Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13.01.2018 Uruchomiony przez Emil (administrator) LAPTOP-PH67M221 (13-01-2018 12:15:39) Uruchomiony z C:\Users\Emil\Downloads Załadowane profile: Emil (Dostępne profile: Emil) Platform: Windows 10 Home Wersja 1703 15063.850 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\My Connection\ApplicationController.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (www.somedomainthatnotexists.com) C:\Program Files (x86)\System Native\Main Services\service_box.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.257.0_x64__kzf8qxf38zg5c\SkypeHost.exe () C:\OEM\Preload\FubTracking\FubTracking.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe () C:\Users\Emil\AppData\Roaming\f11d0f03a4d044248fe2bc1573200167\TSFVNBJDUY.exe () C:\ProgramData\36bf245a8192469d8fea834f91665f1c\1offb84.exe () C:\Users\Emil\AppData\Roaming\e841298c61b949b987693a38cc561b17\DEEsvTMqr5.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (www.xmrig.com) C:\Users\Emil\AppData\Local\PCBooster\booster.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe (Intel Corporation) C:\Windows\System32\igfxext.exe () C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe () C:\Windows\Temp\gA58C.tmp.exe (acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-07] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation) HKLM\...\Run: [MRT] => C:\WINDOWS\system32\MRT-KB890830.exe [129365736 2018-01-12] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [booster] => C:\Users\Emil\AppData\Local\PCBooster\booster.exe [852992 2018-01-07] (www.xmrig.com) HKLM\...\RunOnce: [LAPTOP-PH67M221] => C:\WINDOWS\TEMP\g8570.tmp.exe [209408 2018-01-13] () <==== UWAGA HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== UWAGA HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== UWAGA HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== UWAGA HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== UWAGA HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== UWAGA HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== UWAGA HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== UWAGA HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== UWAGA HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== UWAGA HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== UWAGA HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== UWAGA HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== UWAGA HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== UWAGA HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== UWAGA HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== UWAGA HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== UWAGA HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== UWAGA HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== UWAGA HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== UWAGA HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== UWAGA HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== UWAGA HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== UWAGA HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== UWAGA HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== UWAGA HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== UWAGA HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== UWAGA HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== UWAGA HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== UWAGA HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== UWAGA HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== UWAGA HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== UWAGA HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd) HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [XSSOFOQIQD.exe] => C:\Users\Emil\AppData\Local\Temp\76e207fce95e49449ef04c1659849c71\XSSOFOQIQD.exe <==== UWAGA HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [TSFVNBJDUY.exe] => C:\Users\Emil\AppData\Roaming\f11d0f03a4d044248fe2bc1573200167\TSFVNBJDUY.exe [570880 2018-01-11] () HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [1offb84.exe] => C:\ProgramData\36bf245a8192469d8fea834f91665f1c\1offb84.exe [1577984 2018-01-12] () HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [DEEsvTMqr5.exe] => C:\Users\Emil\AppData\Roaming\e841298c61b949b987693a38cc561b17\DEEsvTMqr5.exe [523264 2018-01-12] () HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Run: [BROTNEHTDJ.exe] => C:\Users\Emil\AppData\Local\Temp\IMHJKPDVQI\BROTNEHTDJ.exe <==== UWAGA HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\Policies\Explorer: [HideSCAVolume] 0 HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\MountPoints2: {2d1e4a3c-67ec-11e7-9dfd-54ab3abfe915} - "F:\setup.exe" HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\...\MountPoints2: {8f0f58bd-90ea-11e7-9e11-54ab3abfe915} - "E:\HiSuiteDownLoader.exe" Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-09-25] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (McAfee, Inc.) GroupPolicy: Ograniczenia <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{04a23622-107f-417c-8361-b1ef3e6e23f2}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{178678cf-1ec5-4aeb-833f-f89587024ab7}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{dbbf9db0-56ad-4631-b98a-46ab3cfd876f}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131602728106460238&GUID=64A68400-C576-468B-84CC-3D46000B8742 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2400838556-3398951076-1685541893-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://page-ups.com/all/ BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security) BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-12-19] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2017-05-08] (Oracle Corporation) BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-04] (McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2017-05-08] (Oracle Corporation) BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2017-05-08] (Oracle Corporation) BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-04] (McAfee, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2017-05-08] (Oracle Corporation) Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security) Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-04] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-04] (McAfee, Inc.) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-04] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-04] (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2017-03-03] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2017-03-03] (McAfee, Inc.) FireFox: ======== FF DefaultProfile: zao9ohxy.default FF ProfilePath: C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default [2018-01-13] FF Homepage: Mozilla\Firefox\Profiles\zao9ohxy.default -> hxxp://page-ups.com/all/ FF Extension: (Amazon Assistant for Firefox) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\abb-acer@amazon.com [2016-11-25] [Przestarzałe] FF Extension: (Polski Language Pack) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\langpack-pl@firefox.mozilla.org.xpi [2017-12-09] [Przestarzałe] FF Extension: (NetVideoHunter) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\netvideohunter@netvideohunter.com [2017-05-08] [Przestarzałe] FF Extension: (Mozilla Partner Defaults) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\partnerdefaults@mozilla.com [2016-11-25] [Przestarzałe] FF Extension: (Adblock Plus) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-14] FF Extension: (Greasemonkey) - C:\Users\Emil\AppData\Roaming\Mozilla\Firefox\Profiles\zao9ohxy.