Wirusy/wyskakujace okna/spam/czyszczenie

**Posty:** 271 · przez **Sythev** 16 Gru 2015, 14:48

Witam

Dzisiaj instalujac program do przycinania mp3 z internetu a dokladnie z programosów przy okazji zainstalowalem sobie jakieś wirusy itp. syf.

Kazde klikniecie w Firefoxie to kolejne nowe okienko z jakimis reklamami i wyskakujacymi powiadomieniami. Koszmar jakis co to jest za spam.

Obecnie skanuje komputer Malwarebytes i wrzuce log ze skanu.
(pomimo skanu 171 problemow i kwarantanny nadal problem wystepuje

)

Druga sprawa to dziwne 'blokowanie' się pulpitu. Zawiesza się często z powiadomieniami i tak zostaje co drażni bo nie chce zniknac.
Znika dopiero gdy kilkanascie razy wdusze 'flage' i wtedy nastepuje tzw.refresh ekranu i znikaja zbedne powiadomienia i chmurki. Od czego to może być?

Proszę o sprawdzenie logow i ewentualne czyszczenie ze zbednych rzeczy + plikow tymczasowych.

Bede wdzieczny za szybka pomoc bo nie moge pracować obecnie na komputerze w polaczeniu z internetem bo co chwile jakieś nowe strony i zapewne wirusy się wkradaja..

Pozdrawiam

**Posty:** 4765 · przez **ordynat** 16 Gru 2015, 14:49

Zrób logi z FRST > http://forum.programosy.pl/frst-otl-zoek-vt139692.html
Przed skanem zaznacz "Addition.txt"

**Posty:** 271 · przez **Sythev** 16 Gru 2015, 15:10

najechanie na kazda reklame kursorem od razu powieksza ją na cały ekran

kazdy klikniecie w nową zakładke, nową strone otwiera kolejne i kolejne jakieś strony typu "wygrałeś.... " "podaj swoj numer telefonu.."

#

roie log z OTL i za chwile z FRST..
już dawno takiego syfu nie miałem w laptopie po 1 sciagnieciu czegoś.. :evil:

Dodano 16.12.2015 14:17:42:

