-06 10:05:30 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  977. [2015-12-05 21:00:10 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
  978. [2015-12-05 21:00:10 | 000,116,736 | ---- | M] (Stas'M Corp.) -- C:\Windows\SysNative\rdpwrap.dll
  979. [2015-12-05 21:00:10 | 000,020,554 | ---- | M] () -- C:\Windows\SysNative\rdpwrap.ini
  980. [2015-12-05 20:08:37 | 000,000,006 | --S- | M] () -- C:\ProgramData\3cbe300381af2d44f5246e803e5f9faca00b9e2a
  981. [2015-12-05 14:58:22 | 000,236,832 | ---- | M] (EasyAntiCheat Ltd) -- C:\Windows\SysWow64\EasyAntiCheat.exe
  982. [2015-12-05 11:33:42 | 000,002,166 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Discord.lnk
  983. [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\Users\Wn3ku\RDPManager.exe
  984. [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\Program Files (x86)\RDPManager.exe
  985. [2015-12-05 05:21:12 | 000,442,368 | -HS- | M] () -- C:\Windows\SysWow64\clientmonitor.exe
  986. [2015-12-04 06:13:34 | 004,968,136 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  987. [2015-12-03 23:53:38 | 000,021,832 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
  988. [2015-12-03 14:10:26 | 000,000,940 | ---- | M] () -- C:\Users\Public\Desktop\Wiedźmin 2 Edycja Rozszerzona.lnk
  989. [2015-12-03 08:48:32 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  990. [2015-12-02 09:55:41 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Jade Empire.lnk
  991. [2015-12-01 01:43:34 | 001,669,606 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  992. [2015-12-01 01:43:34 | 000,740,196 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  993. [2015-12-01 01:43:34 | 000,654,028 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  994. [2015-12-01 01:43:34 | 000,155,770 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  995. [2015-12-01 01:43:34 | 000,121,900 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  996. [2015-12-01 01:02:24 | 000,012,815 | ---- | M] () -- C:\Users\Wn3ku\Desktop\prezentacja informatyka.odp
  997. [2015-11-30 17:15:19 | 000,001,153 | ---- | M] () -- C:\Users\Wn3ku\Desktop\SourceTree.lnk
  998. [2015-11-29 23:41:59 | 000,050,231 | ---- | M] () -- C:\Users\Wn3ku\AppData\Local\recently-used.xbel
  999. [2015-11-29 23:19:12 | 000,000,179 | ---- | M] () -- C:\Users\Wn3ku\.gitconfig
  1000. [2015-11-29 23:19:12 | 000,000,070 | ---- | M] () -- C:\Users\Wn3ku\mercurial.ini
  1001. [2015-11-29 23:12:48 | 000,000,554 | ---- | M] () -- C:\Users\Wn3ku\.bash_history
  1002. [2015-11-29 20:17:31 | 000,000,969 | ---- | M] () -- C:\Users\Wn3ku\Desktop\ToonCar.lnk
  1003. [2015-11-26 14:41:11 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
  1004. [2015-11-26 14:41:11 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
  1005. [2015-11-26 14:41:11 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
  1006. [2015-11-26 14:41:10 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
  1007. [2015-11-24 05:34:44 | 013,147,844 | ---- | M] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne CSS3 400dpi KOLOR.pdf
  1008. [2015-11-24 05:34:29 | 012,293,292 | ---- | M] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne LINUX wyd3 400dpi KOLOR.pdf
  1009. [2015-11-24 05:33:49 | 010,094,591 | ---- | M] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne HTML5 400dpi KOLOR.pdf
  1010. [2015-11-23 18:39:41 | 000,001,399 | ---- | M] () -- C:\Users\Public\Desktop\The Fall.lnk
  1011. [2015-11-21 19:26:03 | 000,000,965 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Adobe Photoshop CC 2015.lnk
  1012. [2015-11-17 13:21:16 | 000,002,105 | ---- | M] () -- C:\Users\Public\Desktop\Darksiders Comic.lnk
  1013. [2015-11-17 13:21:16 | 000,001,957 | ---- | M] () -- C:\Users\Public\Desktop\Darksiders Soundtrack.lnk
  1014. [2015-11-14 18:18:00 | 013,642,597 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Beginning Responsive Web Design with HTML5 and CSS3.pdf
  1015. [2015-11-08 12:21:15 | 000,000,657 | ---- | M] () -- C:\Users\Wn3ku\Desktop\BoyzDontCry — skrót.lnk
  1016. [2015-11-01 14:32:55 | 000,001,968 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Drakensang Online.lnk
  1017. [2015-10-29 16:24:42 | 000,045,824 | ---- | M] () -- C:\Users\Wn3ku\Documents\BATMAN QUOTE.jpg
  1018. [2015-10-26 10:43:08 | 000,030,264 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtlitescsibus.sys
  1019. [2015-10-26 09:09:12 | 000,002,693 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