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-12-12] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi FF Extension: (Brak nazwy) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [2018-01-07] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2017-03-14] [Przestarzałe] [Brak podpisu cyfrowego] FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-08] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2017-05-08] (Oracle Corporation) FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2017-03-03] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2017-05-08] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2017-03-03] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-12-19] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2017-10-18] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-01-03] (Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default [2018-01-13] CHR Extension: (Prezentacje) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15] CHR Extension: (Dokumenty) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15] CHR Extension: (Dysk Google) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-12] CHR Extension: (YouTube) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-12] CHR Extension: (Arkusze) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15] CHR Extension: (McAfee® WebAdvisor) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-01-02] CHR Extension: (Dokumenty Google offline) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-12] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-28] CHR Extension: (Quick Searcher) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2018-01-07] CHR Extension: (Gmail) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-12] CHR Extension: (Chrome Media Router) - C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-01-07] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ACTION_SVC; C:\Program Files (x86)\Mirillis\Action!\action_svc.exe [16064 2014-10-25] () R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278616 2017-03-20] (Acer Incorporated) S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761576 2017-12-25] (Microsoft Corporation) S3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1701840 2016-12-08] (Intel Security) [Brak podpisu cyfrowego] S2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [82968 2016-04-08] (Dashlane SAS) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd) R2 FLAME II HSPA USB MODEM Service; C:\Program Files (x86)\My Connection\ApplicationController.exe [574464 2015-09-24] () [Brak podpisu cyfrowego] S2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373712 2017-09-25] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Brak podpisu cyfrowego] R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Brak podpisu cyfrowego] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-06-24] (Intel Corporation) S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [Brak podpisu cyfrowego] U2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [604312 2018-01-04] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_6\McApExe.exe [989632 2017-01-23] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [353128 2015-11-27] (McAfee, Inc.) S2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.599\McCHSvc.exe [404376 2017-09-05] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.3.253.0\\McCSPServiceHost.exe [2053568 2016-11-16] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [1342904 2017-02-01] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [241040 2016-11-14] (McAfee, Inc.) [Brak podpisu cyfrowego] R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [383032 2016-11-14] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 mfevtp; C:\Windows\system32\mfevtps.exe [342768 2016-11-14] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1465840 2016-12-22] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation) R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1104304 2016-11-15] (Intel Security, Inc.) [Brak podpisu cyfrowego] R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-12-07] () R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [440224 2016-03-10] (Acer Incorporated) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [481696 2016-03-10] (Acer Incorporated) R2 service_box.exe; C:\Program Files (x86)\System Native\Main Services\service_box.exe [8254376 2018-01-10] (www.somedomainthatnotexists.com) <==== UWAGA S2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.) [Brak podpisu cyfrowego] S2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.) [Brak podpisu cyfrowego] S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.) [Brak podpisu cyfrowego] R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [291232 2016-02-01] (acer) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [88456 2016-11-18] (McAfee, Inc.) S1 cfywlan2; C:\WINDOWS\system32\DRIVERS\cfywlan2.sys [46088 2017-02-05] (Connectify) S1 cnnctfy4; C:\WINDOWS\system32\DRIVERS\cnnctfy4.sys [53216 2017-02-05] (Connectify) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-11-25] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-11-25] (Disc Soft Ltd) S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.) S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [216704 2016-08-02] (McAfee, Inc.) R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21408 2016-03-10] (Acer Incorporated) R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [484576 2016-11-18] (McAfee, Inc.) R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [366320 2016-11-18] (McAfee, Inc.) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85048 2016-11-18] (McAfee, Inc.) R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [518184 2016-11-18] (McAfee, Inc.) R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [916432 2016-11-18] (McAfee, Inc.) R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [498152 2016-10-24] (McAfee, Inc.) S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [109336 2016-10-24] (McAfee, Inc.) R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [110248 2016-11-18] (McAfee, Inc.) S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [111608 2017-02-14] (McAfee, Inc.) R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [254800 2016-11-18] (McAfee, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvacwu.inf_amd64_9d2734742a07f3cf\nvlddmkm.sys [14456920 2017-05-18] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation) S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14752 2016-03-10] (Acer Incorporated) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [410880 2015-07-03] (Realsil Semiconductor Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [203296 2017-04-19] (Duplex Secure Ltd) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.) R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [47784 2015-07-29] (Synaptics Incorporated) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-01-13 12:15 - 2018-01-13 12:17 - 000032917 _____ C:\Users\Emil\Downloads\FRST.txt 2018-01-13 09:12 - 2018-01-13 09:22 - 000000000 ____D C:\Program Files\rempl 2018-01-13 09:10 - 2018-01-13 09:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2018-01-13 09:03 - 2018-01-13 09:03 - 000016782 _____ C:\WINDOWS\System32\Tasks\Edittor 