Kod: Zaznacz wszystko: OTL logfile created on: 2015-12-16 13:58:49 - Run 7 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Adam\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.10586.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,89 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 49,48% Memory free 4,58 Gb Paging File | 2,62 Gb Available in Paging File | 57,17% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,25 Gb Total Space | 415,56 Gb Free Space | 92,09% Space Free | Partition Type: NTFS Drive E: | 48,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: ADAM-PC | User Name: Adam | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2015-12-16 13:58:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Downloads\OTL_[www.programosy.pl].exe PRC - [2015-12-12 04:30:36 | 000,551,112 | ---- | M] (Microsoft Corporation) -- C:\Users\Adam\AppData\Local\Microsoft\OneDrive\OneDrive.exe PRC - [2015-12-10 16:49:58 | 000,684,032 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe PRC - [2015-10-30 08:18:31 | 000,017,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\backgroundTaskHost.exe PRC - [2015-10-30 03:22:40 | 000,392,872 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2015-10-28 18:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2015-10-12 08:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe PRC - [2015-10-12 08:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe PRC - [2015-08-17 07:35:44 | 001,360,320 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe PRC - [2015-07-17 23:36:00 | 000,283,024 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe PRC - [2015-03-06 20:53:44 | 000,584,632 | ---- | M] (LENOVO INCORPORATED.) -- C:\Program Files\Lenovo\iMController\SystemAgentService.exe PRC - [2015-03-06 20:53:40 | 000,074,168 | ---- | M] () -- C:\Program Files\Lenovo\iMController\AutoUpdate.exe PRC - [2014-08-13 10:16:16 | 000,090,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe PRC - [2014-05-16 10:14:52 | 000,750,320 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe PRC - [2014-05-16 10:14:52 | 000,140,016 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe PRC - [2014-04-26 07:15:59 | 000,682,064 | ---- | M] () -- C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe PRC - [2014-04-07 12:54:02 | 000,110,128 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe PRC - [2014-01-15 04:42:40 | 000,238,160 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2013-11-06 13:18:22 | 002,083,592 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe PRC - [2013-11-05 10:14:32 | 000,600,568 | ---- | M] (Lenovo Corporation) -- C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe PRC - [2013-11-01 16:16:06 | 000,013,064 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe PRC - [2013-11-01 16:16:04 | 000,467,720 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe PRC - [2013-10-28 15:48:36 | 000,915,968 | ---- | M] () -- C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe PRC - [2013-10-11 06:44:00 | 001,669,928 | ---- | M] (Lenovo) -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe PRC - [2013-10-08 10:28:50 | 000,251,896 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe PRC - [2013-10-08 10:28:46 | 000,140,280 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe PRC - [2013-09-16 04:19:26 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2013-09-16 04:19:22 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2013-06-28 14:32:46 | 000,100,712 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe PRC - [2013-03-06 20:49:22 | 000,110,144 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2015-11-27 01:18:59 | 000,536,064 | ---- | M] () -- C:\Users\Adam\AppData\Local\Packages\E046963F.LenovoSupport_k1h2ywk1493x8\AC\Microsoft\CLR_v4.0_32\NativeImages\BackgroundT72ca5658#\9f37b0b4c4ad5f2950b4239a9a145849\BackgroundTasks_MetricCollection.ni.dll MOD - [2015-11-26 01:36:21 | 000,219,648 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Gloaae92e31#\a5b585c625b11bdf2a5fc3d11d626c16\Windows.Globalization.ni.dll MOD - [2015-11-26 01:36:20 | 001,232,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\cbdb8960c3ba64df28ebd50f8b804142\Windows.Networking.ni.dll MOD - [2015-11-26 01:36:20 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtdf6812ee#\92ad3bae7bd7e85480f8ba1e8b9b2d83\System.Runtime.Serialization.Primitives.ni.dll MOD - [2015-11-26 01:36:20 | 000,008,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Resoc6338000#\f46724dfdb305dd49b3bd8af7ec5ed0d\System.Resources.ResourceManager.ni.dll MOD - [2015-11-26 01:36:19 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Collections\d36a881d6e003a63d88c0e40af53d6f0\System.Collections.ni.dll MOD - [2015-11-26 01:36:17 | 000,808,448 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Storage\348774e258f77e44826cfca740587925\Windows.Storage.ni.dll MOD - [2015-11-26 01:36:17 | 000,008,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.IO\166ba7ed0e678e975118e89b6752243e\System.IO.ni.dll MOD - [2015-11-26 01:36:16 | 003,154,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\6b4f5a3dae47e37b6ed163edc00b18ed\Windows.Devices.ni.dll MOD - [2015-11-26 01:35:39 | 000,787,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\80366b2f53761589c602827eb7cee9f2\System.ServiceModel.Internals.ni.dll MOD - [2015-11-26 01:35:39 | 000,117,760 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\607f34b8be4f2014b99872617699b357\SMDiagnostics.ni.dll MOD - [2015-11-26 01:35:30 | 012,938,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\8cd2187094ba6cade0ca0fab4f932654\System.Windows.Forms.ni.dll MOD - [2015-11-26 01:35:23 | 001,619,968 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\9b645a48c9bcfc95aaadf6a069bb4ebe\System.Drawing.ni.dll MOD - [2015-11-19 19:34:22 | 000,335,360 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\a0151f05db127c5e199c10af8a83aa95\Windows.Foundation.ni.dll MOD - [2015-11-19 19:34:22 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtbff93e24#\902be94d059e1f034655a5b3564072b3\System.Runtime.InteropServices.WindowsRuntime.ni.dll MOD - [2015-11-19 19:34:21 | 002,921,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.App640a3541#\2fecbce418e81c1ee6622189a68d65af\Windows.ApplicationModel.ni.dll MOD - [2015-11-19 19:34:19 | 000,019,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime\078282146a16a1a407da259d8da4edea\System.Runtime.ni.dll MOD - [2015-11-19 19:32:06 | 000,631,296 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runt0d283adf#\2eaecdbdfaa41416875d3ae5d745b0fb\System.Runtime.WindowsRuntime.ni.dll MOD - [2015-10-30 08:19:58 | 007,418,048 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\abad45b9cc652ba7e38c4c837234c0ab\System.Core.ni.dll MOD - [2015-10-30 08:19:57 | 019,045,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\8062d427acd64e37f4fded7b00f4a869\mscorlib.ni.dll MOD - [2015-10-30 08:19:56 | 010,151,080 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\cc4e5d110dd318e8b7d61a9ed184ab74\System.ni.dll MOD - [2015-10-24 01:47:05 | 007,435,448 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\1f87b5140145c221b5201351fffc52d8\System.Xml.ni.dll