  1020. [2015-10-26 09:09:12 | 000,001,696 | ---- | M] () -- C:\Users\Public\Desktop\Recuva.lnk
  1021. [2015-10-26 09:09:12 | 000,001,680 | ---- | M] () -- C:\Users\Public\Desktop\ZTE MF823.lnk
  1022. [2015-10-26 09:09:12 | 000,001,283 | ---- | M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk
  1023. [2015-10-26 09:09:12 | 000,001,141 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  1024. [2015-10-26 09:09:12 | 000,000,937 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
  1025. [2015-10-26 09:09:12 | 000,000,860 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  1026. [2015-10-26 09:09:12 | 000,000,849 | ---- | M] () -- C:\Users\Public\Desktop\FileZilla Client.lnk
  1027. [2015-10-26 09:09:12 | 000,000,803 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
  1028. [2015-10-26 09:09:12 | 000,000,748 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk
  1029. [2015-10-26 09:09:12 | 000,000,736 | ---- | M] () -- C:\Users\Public\Desktop\Nexus Mod Manager.lnk
  1030. [2015-10-26 09:08:44 | 000,001,811 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Spotify.lnk
  1031. [2015-10-26 09:08:44 | 000,001,031 | ---- | M] () -- C:\Users\Wn3ku\Desktop\PhotoScape.lnk
  1032. [2015-10-26 09:08:44 | 000,000,876 | ---- | M] () -- C:\Users\Wn3ku\Desktop\The Witcher.lnk
  1033. [2015-10-26 09:08:44 | 000,000,724 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Sublime Text 3.lnk
  1034. [2015-10-26 09:08:44 | 000,000,720 | ---- | M] () -- C:\Users\Wn3ku\Desktop\screenSHU.lnk
  1035. [2015-10-26 09:08:44 | 000,000,680 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Steam.lnk
  1036. [2015-10-26 09:08:43 | 000,002,275 | ---- | M] () -- C:\Users\Wn3ku\Desktop\DevDocs.lnk
  1037. [2015-10-26 09:08:43 | 000,001,144 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Battle.net.lnk
  1038. [2015-10-26 09:08:43 | 000,001,053 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Notepad++.lnk
  1039. [2015-10-26 09:08:43 | 000,000,932 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Evernote.lnk
  1040. [2015-10-26 09:08:43 | 000,000,840 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Git GUI.lnk
  1041. [2015-10-26 09:08:43 | 000,000,788 | ---- | M] () -- C:\Users\Wn3ku\Desktop\CodeBlocks.lnk
  1042. [2015-10-26 09:08:43 | 000,000,692 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Origin.lnk
  1043. [2015-10-26 09:08:43 | 000,000,656 | ---- | M] () -- C:\Users\Wn3ku\Desktop\Node.js.lnk
  1044. [2015-10-26 08:47:14 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  1045. [2015-10-26 01:24:43 | 000,033,364 | ---- | M] () -- C:\Users\Wn3ku\Documents\49d119b4467f8df98d9f42cd33c973c9.jpg
  1046. [2015-10-13 23:20:07 | 000,001,908 | ---- | M] () -- C:\Windows\diagwrn.xml
  1047. [2015-10-13 23:20:07 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
  1048. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  1049.  
  1050. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  1051.  
  1052. [2015-12-06 11:19:42 | 000,000,139 | ---- | C] () -- C:\Windows\Reimage.ini
  1053. [2015-12-05 21:00:10 | 000,020,554 | ---- | C] () -- C:\Windows\SysNative\rdpwrap.ini
  1054. [2015-12-05 20:58:28 | 000,442,368 | -HS- | C] () -- C:\Program Files (x86)\RDPManager.exe
  1055. [2015-12-05 20:58:28 | 000,442,368 | -HS- | C] () -- C:\Windows\SysWow64\clientmonitor.exe
  1056. [2015-12-05 20:57:43 | 000,442,368 | -HS- | C] () -- C:\Users\Wn3ku\RDPManager.exe
  1057. [2015-12-05 20:08:37 | 000,000,006 | --S- | C] () -- C:\ProgramData\3cbe300381af2d44f5246e803e5f9faca00b9e2a
  1058. [2015-12-05 11:33:38 | 000,002,166 | ---- | C] () -- C:\Users\Wn3ku\Desktop\Discord.lnk
  1059. [2015-12-03 14:10:26 | 000,000,940 | ---- | C] () -- C:\Users\Public\Desktop\Wiedźmin 2 Edycja Rozszerzona.lnk
  1060. [2015-12-02 09:55:41 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Jade Empire.lnk
  1061. [2015-12-01 01:02:22 | 000,012,815 | ---- | C] () -- C:\Users\Wn3ku\Desktop\prezentacja informatyka.odp
  1062. [2015-11-30 17:15:19 | 000,001,153 | ---- | C] () -- C:\Users\Wn3ku\Desktop\SourceTree.lnk
  1063. [2015-11-29 23:41:59 | 000,050,231 | ---- | C] () -- C:\Users\Wn3ku\AppData\Local\recently-used.xbel
  1064. [2015-11-29 23:19:12 | 000,000,070 | ---- | C] () -- C:\Users\Wn3ku\mercurial.ini
  1065. [2015-11-29 23:19:11 | 000,000,179 | ---- | C] () -- C:\Users\Wn3ku\.gitconfig
  1066. [2015-11-29 23:12:48 | 000,000,554 | ---- | C] () -- C:\Users\Wn3ku\.bash_history
  1067. [2015-11-29 20:17:31 | 000,000,969 | ---- | C] () -- C:\Users\Wn3ku\Desktop\ToonCar.lnk