2018-01-13 00:20 - 2018-01-13 00:20 - 000001301 _____ C:\Users\Emil\Desktop\Google Chrome.lnk 2018-01-12 23:08 - 2018-01-12 23:12 - 000000000 ____D C:\Users\Emil\AppData\Local\IIS 2018-01-12 22:48 - 2018-01-13 09:31 - 000039474 _____ C:\Users\Emil\Downloads\Fixlog.txt 2018-01-12 22:42 - 2018-01-12 22:42 - 000016826 _____ C:\WINDOWS\System32\Tasks\GTA V DarkKeys 2018-01-12 22:42 - 2018-01-12 22:42 - 000000000 ____D C:\Users\Emil\AppData\Roaming\e841298c61b949b987693a38cc561b17 2018-01-12 22:42 - 2018-01-12 22:42 - 000000000 ____D C:\ProgramData\8ace5c0b87164e18a896c5799d988edc 2018-01-12 22:41 - 2018-01-12 22:41 - 000000000 ____D C:\ProgramData\36bf245a8192469d8fea834f91665f1c 2018-01-12 22:40 - 2018-01-13 08:54 - 000000008 __RSH C:\Users\Emil\ntuser.pol 2018-01-11 21:06 - 2018-01-11 21:06 - 000237872 _____ C:\Users\Emil\Downloads\OTL.Txt 2018-01-11 20:59 - 2018-01-11 20:59 - 000016908 _____ C:\WINDOWS\System32\Tasks\Audio Recorder for MS Backup 2018-01-11 19:48 - 2018-01-11 19:50 - 008198432 _____ (Malwarebytes) C:\Users\Emil\Downloads\Adwcleaner_7.0.6.0_www.INSTALKI.pl.exe 2018-01-11 19:47 - 2018-01-13 12:15 - 000000000 ____D C:\Users\Emil\Downloads\FRST-OlderVersion 2018-01-11 19:34 - 2018-01-11 19:34 - 000001236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2018-01-11 19:34 - 2018-01-11 19:34 - 000001224 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2018-01-11 19:27 - 2018-01-11 19:27 - 000015360 _____ (Hewlett-Packard) C:\Users\Emil\AppData\Roaming\xtexCalculator.exe 2018-01-11 19:27 - 2018-01-11 19:27 - 000002128 _____ C:\Users\Emil\AppData\Roaming\Microsoft\Windows\Start Menu\xtexCalculator.lnk 2018-01-11 19:26 - 2018-01-11 19:26 - 000000000 ____D C:\Program Files (x86)\System Native 2018-01-11 19:25 - 2018-01-11 19:25 - 000000000 ____D C:\Users\Emil\AppData\Roaming\System Native 2018-01-11 19:24 - 2018-01-11 20:35 - 000000000 ____D C:\Users\Emil\AppData\Roaming\f11d0f03a4d044248fe2bc1573200167 2018-01-11 19:24 - 2018-01-11 19:24 - 000004080 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateSecurityTaskMachine_JC 2018-01-11 19:21 - 2018-01-11 19:21 - 005845504 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2018-01-09 12:30 - 2018-01-09 12:30 - 000004080 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateSecurityTaskMachine_FG 2018-01-09 12:30 - 2018-01-09 12:30 - 000004020 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateSecurityTaskMachine_LS 2018-01-07 20:36 - 2018-01-07 20:36 - 000000000 ____D C:\Users\Emil\AppData\Local\SystemHealer 2018-01-07 20:36 - 2018-01-07 20:36 - 000000000 ____D C:\ProgramData\9f36251e-2241-1 2018-01-07 20:36 - 2018-01-07 20:36 - 000000000 ____D C:\ProgramData\9f36251e-2175-0 2018-01-07 20:34 - 2018-01-07 20:34 - 000000000 ____D C:\Users\Emil\AppData\Roaming\5a86b393bd42451c81677c26628c68c1 2018-01-07 20:32 - 2018-01-07 20:32 - 000000000 ____D C:\Users\Emil\AppData\Roaming\3frl1wuqkcr 2018-01-07 17:41 - 2018-01-07 17:41 - 000000000 ____D C:\Windat 2018-01-07 17:40 - 2018-01-13 11:59 - 000000266 __RSH C:\ProgramData\ntuser.pol 2018-01-07 17:40 - 2018-01-07 17:40 - 000000000 ___HD C:\ProgramData\{CB28D9D3-6B5D-4AFA-BA37-B4AFAABF70B8} 2018-01-07 17:39 - 2018-01-07 20:38 - 000000000 ____D C:\Program Files (x86)\foldershare 2018-01-07 17:39 - 2018-01-07 17:40 - 000003610 _____ C:\WINDOWS\System32\Tasks\Windows_Antimalware_Host 2018-01-07 17:39 - 2018-01-07 17:39 - 000004072 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateSecurityTaskMachine_IU 2018-01-07 17:39 - 2018-01-07 17:39 - 000000000 ___HD C:\ProgramData\{4FCEED6C-B7D9-405B-A844-C3DBF418BF87} 2018-01-07 17:39 - 2018-01-07 17:39 - 000000000 ____D C:\Users\Emil\AppData\Local\OneSystemCare 2018-01-07 17:39 - 2018-01-07 17:39 - 000000000 ____D C:\Users\Emil\AppData\Local\d3561c3a8e6f415dabf8e4de2b866b83 2018-01-07 17:38 - 2018-01-07 17:38 - 000000004 _____ C:\ProgramData\rwi.hhad 2018-01-07 17:38 - 2018-01-07 17:38 - 000000000 ___HD C:\ProgramData\MicrosoftCorporation 2018-01-07 17:37 - 2018-01-07 17:37 - 000000000 ____D C:\Users\Emil\AppData\Roaming\2qoursnbewd 2018-01-07 17:37 - 2018-01-07 17:37 - 000000000 ____D C:\Users\Emil\AppData\Local\AdService 2018-01-07 17:37 - 2018-01-07 17:37 - 000000000 ____D C:\ProgramData\dahhService 2018-01-07 17:36 - 2018-01-07 20:37 - 000000000 ____D C:\Program Files (x86)\Multitimer 2018-01-07 17:36 - 2018-01-07 17:40 - 000000000 ____D C:\Users\Emil\AppData\Roaming\Arkei-2153855b-801c-48e4-a6be-aa69cea0ada4 2018-01-07 17:36 - 2018-01-07 17:36 - 000002113 ___RS C:\Users\Public\Desktop\DАЕMОN Tools Litе.lnk 2018-01-07 17:36 - 2018-01-07 17:36 - 000002087 ___RS C:\Users\Emil\Desktop\Сrоssout Lаuncher.lnk 2018-01-07 17:36 - 2018-01-07 17:36 - 000002063 ___RS C:\Users\Public\Desktop\Маfia 2.lnk 2018-01-07 17:36 - 2018-01-07 17:36 - 000001323 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Сhrоmе.lnk 2018-01-07 17:36 - 2018-01-07 17:36 - 000001293 ___RS C:\Users\Public\Desktop\Gооglе Сhrome.lnk 2018-01-07 17:36 - 2018-01-07 17:36 - 000000000 __SHD C:\Users\Emil\AppData\Roaming\Smart 2018-01-07 17:36 - 2018-01-07 17:36 - 000000000 ____D C:\Users\Emil\AppData\Roaming\SPI 2018-01-07 17:35 - 2018-01-07 17:36 - 002848936 _____ (BitTorrent Inc.) C:\Users\Emil\Downloads\rldfasi17pe.iso 2018-01-07 17:35 - 2018-01-07 17:36 - 000000000 ____D C:\Users\Emil\AppData\Local\PCBooster 2018-01-07 00:36 - 2018-01-01 03:27 - 000074648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2018-01-07 00:36 - 2018-01-01 03:26 - 000107416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2018-01-07 00:36 - 2018-01-01 03:24 - 000102808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys 2018-01-07 00:36 - 2018-01-01 03:22 - 000119704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2018-01-07 00:36 - 2018-01-01 03:21 - 000587160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-01-07 00:36 - 2018-01-01 03:20 - 000036760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys 2018-01-07 00:36 - 2018-01-01 03:19 - 000730008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-01-07 00:36 - 2018-01-01 03:19 - 000047512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys 2018-01-07 00:36 - 2018-01-01 03:19 - 000027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2018-01-07 00:36 - 2018-01-01 03:16 - 002672024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-01-07 00:36 - 2018-01-01 03:15 - 000083352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2018-01-07 00:36 - 2018-01-01 03:03 - 000627584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2018-01-07 00:36 - 2018-01-01 03:03 - 000311704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2018-01-07 00:36 - 2018-01-01 02:52 - 000195768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2018-01-07 00:36 - 2018-01-01 02:50 - 000787704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-01-07 00:36 - 2018-01-01 02:49 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2018-01-07 00:36 - 2018-01-01 02:48 - 005828768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-01-07 00:36 - 2018-01-01 02:48 - 002167320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-01-07 00:36 - 2018-01-01 02:48 - 000073896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2018-01-07 00:36 - 2018-01-01 02:47 - 001998416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2018-01-07 00:36 - 2018-01-01 02:47 - 000433888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2018-01-07 00:36 - 2018-01-01 02:47 - 