MOD - [2015-10-24 01:47:04 | 002,788,608 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\43ca3f2fcd379964cef1dc5898cb9248\System.Runtime.Serialization.ni.dll MOD - [2015-10-24 01:47:04 | 000,532,688 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Net.Http\b0e2c2745901c5cad270817cb833bc54\System.Net.Http.ni.dll MOD - [2015-10-24 01:47:03 | 000,986,336 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\1b51e779650e38bb712f3e535efcf132\System.Configuration.ni.dll MOD - [2015-03-06 20:53:40 | 000,074,168 | ---- | M] () -- C:\Program Files\Lenovo\iMController\AutoUpdate.exe MOD - [2014-08-13 10:17:29 | 000,310,864 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\XFramePlugin.dll MOD - [2014-08-13 10:17:28 | 000,197,200 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\XCodec.dll MOD - [2014-08-13 10:17:26 | 000,121,424 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Win7Support.dll MOD - [2014-08-13 10:17:25 | 000,155,728 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\VPNPlugin.dll MOD - [2014-08-13 10:17:24 | 000,457,296 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDUIPlugin.dll MOD - [2014-08-13 10:17:22 | 000,149,072 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDSrvPlugin.dll MOD - [2014-08-13 10:17:21 | 000,164,432 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Trace.dll MOD - [2014-08-13 10:17:19 | 000,325,712 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\StatusBarMgrPlugin.dll MOD - [2014-08-13 10:17:17 | 000,847,952 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SMSUIPlugin.dll MOD - [2014-08-13 10:17:16 | 000,225,872 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsSrvPlugin.dll MOD - [2014-08-13 10:17:15 | 000,715,344 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsAppPlugin.dll MOD - [2014-08-13 10:17:14 | 000,312,912 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\SettingUIPlugin.dll MOD - [2014-08-13 10:17:13 | 000,116,816 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\ServiceUIPlugin.dll MOD - [2014-08-13 10:17:12 | 000,282,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\sdk.dll MOD - [2014-08-13 10:17:11 | 000,397,392 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Proxy.dll MOD - [2014-08-13 10:17:09 | 000,553,040 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\PluginContainer.dll MOD - [2014-08-13 10:17:06 | 000,072,272 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSPowerMgr.dll MOD - [2014-08-13 10:17:04 | 000,138,320 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSNDIS.dll MOD - [2014-08-13 10:17:02 | 000,162,896 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSDialup.dll MOD - [2014-08-13 10:17:00 | 000,109,136 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\OSAdapt.dll MOD - [2014-08-13 10:16:59 | 000,104,016 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NotifyServicePlugin.dll MOD - [2014-08-13 10:16:58 | 000,243,792 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSrvPlugin.dll MOD - [2014-08-13 10:16:56 | 000,509,520 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSettingPlugin.dll MOD - [2014-08-13 10:16:55 | 000,525,392 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoUIExPlugin.dll MOD - [2014-08-13 10:16:54 | 000,324,688 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoSrvPlugin.dll MOD - [2014-08-13 10:16:52 | 000,315,472 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoRecordUIPlugin.dll MOD - [2014-08-13 10:16:51 | 000,165,456 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectSrvPlugin.dll MOD - [2014-08-13 10:16:50 | 000,338,512 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectPlugin.dll MOD - [2014-08-13 10:16:49 | 000,206,928 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISPlugin.dll MOD - [2014-08-13 10:16:48 | 001,153,616 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISAPI.dll MOD - [2014-08-13 10:16:45 | 000,826,448 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\MiniFramePlugin.dll MOD - [2014-08-13 10:16:44 | 000,283,216 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\MenuMgrPlugin.dll MOD - [2014-08-13 10:16:42 | 000,719,952 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\LiveUpdateInterface.dll MOD - [2014-08-13 10:16:40 | 000,123,984 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\LayoutPlugin.dll MOD - [2014-08-13 10:16:39 | 000,146,512 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\HelpUIPlugin.dll MOD - [2014-08-13 10:16:38 | 000,426,064 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DialupUIPlugin.dll MOD - [2014-08-13 10:16:37 | 000,240,720 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DialUpPlugin.dll MOD - [2014-08-13 10:16:36 | 000,419,408 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DiagnosisPlugin.dll MOD - [2014-08-13 10:16:35 | 000,329,296 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceSrvPlugin.dll MOD - [2014-08-13 10:16:33 | 000,566,864 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceMgrUIPlugin.dll MOD - [2014-08-13 10:16:32 | 000,345,680 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceAppPlugin.dll MOD - [2014-08-13 10:16:31 | 000,161,360 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\DataServicePlugin.dll MOD - [2014-08-13 10:16:28 | 000,457,808 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\core.dll MOD - [2014-08-13 10:16:27 | 000,107,088 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\CompressRatePlugin.dll MOD - [2014-08-13 10:16:26 | 000,250,448 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Common.dll MOD - [2014-08-13 10:16:24 | 000,174,672 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\ATR2SMgr.dll MOD - [2014-08-13 10:16:23 | 000,267,344 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AtCodec.dll MOD - [2014-08-13 10:16:21 | 000,815,184 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookUIPlugin.dll MOD - [2014-08-13 10:16:20 | 000,291,408 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookSrvPlugin.dll MOD - [2014-08-13 10:16:19 | 001,095,248 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookPlugin.dll MOD - [2014-08-13 10:16:16 | 000,090,704 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe MOD - [2014-05-16 10:14:52 | 000,033,520 | ---- | M] () -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll MOD - [2014-02-15 09:49:59 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qico4.dll MOD - [2014-02-15 09:49:56 | 000,370,176 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qtiff4.dll MOD - [2014-02-15 09:49:36 | 000,350,720 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qmng4.dll MOD - [2014-02-15 09:49:21 | 000,082,944 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qgif4.dll MOD - [2014-02-15 09:49:18 | 000,192,000 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qjpeg4.dll MOD - [2014-02-15 08:44:02 | 009,559,040 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtGui4.dll MOD - [2014-02-15 08:33:20 | 001,148,416 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtNetwork4.dll MOD - [2014-02-15 08:32:03 | 000,398,336 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtXml4.dll MOD - [2014-02-15 08:31:50 | 002,416,640 