  1068. [2015-11-24 05:33:35 | 013,147,844 | ---- | C] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne CSS3 400dpi KOLOR.pdf
  1069. [2015-11-24 05:33:25 | 012,293,292 | ---- | C] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne LINUX wyd3 400dpi KOLOR.pdf
  1070. [2015-11-24 05:32:54 | 010,094,591 | ---- | C] () -- C:\Users\Wn3ku\Desktop\HELION Tablice Informatyczne HTML5 400dpi KOLOR.pdf
  1071. [2015-11-23 13:48:09 | 000,001,399 | ---- | C] () -- C:\Users\Public\Desktop\The Fall.lnk
  1072. [2015-11-19 00:35:39 | 000,000,965 | ---- | C] () -- C:\Users\Wn3ku\Desktop\Adobe Photoshop CC 2015.lnk
  1073. [2015-11-19 00:32:23 | 000,000,933 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
  1074. [2015-11-19 00:24:13 | 000,001,530 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
  1075. [2015-11-17 13:03:55 | 000,002,105 | ---- | C] () -- C:\Users\Public\Desktop\Darksiders Comic.lnk
  1076. [2015-11-17 13:03:55 | 000,001,957 | ---- | C] () -- C:\Users\Public\Desktop\Darksiders Soundtrack.lnk
  1077. [2015-11-16 23:26:21 | 013,642,597 | ---- | C] () -- C:\Users\Wn3ku\Desktop\Beginning Responsive Web Design with HTML5 and CSS3.pdf
  1078. [2015-11-08 12:21:15 | 000,000,657 | ---- | C] () -- C:\Users\Wn3ku\Desktop\BoyzDontCry — skrót.lnk
  1079. [2015-11-08 00:59:13 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
  1080. [2015-11-01 14:32:55 | 000,001,968 | ---- | C] () -- C:\Users\Wn3ku\Desktop\Drakensang Online.lnk
  1081. [2015-10-29 16:24:37 | 000,045,824 | ---- | C] () -- C:\Users\Wn3ku\Documents\BATMAN QUOTE.jpg
  1082. [2015-10-26 01:24:39 | 000,033,364 | ---- | C] () -- C:\Users\Wn3ku\Documents\49d119b4467f8df98d9f42cd33c973c9.jpg
  1083. [2015-10-22 04:34:22 | 000,001,696 | ---- | C] () -- C:\Users\Public\Desktop\Recuva.lnk
  1084. [2015-10-13 23:33:30 | 000,000,788 | ---- | C] () -- C:\Users\Wn3ku\Desktop\CodeBlocks.lnk
  1085. [2015-10-13 23:06:40 | 000,001,908 | ---- | C] () -- C:\Windows\diagwrn.xml
  1086. [2015-10-13 23:06:40 | 000,001,908 | ---- | C] () -- C:\Windows\diagerr.xml
  1087. [2015-10-11 19:01:40 | 000,000,876 | ---- | C] () -- C:\Users\Wn3ku\Desktop\The Witcher.lnk
  1088. [2015-10-08 18:59:23 | 000,001,150 | ---- | C] () -- C:\Windows\tasks\DropboxUpdateTaskMachineUA.job
  1089. [2015-10-08 18:59:21 | 000,001,146 | ---- | C] () -- C:\Windows\tasks\DropboxUpdateTaskMachineCore.job
  1090. [2015-10-08 18:47:39 | 000,000,860 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
  1091. [2015-09-07 13:42:51 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
  1092. [2015-08-19 23:34:54 | 000,006,789 | ---- | C] () -- C:\Users\Wn3ku\.v8flags.3.28.71.19.Wn3ku.json
  1093. [2015-06-22 15:20:11 | 037,741,712 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll
  1094. [2015-06-20 04:46:16 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe
  1095. [2015-06-20 01:49:35 | 000,641,024 | ---- | C] () -- C:\Windows\SysWow64\ficvdec_x86.dll
  1096. [2015-06-20 00:16:28 | 001,640,596 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  1097.  
  1098. [color=#E56717]========== ZeroAccess Check ==========[/color]
  1099.  
  1100. [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  1101.  
  1102. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1103.  
  1104. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1105.  
  1106. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  1107.  
  1108. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1109.  
  1110. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1111. "" = C:\Windows\SysNative\shell32.dll -- [2009-07-14 02:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation)
  1112. "ThreadingModel" = Apartment
  1113.  
  1114. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1115. "" = %SystemRoot%\system32\shell32.dll -- [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
  1116. "ThreadingModel" = Apartment
  1117.  
  1118. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  1119. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  1120. "ThreadingModel" = Free
  1121.  
  1122. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  1123. "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
  1124. "ThreadingModel" = Free
  1125.  
  1126. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  1127. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  1128. "ThreadingModel" = Both
  1129.  
  1130. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  1131.  
  1132. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!