000186520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2018-01-07 00:36 - 2018-01-01 02:47 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshhyperv.dll 2018-01-07 00:36 - 2018-01-01 02:46 - 000702032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2018-01-07 00:36 - 2018-01-01 02:46 - 000087352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2018-01-07 00:36 - 2018-01-01 02:45 - 020374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-01-07 00:36 - 2018-01-01 02:45 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-01-07 00:36 - 2018-01-01 02:42 - 000480912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2018-01-07 00:36 - 2018-01-01 02:41 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgid.sys 2018-01-07 00:36 - 2018-01-01 02:40 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2018-01-07 00:36 - 2018-01-01 02:40 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsc.sys 2018-01-07 00:36 - 2018-01-01 02:40 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dmvsc.sys 2018-01-07 00:36 - 2018-01-01 02:40 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys 2018-01-07 00:36 - 2018-01-01 02:37 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-01-07 00:36 - 2018-01-01 02:37 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2018-01-07 00:36 - 2018-01-01 02:37 - 000038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2018-01-07 00:36 - 2018-01-01 02:35 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2018-01-07 00:36 - 2018-01-01 02:35 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll 2018-01-07 00:36 - 2018-01-01 02:35 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2018-01-07 00:36 - 2018-01-01 02:34 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2018-01-07 00:36 - 2018-01-01 02:33 - 001177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2018-01-07 00:36 - 2018-01-01 02:33 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll 2018-01-07 00:36 - 2018-01-01 02:33 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll 2018-01-07 00:36 - 2018-01-01 02:33 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssdpapi.dll 2018-01-07 00:36 - 2018-01-01 02:32 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-01-07 00:36 - 2018-01-01 02:32 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2018-01-07 00:36 - 2018-01-01 02:32 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2018-01-07 00:36 - 2018-01-01 02:32 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2018-01-07 00:36 - 2018-01-01 02:32 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3dlg.dll 2018-01-07 00:36 - 2018-01-01 02:31 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2018-01-07 00:36 - 2018-01-01 02:31 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2018-01-07 00:36 - 2018-01-01 02:31 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll 2018-01-07 00:36 - 2018-01-01 02:30 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2018-01-07 00:36 - 2018-01-01 02:30 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2018-01-07 00:36 - 2018-01-01 02:29 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2018-01-07 00:36 - 2018-01-01 02:29 - 001628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2018-01-07 00:36 - 2018-01-01 02:29 - 000969728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2018-01-07 00:36 - 2018-01-01 02:29 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-01-07 00:36 - 2018-01-01 02:28 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2018-01-07 00:36 - 2018-01-01 02:28 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2018-01-07 00:36 - 2018-01-01 02:28 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2018-01-07 00:36 - 2018-01-01 02:28 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2018-01-07 00:36 - 2018-01-01 02:27 - 000946176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2018-01-07 00:36 - 2018-01-01 02:27 - 000879104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2018-01-07 00:36 - 2018-01-01 02:27 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2018-01-07 00:36 - 2018-01-01 02:26 - 005964288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-01-07 00:36 - 2018-01-01 02:26 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2018-01-07 00:36 - 2018-01-01 02:26 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpbus.sys 2018-01-07 00:36 - 2018-01-01 02:24 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-01-07 00:36 - 2018-01-01 02:23 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-01-07 00:36 - 2018-01-01 02:22 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll 2018-01-07 00:36 - 2018-01-01 02:21 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2018-01-07 00:36 - 2018-01-01 02:21 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll 2018-01-07 00:36 - 2018-01-01 02:20 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2018-01-07 00:36 - 2018-01-01 02:20 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2018-01-07 00:36 - 2018-01-01 02:19 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll 2018-01-07 00:36 - 2018-01-01 02:18 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2018-01-07 00:36 - 2018-01-01 02:18 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll 2018-01-07 00:36 - 2018-01-01 02:18 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll 2018-01-07 00:36 - 2018-01-01 02:18 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll 2018-01-07 00:35 - 2018-01-01 07:03 - 000891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2018-01-07 00:35 - 2018-01-01 03:25 - 001065608 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-01-07 00:35 - 2018-01-01 03:25 - 000900880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-01-07 00:35 - 2018-01-01 03:24 - 008345496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-01-07 00:35 - 2018-01-01 03:24 - 002327448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2018-01-07 00:35 - 2018-01-01 03:24 - 001188544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-01-07 00:35 - 2018-01-01 03:24 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2018-01-07 00:35 - 2018-01-01 03:24 - 000135576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-01-07 00:35 - 2018-01-01 03:24 - 000105880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2018-01-07 00:35 - 2018-01-01 03:24 - 000052632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcw.sys 2018-01-07 00:35 - 2018-01-01 03:24 - 000033688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys 2018-01-07 00:35 - 2018-01-01 03:23 - 000456088 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2018-01-07 00:35 - 2018-01-01 03:23 - 000386456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2018-01-07 00:35 - 2018-01-01 03:22 - 001239448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2018-01-07 00:35 - 2018-01-01 03:22 - 001194784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-01-07 00:35 - 2018-01-01 03:22 - 000181912 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2018-01-07 00:35 - 2018-01-01 03:21 - 000063896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys 2018-01-07 00:35 - 2018-01-01 03:19 - 000546712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2018-01-07 00:35 - 2018-01-01 03:19 - 000164760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2018-01-07 00:35 - 2018-01-01 03:19 - 000054168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vdrvroot.sys 2018-01-07 00:35 - 2018-01-01 03:18 - 000110600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2018-01-07 