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\QtCore4.dll MOD - [2013-11-01 16:16:06 | 000,013,064 | ---- | M] () -- C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe MOD - [2013-10-28 15:48:36 | 000,915,968 | ---- | M] () -- C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe MOD - [2013-08-16 07:53:45 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\libgcc_s_dw2-1.dll MOD - [2013-08-16 07:53:45 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\T-Mobile\InternetManager_H\mingwm10.dll MOD - [2013-03-06 20:52:00 | 000,015,424 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2013-03-06 20:49:06 | 000,626,240 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2015-11-22 10:49:44 | 000,066,560 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker) SRV:[b]64bit:[/b] - [2015-11-22 10:43:32 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService) SRV:[b]64bit:[/b] - [2015-11-22 10:41:20 | 000,607,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2015-11-22 10:41:13 | 000,948,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager) SRV:[b]64bit:[/b] - [2015-11-22 10:38:50 | 001,223,168 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc) SRV:[b]64bit:[/b] - [2015-11-22 10:38:46 | 000,912,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager) SRV:[b]64bit:[/b] - [2015-11-19 14:12:30 | 000,275,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2015-11-19 14:12:27 | 000,162,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc) SRV:[b]64bit:[/b] - [2015-11-19 14:12:27 | 000,087,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate) SRV:[b]64bit:[/b] - [2015-10-30 08:19:28 | 001,073,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo) SRV:[b]64bit:[/b] - [2015-10-30 08:19:28 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2015-10-30 08:19:26 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2015-10-30 08:19:26 | 000,497,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService) SRV:[b]64bit:[/b] - [2015-10-30 08:18:46 | 000,168,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:43 | 001,872,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:41 | 000,117,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2015-10-30 08:18:21 | 001,035,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:19 | 001,297,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService) SRV:[b]64bit:[/b] - [2015-10-30 08:18:18 | 000,729,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2015-10-30 08:18:14 | 000,081,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 001,613,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,203,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 001,491,456 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 001,130,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,649,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,587,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,490,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,252,928 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager) SRV:[b]64bit:[/b] - [2015-10-30 08:17:59 | 002,745,856 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository) SRV:[b]64bit:[/b] - [2015-10-30 08:17:59 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode) SRV:[b]64bit:[/b] - [2015-10-30 08:17:59 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter) SRV:[b]64bit:[/b] - [2015-10-30 08:17:58 | 000,764,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV:[b]64bit:[/b] - [2015-10-30 08:17:58 | 000,287,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:54 | 003,449,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2015-10-30 08:17:54 | 001,090,048 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:54 | 000,360,960 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 002,058,240 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,846,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,625,000 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,361,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,097,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,060,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2015-10-30 08:17:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2015-10-30 08:17:52 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service) SRV:[b]64bit:[/b] - [2015-10-30 08:17:50 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:50 | 000,145,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_b96333) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_40f72) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_3f763) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_3da63) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_b96333) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_40f72) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_3f763) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_3da63) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_b96333) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_40f72) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_3f763) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_3da63) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_b96333) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_42759) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_40f72) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_3f763) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_3da63) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_b96333) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_40f72) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_3f763) SRV:[b]64bit:[/b] - [2015-10-30 08:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_3da63) SRV:[b]64bit:[/b] - [2015-10-30 08:17:48 | 000,444,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2015-10-30 08:17:48 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:47 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,290,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService) SRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,186,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:45 | 000,313,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:43 | 002,156,032 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:43 | 000,278,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:43 | 000,057,856 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice) SRV:[b]64bit:[/b] - [2015-10-30 08:17:41 | 000,052,736 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService) SRV:[b]64bit:[/b] - [2015-10-30 08:17:40 | 000,590,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter) SRV:[b]64bit:[/b] - [2015-10-30 08:17:39 | 000,547,840 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,747,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,380,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,364,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,164,864 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,024,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2015-10-30 08:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2015-10-30 08:17:21 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv) SRV:[b]64bit:[/b] - [2015-10-25 13:26:04 | 000,255,096 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService) SRV:[b]64bit:[/b] - [2015-08-17 07:36:30 | 000,272,424 | ---- | M] (Lenovo) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe -- (LSCWinService) SRV:[b]64bit:[/b] - [2015-07-17 23:35:40 | 000,351,120 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0) SRV:[b]64bit:[/b] - [2015-07-17 11:27:24 | 000,156,920 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Windows\SysNative\ibmpmsvc.exe -- (IBMPMSVC) SRV:[b]64bit:[/b] - [2015-03-06 20:53:44 | 000,584,632 | ---- | M] (LENOVO INCORPORATED.) [Auto | Running] -- C:\Program Files\Lenovo\iMController\SystemAgentService.exe -- (Lenovo System Agent Service) SRV:[b]64bit:[/b] - [2015-01-29 10:39:26 | 000,049,968 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Windows\SysNative\valWBFPolicyService.exe -- (valWBFPolicyService) SRV:[b]64bit:[/b] - [2014-11-12 00:06:52 | 002,449,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc) SRV:[b]64bit:[/b] - [2014-06-10 10:15:44 | 000,124,400 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD) SRV:[b]64bit:[/b] - [2014-04-08 16:20:46 | 001,410,888 | ---- | M] (LenovoEMC Products USA, LLC) [Auto | Running] -- C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe -- (LenovoEMCDiscovery) SRV:[b]64bit:[/b] - [2014-04-07 12:54:02 | 000,110,128 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE) SRV:[b]64bit:[/b] - [2013-11-06 13:18:22 | 002,083,592 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe -- (Lenovo Settings Service) SRV:[b]64bit:[/b] - [2013-11-05 10:14:44 | 000,573,432 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe -- (AVControlCenter) SRV:[b]64bit:[/b] - [2013-11-05 10:14:40 | 000,695,800 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe -- (LENOVO.TVTVCAM) SRV:[b]64bit:[/b] - [2013-11-05 10:14:34 | 000,527,864 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe -- (LENOVO.TPKNRSVC) SRV:[b]64bit:[/b] - [2013-11-05 10:14:12 | 000,511,992 | ---- | M] (Lenovo Corporation) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE) SRV:[b]64bit:[/b] - [2013-09-24 16:03:40 | 000,054,976 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe -- (intelsba) SRV:[b]64bit:[/b] - [2013-08-27 13:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-27 13:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-06 09:43:00 | 000,047,400 | ---- | M] (Lenovo.) [On_Demand | Stopped] -- C:\Windows\SysNative\TPHDEXLG64.exe -- (TPHDEXLGSVC) SRV:[b]64bit:[/b] - [2013-07-25 14:39:26 | 000,206,552 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg) SRV:[b]64bit:[/b] - [2012-08-10 19:49:38 | 000,136,288 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC) SRV - [2015-11-22 10:28:04 | 000,948,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc) SRV - [2015-11-05 17:44:06 | 000,836,176 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2015-10-30 08:18:31 | 002,179,584 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository) SRV - [2015-10-30 08:18:31 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\lfsvc.dll -- (lfsvc) SRV - [2015-10-30 08:18:29 | 000,461,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV - [2015-10-30 08:18:23 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2015-10-30 08:18:21 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV - [2015-10-30 08:17:21 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2015-10-28 18:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2015-10-15 21:59:18 | 000,147,624 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2015-10-12 08:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc) SRV - [2015-10-12 08:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc) SRV - [2015-10-05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2015-07-17 23:36:00 | 000,283,024 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2015-07-09 13:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2015-07-01 12:53:34 | 000,022,008 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService) SRV - [2015-04-18 10:26:10 | 000,427,224 | ---- | M] (Conexant Systems, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService) SRV - [2014-05-16 10:14:52 | 000,140,016 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe -- (FastbootService) SRV - [2014-04-26 07:15:59 | 000,682,064 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe -- (Internet Manager. RunOuc) SRV - [2014-01-15 04:42:44 | 000,351,824 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2013-11-01 16:16:04 | 000,467,720 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe -- (LocationTaskManager) SRV - [2013-10-11 06:44:00 | 001,669,928 | ---- | M] (Lenovo) [On_Demand | Running] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service) SRV - [2013-10-08 10:28:56 | 000,058,360 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe -- (QuickControlMasterSvc) SRV - [2013-10-08 10:28:46 | 000,140,280 | ---- | M] (Lenovo Group Limited) [On_Demand | Running] -- C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe -- (QuickControlService) SRV - [2013-09-16 04:19:26 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2013-09-16 04:19:22 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2015-11-22 11:33:26 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2015-11-22 10:54:39 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg) DRV:[b]64bit:[/b] - [2015-11-19 13:22:31 | 000,593,624 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter) DRV:[b]64bit:[/b] - [2015-10-30 20:23:31 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2015-10-30 20:23:21 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2015-10-30 08:19:39 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2015-10-30 08:18:42 | 000,052,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2015-10-30 08:18:09 | 000,930,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1) DRV:[b]64bit:[/b] - [2015-10-30 08:18:09 | 000,385,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2015-10-30 08:18:08 | 000,218,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,200,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,078,848 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2015-10-30 08:18:03 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos) DRV:[b]64bit:[/b] - [2015-10-30 08:18:01 | 000,154,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2015-10-30 08:17:57 | 000,047,616 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS) DRV:[b]64bit:[/b] - [2015-10-30 08:17:52 | 000,254,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000) DRV:[b]64bit:[/b] - [2015-10-30 08:17:52 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2015-10-30 08:17:52 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000) DRV:[b]64bit:[/b] - [2015-10-30 08:17:52 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist) DRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,074,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2015-10-30 08:17:51 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2015-10-30 08:17:50 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2015-10-30 08:17:46 