00:35 - 2018-01-01 03:18 - 000057752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys 2018-01-07 00:35 - 2018-01-01 03:16 - 001107352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2018-01-07 00:35 - 2018-01-01 03:16 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2018-01-07 00:35 - 2018-01-01 03:15 - 001396680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-01-07 00:35 - 2018-01-01 03:14 - 000159640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2018-01-07 00:35 - 2018-01-01 03:09 - 000142744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2018-01-07 00:35 - 2018-01-01 03:09 - 000070224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys 2018-01-07 00:35 - 2018-01-01 03:08 - 001325960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-01-07 00:35 - 2018-01-01 03:07 - 000583688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll 2018-01-07 00:35 - 2018-01-01 02:52 - 023680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-01-07 00:35 - 2018-01-01 02:44 - 000411184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll 2018-01-07 00:35 - 2018-01-01 02:43 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2018-01-07 00:35 - 2018-01-01 02:42 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2018-01-07 00:35 - 2018-01-01 02:41 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll 2018-01-07 00:35 - 2018-01-01 02:40 - 000378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-01-07 00:35 - 2018-01-01 02:40 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll 2018-01-07 00:35 - 2018-01-01 02:40 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2018-01-07 00:35 - 2018-01-01 02:40 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-01-07 00:35 - 2018-01-01 02:40 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2018-01-07 00:35 - 2018-01-01 02:40 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys 2018-01-07 00:35 - 2018-01-01 02:40 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndisuio.sys 2018-01-07 00:35 - 2018-01-01 02:40 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2018-01-07 00:35 - 2018-01-01 02:40 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2018-01-07 00:35 - 2018-01-01 02:39 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-01-07 00:35 - 2018-01-01 02:39 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-01-07 00:35 - 2018-01-01 02:39 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2018-01-07 00:35 - 2018-01-01 02:39 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys 2018-01-07 00:35 - 2018-01-01 02:38 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-01-07 00:35 - 2018-01-01 02:38 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-01-07 00:35 - 2018-01-01 02:38 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2018-01-07 00:35 - 2018-01-01 02:38 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2018-01-07 00:35 - 2018-01-01 02:38 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2018-01-07 00:35 - 2018-01-01 02:38 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2018-01-07 00:35 - 2018-01-01 02:38 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll 2018-01-07 00:35 - 2018-01-01 02:37 - 023683072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-01-07 00:35 - 2018-01-01 02:37 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2018-01-07 00:35 - 2018-01-01 02:37 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys 2018-01-07 00:35 - 2018-01-01 02:37 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2018-01-07 00:35 - 2018-01-01 02:37 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-01-07 00:35 - 2018-01-01 02:37 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2018-01-07 00:35 - 2018-01-01 02:36 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll 2018-01-07 00:35 - 2018-01-01 02:35 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2018-01-07 00:35 - 2018-01-01 02:34 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2018-01-07 00:35 - 2018-01-01 02:33 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2018-01-07 00:35 - 2018-01-01 02:33 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2018-01-07 00:35 - 2018-01-01 02:33 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2018-01-07 00:35 - 2018-01-01 02:32 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 000970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2018-01-07 00:35 - 2018-01-01 02:32 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2018-01-07 00:35 - 2018-01-01 02:32 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2018-01-07 00:35 - 2018-01-01 02:31 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-01-07 00:35 - 2018-01-01 02:31 - 000934912 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2018-01-07 00:35 - 2018-01-01 02:31 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2018-01-07 00:35 - 2018-01-01 02:31 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2018-01-07 00:35 - 2018-01-01 02:31 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 020514304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 019337216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 012803584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 004719104 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2018-01-07 00:35 - 2018-01-01 02:30 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2018-01-07 00:35 - 2018-01-01 02:30 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 000755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 000552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2018-01-07 00:35 - 2018-01-01 02:29 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2018-01-07 00:35 - 2018-01-01 02:28 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2018-01-07 00:35 - 2018-01-01 02:27 - 006249472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-01-07 00:35 - 2018-01-01 02:26 - 011888640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-01-07 00:35 - 2018-01-01 02:26 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2018-01-07 00:35 - 2018-01-01 02:26 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2018-01-07 00:35 - 2018-01-01 02:26 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2018-01-07 00:35 - 2018-01-01 02:26 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll 2018-01-07 00:35 - 2018-01-01 02:25 - 002010112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2018-01-07 00:35 - 2018-01-01 02:25 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2018-01-07 00:35 - 2018-01-01 02:25 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll 2018-01-07 00:35 - 2018-01-01 02:24 - 003651072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-01-07 00:35 - 2018-01-01 02:24 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2018-01-07 00:35 - 2018-01-01 02:24 - 000658944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-01-07 00:35 - 2018-01-01 02:24 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2018-01-07 00:35 - 2018-01-01 02:23 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 001021336 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-01-07 00:34 - 2018-01-01 03:27 - 000751576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2018-01-07 00:34 - 2018-01-01 03:27 - 000544152 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-01-07 00:34 - 2018-01-01 03:27 - 000382864 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 000264536 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2018-01-07 00:34 - 2018-01-01 03:27 - 000074648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2018-01-07 00:34 - 2018-01-01 03:27 - 000066712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 000022800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumbase.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 000022208 _____ (Microsoft Corporation) C:\WINDOWS\system32\IumSdk.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 000020376 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2018-01-07 00:34 - 2018-01-01 03:27 - 000015632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumdll.dll 2018-01-07 00:34 - 2018-01-01 03:22 - 000503704 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2018-01-07 00:34 - 2018-01-01 03:21 - 000328616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2018-01-07 00:34 - 2018-01-01 03:20 - 007319912 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-01-07 00:34 - 2018-01-01 03:20 - 002647216 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-01-07 00:34 - 2018-01-01 03:20 - 000524760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2018-01-07 00:34 - 2018-01-01 03:20 - 000459160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2018-01-07 00:34 - 2018-01-01 03:19 - 002466392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2018-01-07 00:34 - 2018-01-01 03:19 - 000870896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2018-01-07 00:34 - 2018-01-01 03:19 - 000714648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000643704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000282520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000247472 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2018-01-07 00:34 - 2018-01-01 03:19 - 000184728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000118680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000082328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000031640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys 2018-01-07 00:34 - 2018-01-01 03:19 - 000018672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshhyperv.dll 2018-01-07 00:34 - 2018-01-01 03:18 - 021354736 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-01-07 00:34 - 2018-01-01 03:18 - 001146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-01-07 00:34 - 2018-01-01 03:18 - 000966040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2018-01-07 00:34 - 2018-01-01 03:18 - 000822680 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2018-01-07 00:34 - 2018-01-01 03:18 - 000316240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2018-01-07 00:34 - 2018-01-01 03:18 - 000175800 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2018-01-07 00:34 - 2018-01-01 03:18 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll 2018-01-07 00:34 - 2018-01-01 03:17 - 000154520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2018-01-07 00:34 - 2018-01-01 03:15 - 000644696 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2018-01-07 00:34 - 2018-01-01 03:10 - 000100800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2018-01-07 00:34 - 2018-01-01 03:09 - 000434072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2018-01-07 00:34 - 2018-01-01 03:09 - 000114584 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2018-01-07 00:34 - 2018-01-01 02:43 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-01-07 00:34 - 2018-01-01 02:42 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2018-01-07 00:34 - 2018-01-01 02:42 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys 2018-01-07 00:34 - 2018-01-01 02:42 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2018-01-07 00:34 - 2018-01-01 02:42 - 000047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2018-01-07 00:34 - 2018-01-01 02:41 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irda.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2018-01-07 00:34 - 2018-01-01 02:41 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll 2018-01-07 00:34 - 2018-01-01 02:41 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VMBusHID.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll 2018-01-07 00:34 - 2018-01-01 02:41 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll 2018-01-07 00:34 - 2018-01-01 02:41 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hyperkbd.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgencounter.sys 2018-01-07 00:34 - 2018-01-01 02:41 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vms3cap.sys 2018-01-07 00:34 - 2018-01-01 02:40 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\container_xml.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\efslsaext.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys 2018-01-07 00:34 - 2018-01-01 02:40 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lltdio.sys 2018-01-07 00:34 - 2018-01-01 02:40 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimeprovider.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2018-01-07 00:34 - 2018-01-01 02:40 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2018-01-07 00:34 - 2018-01-01 02:40 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys 2018-01-07 00:34 - 2018-01-01 02:39 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2018-01-07 00:34 - 2018-01-01 02:39 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2018-01-07 00:34 - 2018-01-01 02:39 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2018-01-07 00:34 - 2018-01-01 02:39 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2018-01-07 00:34 - 2018-01-01 02:39 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2018-01-07 00:34 - 2018-01-01 02:38 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2018-01-07 00:34 - 2018-01-01 02:38 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2018-01-07 00:34 - 2018-01-01 02:38 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2018-01-07 00:34 - 2018-01-01 02:38 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2018-01-07 00:34 - 2018-01-01 02:38 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3dlg.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2018-01-07 00:34 - 2018-01-01 02:37 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2018-01-07 00:34 - 2018-01-01 02:36 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-01-07 00:34 - 2018-01-01 02:36 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2018-01-07 00:34 - 2018-01-01 02:36 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2018-01-07 00:34 - 2018-01-01 02:36 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2018-01-07 00:34 - 2018-01-01 02:35 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2018-01-07 00:34 - 2018-01-01 02:35 - 000741376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys 2018-01-07 00:34 - 2018-01-01 02:35 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2018-01-07 00:34 - 2018-01-01 02:35 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2018-01-07 00:34 - 2018-01-01 02:35 - 000292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2018-01-07 00:34 - 2018-01-01 02:35 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000973312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000620032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2018-01-07 00:34 - 2018-01-01 02:34 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2018-01-07 00:34 - 2018-01-01 02:34 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2018-01-07 00:34 - 2018-01-01 02:34 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2018-01-07 