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv) DRV:[b]64bit:[/b] - [2015-10-30 08:17:42 | 000,126,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2015-10-30 08:17:42 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2015-10-30 08:17:40 | 000,694,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi) DRV:[b]64bit:[/b] - [2015-10-30 08:17:39 | 000,081,920 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,293,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,209,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,099,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,087,040 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2015-10-30 08:17:37 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf) DRV:[b]64bit:[/b] - [2015-10-30 08:17:26 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy) DRV:[b]64bit:[/b] - [2015-10-30 08:17:25 | 000,046,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2015-10-30 08:17:25 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2015-10-30 08:17:25 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea) DRV:[b]64bit:[/b] - [2015-10-30 08:17:25 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys) DRV:[b]64bit:[/b] - [2015-10-30 08:17:25 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,534,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,532,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,378,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,055,808 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,034,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2015-10-30 08:17:23 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,238,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,209,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,037,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2015-10-30 08:17:22 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn) DRV:[b]64bit:[/b] - [2015-10-30 08:17:19 | 003,445,248 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane.sys -- (RTWlanE) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,277,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,245,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,165,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,117,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2015-10-30 08:17:18 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2015-10-25 13:25:30 | 000,051,320 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI) DRV:[b]64bit:[/b] - [2015-10-25 13:23:30 | 000,636,536 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2015-10-05 09:50:22 | 000,064,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl) DRV:[b]64bit:[/b] - [2015-10-05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2015-09-26 12:18:53 | 001,561,728 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2015-07-17 23:36:32 | 006,389,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2015-07-17 11:27:24 | 000,072,400 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibmpmdrv.sys -- (IBMPMDRV) DRV:[b]64bit:[/b] - [2015-07-16 18:04:28 | 000,472,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2015-07-16 14:24:32 | 000,024,808 | ---- | M] (Lenovo Group Limited (R)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Lenovo\Lenovo Solution Center\App\ldiag\x64\ldiagio_uefi.sys -- (ldiagio_uefi) DRV:[b]64bit:[/b] - [2015-06-18 21:27:54 | 000,895,256 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64) DRV:[b]64bit:[/b] - [2015-06-15 06:53:36 | 000,761,600 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER) DRV:[b]64bit:[/b] - [2014-06-11 04:52:54 | 000,124,800 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_cdcacm.sys -- (hwusb_cdcacm) DRV:[b]64bit:[/b] - [2014-05-16 10:14:52 | 000,065,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Fastboot.sys -- (Fastboot) DRV:[b]64bit:[/b] - [2014-05-04 11:56:10 | 000,379,392 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_wwanecm.sys -- (hwusb_wwanecm) DRV:[b]64bit:[/b] - [2013-12-15 00:34:54 | 000,039,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2013-12-15 00:34:54 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2013-11-30 12:40:22 | 000,091,648 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2013-10-11 06:44:00 | 000,020,736 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TPPWR64V.SYS -- (TPPWRIF) DRV:[b]64bit:[/b] - [2013-09-16 04:19:22 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2013-08-19 05:36:04 | 000,077,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\IntelPcc.sys -- (IntelHSWPcc) DRV:[b]64bit:[/b] - [2013-08-06 09:43:00 | 000,152,832 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsX64.sys -- (Shockprf) DRV:[b]64bit:[/b] - [2013-08-06 09:43:00 | 000,028,928 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsHM64.sys -- (TPDIGIMN) DRV:[b]64bit:[/b] - [2013-08-02 02:40:04 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2013-06-19 16:22:22 | 008,244,312 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:[b]64bit:[/b] - [2013-05-30 17:16:46 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGSUsbFilt.sys -- (LGSUsbFilt) DRV:[b]64bit:[/b] - [2013-05-30 17:16:40 | 000,064,280 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt) DRV:[b]64bit:[/b] - [2013-01-25 04:46:40 | 000,109,568 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2012-12-22 05:16:12 | 000,014,976 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV:[b]64bit:[/b] - [2009-11-24 01:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV - [2015-12-16 13:51:52 | 000,056,496 | ---- | M] (GMER) [Kernel | On_Demand | Stopped] -- C:\Users\Adam\AppData\Local\Temp\kxtdrpod.sys -- (kxtdrpod) DRV - [2015-10-30 08:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus) DRV - [2015-06-28 22:12:32 | 000,034,976 | ---- | M] (Lenovo Group Limited) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys -- (SWIX64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{C5AA2E82-BEC4-47E2-B2E4-EA0AF1D0F12D}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 IE - HKLM\..\SearchScopes\{C5AA2E82-BEC4-47E2-B2E4-EA0AF1D0F12D}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data] IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 IE - HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "PL" FF - prefs.js..browser.search.hiddenOneOffs: "Encyklopedia PWN,Merlin,Wolne Lektury" FF - prefs.js..browser.search.region: "PL" FF - prefs.js..browser.search.searchengine.searchengine.uid: "[xpconnect wrapped nsIUUIDGenerator]" FF - prefs.js..browser.search.selectedEngine: "webssearches" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "https://trafficmonsoon.com/?ref=SuperMan777" FF - prefs.js..extensions.enabledAddons: flashlight%40stephennolan.com.au:1.2.1-signed FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:42.0 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2014-07-17 23:07:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Extensions [2015-12-16 13:34:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions [2015-06-17 10:29:56 | 000,000,000 | ---D | M] (Flashlight) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions\flashlight@stephennolan.com.au [2015-06-17 10:28:06 | 000,090,538 | ---- | M] () (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\firefox\profiles\bav199lt.default-1423070591943\extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-11-07 18:23:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2015-11-07 18:23:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} O1 HOSTS File: ([2015-12-16 10:43:59 | 000,000,895 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 down.baidu2016.com O1 - Hosts: 127.0.0.1 123.sogou.com O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe () O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\WINDOWS\SysNative\igfxtray.exe () O4:[b]64bit:[/b] - HKLM..\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [LenovoOptMouseUpdate] C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Lenovo Group Limited) O4:[b]64bit:[/b] - HKLM..\Run: [RtsCM] C:\WINDOWS\RtsCM64.exe (Realtek Semiconductor Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [SynLenovoHelper] C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe (Synaptics) O4:[b]64bit:[/b] - HKLM..\Run: [TpShocks] C:\WINDOWS\SysNative\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [Fastboot] C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe (Lenovo) O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation) O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited) O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-395553583-66053808-1738365731-1001..\Run: [OneDrive] C:\Users\Adam\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C17FFB4-6E49-4992-A54D-971CCC201392}: NameServer = 213.158.199.1 213.158.199.5 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{20265aec-d3fd-4f1d-8540-5af401f54c87}: DhcpNameServer = 192.168.43.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{51eacf3f-c4a5-42a8-908b-9869c48943ee}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\osf - No CLSID value found O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2015-08-07 18:17:40 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2014-01-15 10:12:38 | 000,150,608 | R--- | M] () - E:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2013-08-17 02:53:45 | 000,000,045 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{60794a9e-ad8f-11e4-8286-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{60794a9e-ad8f-11e4-8286-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 10:12:38 | 000,150,608 | R--- | M] () O33 - MountPoints2\{840dd4a1-8ec2-11e5-89ae-28d24482f56a}\Shell - "" = AutoRun O33 - MountPoints2\{840dd4a1-8ec2-11e5-89ae-28d24482f56a}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2014-01-15 10:12:38 | 000,150,608 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015-12-16 13:53:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2015-12-16 13:46:19 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp [2015-12-16 13:35:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\big [2015-12-16 11:00:08 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Tempfolder [2015-12-16 10:57:47 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\cpuminer [2015-12-16 10:57:24 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\RunDir [2015-12-16 10:56:38 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\SmartWeb [2015-12-12 15:32:20 | 018,678,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2015-12-12 15:32:15 | 022,393,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2015-12-12 15:32:15 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\readingviewresources.dll [2015-12-12 15:32:13 | 003,593,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2015-12-12 15:32:13 | 001,393,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2015-12-12 15:32:09 | 001,817,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2015-12-12 15:32:09 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2015-12-12 15:32:08 | 001,717,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll [2015-12-12 15:32:08 | 001,648,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll [2015-12-12 15:32:08 | 001,399,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2015-12-12 15:32:07 | 002,352,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll [2015-12-12 15:32:07 | 002,155,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2015-12-12 15:32:07 | 001,467,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll [2015-12-12 15:32:07 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll [2015-12-12 15:32:05 | 000,523,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\catsrvut.dll [2015-12-12 15:32:05 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll [2015-12-12 15:32:05 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rmcast.sys [2015-12-12 15:32:04 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvut.dll [2015-12-12 15:32:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wshrm.dll [2015-12-10 12:59:33 | 000,000,000 | R--D | C] -- C:\Users\Adam\3D Objects [2015-12-08 22:29:08 | 009,498,816 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerInstaller.exe [2015-12-04 01:21:58 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\TM [2015-12-03 09:26:16 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2015-12-03 09:26:15 | 002,587,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll [2015-12-03 09:26:15 | 000,870,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2015-12-03 09:26:13 | 007,476,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2015-12-03 09:26:12 | 001,995,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll [2015-12-03 09:26:10 | 001,268,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Resources.dll [2015-12-03 09:26:10 | 001,268,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.dll [2015-12-03 09:26:09 | 016,984,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2015-12-03 09:26:06 | 013,017,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2015-12-03 09:25:55 | 000,912,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usermgr.dll [2015-12-03 09:25:54 | 003,993,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2015-12-03 09:25:54 | 002,843,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2015-12-03 09:25:50 | 002,598,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll [2015-12-03 09:25:50 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ETWCoreUIComponentsResources.dll [2015-12-03 09:25:50 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ETWCoreUIComponentsResources.dll [2015-12-03 09:25:47 | 002,772,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll [2015-12-03 09:25:47 | 002,624,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll [2015-12-03 09:25:47 | 000,948,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManager.dll [2015-12-03 09:25:46 | 001,706,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll [2015-12-03 09:25:46 | 001,284,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll [2015-12-03 09:25:46 | 001,042,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingOnlineServices.dll [2015-12-03 09:25:45 | 002,185,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll [2015-12-03 09:25:44 | 002,064,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll [2015-12-03 09:25:44 | 