00:34 - 2018-01-01 02:33 - 003306496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2018-01-07 00:34 - 2018-01-01 02:33 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2018-01-07 00:34 - 2018-01-01 02:33 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2018-01-07 00:34 - 2018-01-01 02:32 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-01-07 00:34 - 2018-01-01 02:32 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2018-01-07 00:34 - 2018-01-01 02:32 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2018-01-07 00:34 - 2018-01-01 02:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2018-01-07 00:34 - 2018-01-01 02:31 - 007339520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-01-07 00:34 - 2018-01-01 02:31 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-01-07 00:34 - 2018-01-01 02:31 - 001398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2018-01-07 00:34 - 2018-01-01 02:31 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2018-01-07 00:34 - 2018-01-01 02:30 - 003206656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2018-01-07 00:34 - 2018-01-01 02:30 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2018-01-07 00:34 - 2018-01-01 02:30 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-01-07 00:34 - 2018-01-01 02:30 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-01-07 00:34 - 2018-01-01 02:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 002426368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 001460736 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2018-01-07 00:34 - 2018-01-01 02:29 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2018-01-07 00:34 - 2018-01-01 02:28 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-01-07 00:34 - 2018-01-01 02:26 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2018-01-07 00:34 - 2018-01-01 02:26 - 000502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll 2018-01-07 00:34 - 2018-01-01 02:25 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\beep.sys 2018-01-07 00:34 - 2018-01-01 02:24 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll 2018-01-07 00:34 - 2018-01-01 02:23 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2018-01-07 00:34 - 2018-01-01 02:23 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2018-01-07 00:34 - 2018-01-01 02:23 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys 2018-01-07 00:34 - 2018-01-01 02:23 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll 2018-01-07 00:34 - 2018-01-01 02:23 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2018-01-07 00:34 - 2018-01-01 02:23 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys 2018-01-07 00:34 - 2018-01-01 02:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2018-01-07 00:34 - 2018-01-01 02:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWNet.dll 2018-01-07 00:34 - 2018-01-01 02:23 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiprop.dll 2018-01-07 00:34 - 2018-01-01 02:23 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\null.sys 2018-01-07 00:34 - 2018-01-01 02:18 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfhost.exe 2018-01-03 18:36 - 2018-01-03 18:36 - 000000000 ____D C:\Users\Emil\AppData\Local\Steam 2018-01-02 21:56 - 2018-01-02 22:02 - 000000000 ____D C:\ProgramData\LogMeIn 2018-01-02 21:56 - 2018-01-02 21:56 - 000000000 ____D C:\Users\Emil\AppData\Local\LogMeIn 2018-01-02 20:43 - 2018-01-02 20:50 - 000000000 ____D C:\Farming Simulator 17 2018-01-02 20:43 - 2018-01-02 20:43 - 000000673 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farming Simulator 17.lnk 2018-01-02 20:43 - 2018-01-02 20:43 - 000000661 _____ C:\Users\Public\Desktop\Farming Simulator 17.lnk 2018-01-02 20:33 - 2018-01-02 20:33 - 000000000 ____D C:\Users\Emil\Downloads\FS 17 CRACK 1.5.3.0 2018-01-02 20:14 - 2018-01-02 20:14 - 000000000 ____D C:\Users\Emil\Downloads\Farming.Simulator.17.Platinum.Edition.Update.v1.5.3-BAT 2018-01-02 18:21 - 2018-01-02 18:21 - 000000000 ____D C:\Users\Emil\Downloads\Farming.Simulator.17.V1.4.4.Online.Fix.V2-REVOLT 2017-12-31 11:27 - 2017-12-31 11:27 - 000000000 ____D C:\Users\Emil\AppData\Roaming\FarmersDynasty 2017-12-29 13:58 - 2017-12-29 13:59 - 000000000 ____D C:\Users\Emil\Downloads\gmer 2017-12-29 13:58 - 2016-03-11 14:53 - 000380928 _____ C:\Users\Emil\Downloads\gmer.exe 2017-12-29 13:42 - 2017-12-29 13:42 - 000000000 ___HD C:\$AV_ASW 2017-12-29 13:39 - 2018-01-13 12:15 - 002393088 _____ (Farbar) C:\Users\Emil\Downloads\FRST64.exe 2017-12-29 13:38 - 2017-12-29 13:38 - 000602112 _____ (OldTimer Tools) C:\Users\Emil\Downloads\OTL.exe 2017-12-29 13:34 - 2017-12-29 13:41 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Emil\Downloads\tdsskiller.exe 2017-12-29 13:28 - 2018-01-12 23:04 - 000000000 ____D C:\Users\Emil\AppData\Roaming\ThreatDataBase 2017-12-16 01:20 - 2017-12-16 01:20 - 000000000 ____D C:\Windows.old 2017-12-14 15:39 - 2017-11-30 03:58 - 006763128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-12-14 15:39 - 2017-11-30 03:57 - 001123968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-12-14 15:39 - 2017-11-30 03:45 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-12-14 15:39 - 2017-11-30 03:43 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-12-14 15:39 - 2017-11-30 03:43 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-12-14 15:39 - 2017-11-30 03:42 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2017-12-14 15:39 - 2017-11-30 03:42 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx 2017-12-14 15:39 - 2017-11-30 03:41 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe 2017-12-14 15:39 - 2017-11-30 03:40 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2017-12-14 15:39 - 2017-11-30 03:40 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll 2017-12-14 15:39 - 2017-11-30 03:40 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe 2017-12-14 15:39 - 2017-11-30 03:38 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-12-14 15:39 - 2017-11-30 03:38 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-12-14 15:39 - 2017-11-30 03:36 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-12-14 15:39 - 2017-11-30 03:34 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-12-14 15:39 - 2017-11-17 10:31 - 000223640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-12-14 15:38 - 2017-11-30 04:33 - 000038808 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-12-14 15:38 - 2017-11-30 04:23 - 007910960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-12-14 15:38 - 2017-11-30 04:23 - 001194248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-12-14 15:38 - 2017-11-30 03:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-12-14 15:38 - 2017-11-30 03:44 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2017-12-14 15:38 - 2017-11-30 03:44 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2017-12-14 15:38 - 2017-11-30 03:43 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe 2017-12-14 15:38 - 2017-11-30 03:42 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-12-14 15:38 - 2017-11-30 03:42 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2017-12-14 15:38 - 2017-11-30 03:42 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe 2017-12-14 15:38 - 2017-11-30 03:41 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-12-14 15:38 - 2017-11-30 03:41 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2017-12-14 15:38 - 2017-11-30 03:41 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll 2017-12-14 15:38 - 2017-11-30 03:39 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-12-14 15:38 - 2017-11-30 03:39 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-12-14 15:38 - 2017-11-30 03:37 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-12-14 15:38 - 2017-11-30 03:36 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 002032536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-12-14 15:38 - 2017-11-17 10:46 - 001578904 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000678808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000613784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000484248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000379288 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000259992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000190360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000136088 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-12-14 15:38 - 2017-11-17 10:46 - 000067992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2017-12-14 15:38 - 2017-11-17 10:46 - 000034712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-12-14 15:38 - 2017-11-17 10:39 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-12-14 15:38 - 2017-11-17 09:59 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-12-14 15:38 - 2017-11-17 09:56 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-01-13 12:15 - 2017-04-19 18:41 - 000000000 ____D C:\FRST 2018-01-13 12:09 - 2017-08-04 19:20 - 000004224 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{05CA90F7-3C36-42F2-B26F-B0D08C2C814F} 2018-01-13 12:09 - 2017-03-18 22:01 - 000000000 ____D C:\WINDOWS\INF 2018-01-13 12:03 - 2017-08-04 19:21 - 002490030 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-01-13 12:03 - 2017-03-20 04:59 - 001145410 _____ C:\WINDOWS\system32\perfh015.dat 2018-01-13 12:03 - 2017-03-20 04:59 - 000256800 _____ C:\WINDOWS\system32\perfc015.dat 2018-01-13 11:57 - 2017-08-04 18:57 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2018-01-13 11:57 - 2016-11-25 16:27 - 000000000 __SHD C:\Users\Emil\IntelGraphicsProfiles 2018-01-13 11:56 - 2017-08-04 19:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-01-13 11:56 - 2017-03-01 11:13 - 000000000 ____D C:\ProgramData\NVIDIA 2018-01-13 11:55 - 2017-03-18 12:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI 2018-01-13 11:52 - 2017-08-04 18:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-01-13 10:00 - 2015-10-30 08:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2018-01-13 09:26 - 2017-06-07 21:50 - 000000000 ____D C:\Users\Emil\AppData\LocalLow\Temp 2018-01-13 09:07 - 2017-04-07 20:42 - 000000000 ____D C:\Users\Emil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder 2018-01-13 09:04 - 2016-05-05 17:07 - 000000000 ____D C:\Program Files (x86)\Acer 2018-01-13 09:02 - 2016-11-21 10:19 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-01-13 09:01 - 2017-08-04 18:51 - 000380776 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-01-13 09:01 - 2016-05-05 17:09 - 000000000 ____D C:\Program Files (x86)\McAfee 2018-01-13 09:01 - 2016-05-05 17:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-01-13 09:00 - 2017-08-04 18:59 - 000000000 ____D C:\Users\Emil 2018-01-13 08:58 - 2017-03-18 22:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-01-13 08:58 - 2017-03-18 22:03 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-01-13 01:22 - 2017-08-04 19:20 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2400838556-3398951076-1685541893-1001 2018-01-13 01:22 - 2016-11-25 16:38 - 000002412 _____ C:\Users\Emil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-01-13 01:22 - 2016-11-25 16:38 - 000000000 ___RD C:\Users\Emil\OneDrive 2018-01-12 23:55 - 2017-10-11 16:11 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2018-01-12 23:55 - 2017-03-18 21:51 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-01-12 23:55 - 2016-11-25 21:07 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-01-12 23:55 - 2016-11-25 21:07 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-01-12 23:51 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-01-12 23:49 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps 2018-01-12 23:34 - 2017-04-20 20:35 - 000000000 ____D C:\AdwCleaner 2018-01-12 23:29 - 2017-11-03 11:05 - 000000000 ____D C:\Games 2018-01-12 23:23 - 2016-05-05 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2018-01-12 22:55 - 2017-08-04 19:38 - 000000000 ____D C:\Program Files\Reference Assemblies 2018-01-11 21:21 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-01-11 21:07 - 2016-08-18 06:58 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-01-11 19:35 - 2017-08-26 12:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-01-11 19:33 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-01-11 19:22 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-01-07 20:34 - 2017-03-18 12:40 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2018-01-07 17:48 - 2016-11-25 16:53 - 000000000 ____D C:\Users\Emil\AppData\Roaming\BitComet 2018-01-07 17:41 - 2017-04-19 17:44 - 000000000 ____D C:\Users\Emil\AppData\LocalLow\Mozilla 2018-01-07 17:36 - 2017-09-17 21:16 - 000000000 ____D C:\Users\Emil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossout 2018-01-07 17:36 - 2017-05-08 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2018-01-07 17:36 - 2016-12-12 11:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2018-01-07 17:36 - 2016-05-05 17:08 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-12-30 01:35 - 2017-03-17 15:24 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-12-30 01:30 - 2016-12-14 19:18 - 000000000 ____D C:\Users\Emil\AppData\LocalLow\Adobe 2017-12-29 13:42 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\Registration 2017-12-29 00:03 - 2017-04-19 17:33 - 000251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-12-27 13:57 - 2017-09-30 16:09 - 000000000 ___HD C:\$WINDOWS.~BT 2017-12-27 13:54 - 2017-08-04 19:27 - 000026673 _____ C:\WINDOWS\diagwrn.xml 2017-12-27 13:54 - 2017-08-04 19:27 - 000026673 _____ C:\WINDOWS\diagerr.xml 2017-12-26 15:14 - 2017-07-27 21:05 - 000000000 ___DC C:\WINDOWS\Panther 2017-12-21 05:35 - 2017-03-18 22:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-12-21 05:35 - 2017-03-18 22:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-12-17 00:32 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-12-17 00:12 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\rescache 2017-12-16 22:52 - 2017-06-05 10:26 - 000000000 ____D C:\Users\Emil\AppData\Local\ElevatedDiagnostics 2017-12-16 01:45 - 2017-06-14 14:02 - 000000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-12-16 01:45 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-12-14 17:45 - 2016-11-25 16:27 - 000000000 ____D C:\Users\Emil\AppData\Local\Packages 2017-12-14 09:31 - 2017-07-12 11:36 - 000002282 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-12-14 09:31 - 2017-07-12 11:36 - 000002270 ____H C:\Users\Public\Desktop\Google Chrome.lnk ==================== Pliki w katalogu głównym wybranych folderów ======= 2018-01-11 19:27 - 2018-01-11 19:27 - 000015360 _____ (Hewlett-Packard) C:\Users\Emil\AppData\Roaming\xtexCalculator.exe Pliki do przeniesienia lub usunięcia: ==================== C:\WINDOWS\TEMP\g8570.tmp.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2018-01-02 20:06 ==================== Koniec FRST.txt ============================