000,938,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll [2015-12-03 09:25:43 | 003,355,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll [2015-12-03 09:25:43 | 000,697,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll [2015-12-03 09:25:42 | 001,860,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2015-12-03 09:25:42 | 000,795,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll [2015-12-03 09:25:42 | 000,638,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll [2015-12-03 09:25:42 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe [2015-12-03 09:25:40 | 002,680,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2015-12-03 09:25:40 | 001,223,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll [2015-12-03 09:25:40 | 000,975,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll [2015-12-03 09:25:40 | 000,607,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll [2015-12-03 09:25:40 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll [2015-12-03 09:25:39 | 001,944,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll [2015-12-03 09:25:39 | 000,948,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll [2015-12-03 09:25:39 | 000,517,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll [2015-12-03 09:25:39 | 000,440,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe [2015-12-03 09:25:38 | 000,870,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll [2015-12-03 09:25:38 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2015-12-03 09:25:38 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll [2015-12-03 09:25:37 | 001,395,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2015-12-03 09:25:34 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingOnlineServices.dll [2015-12-03 09:25:33 | 001,139,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2015-12-03 09:25:33 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2015-12-03 09:25:33 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll [2015-12-03 09:25:33 | 000,470,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll [2015-12-03 09:25:33 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll [2015-12-03 09:25:33 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll [2015-12-03 09:25:33 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptngc.dll [2015-12-03 09:25:32 | 001,387,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2015-12-03 09:25:32 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TextInputFramework.dll [2015-12-03 09:25:31 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll [2015-12-03 09:25:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll [2015-12-03 09:25:28 | 002,126,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl [2015-12-03 09:25:28 | 000,095,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys [2015-12-03 09:25:27 | 000,538,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWanAPI.dll [2015-12-03 09:25:27 | 000,431,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWanAPI.dll [2015-12-03 09:25:27 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll [2015-12-03 09:25:27 | 000,080,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwapi.dll [2015-12-03 09:25:26 | 002,049,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl [2015-12-03 09:25:26 | 000,063,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wwapi.dll [2015-12-03 09:25:26 | 000,058,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.dll [2015-12-03 09:25:26 | 000,051,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsUtilsV2.dll [2015-12-03 09:25:26 | 000,026,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe [2015-12-03 09:25:25 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptngc.dll [2015-12-03 09:25:25 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssign32.dll [2015-12-03 09:25:24 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe [2015-12-03 09:25:23 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\capimg.sys [2015-12-03 09:25:23 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssign32.dll [2015-12-03 09:25:23 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll [2015-12-03 09:25:22 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll [2015-12-03 09:25:18 | 007,979,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll [2015-12-03 09:25:18 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRH.dll [2015-12-03 09:25:18 | 000,704,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll [2015-12-03 09:25:17 | 000,558,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll [2015-12-03 09:25:17 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll [2015-12-03 09:25:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll [2015-12-03 09:25:15 | 006,572,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanmm.dll [2015-12-03 09:25:15 | 006,297,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll [2015-12-03 09:25:13 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanconn.dll [2015-12-03 09:25:13 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmmigrator.dll [2015-12-03 09:25:12 | 007,199,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll [2015-12-03 09:25:12 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe [2015-12-03 09:25:11 | 005,202,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll [2015-12-03 09:25:11 | 001,814,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pnidui.dll [2015-12-03 09:25:08 | 001,713,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRHInproc.dll [2015-12-03 09:25:08 | 001,443,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRHInproc.dll [2015-12-03 09:25:08 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll [2015-12-03 09:25:07 | 001,056,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll [2015-12-03 09:25:06 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll [2015-12-03 09:25:06 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll [2015-12-03 09:25:06 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NMAA.dll [2015-12-03 09:25:06 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwancfg.dll [2015-12-03 09:25:05 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll [2015-12-03 09:25:04 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll [2015-12-03 09:25:04 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll [2015-12-03 09:25:04 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll [2015-12-03 09:25:03 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll [2015-12-03 09:25:03 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll [2015-12-03 09:25:03 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinelsa.dll [2015-12-03 09:25:03 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wwanpref.dll [2015-12-03 09:25:02 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll [2015-12-03 09:25:02 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll [2015-12-03 09:25:02 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinelsa.dll [2015-12-03 09:25:02 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wininetlui.dll [2015-12-03 09:25:01 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll [2015-12-03 09:25:01 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll [2015-12-03 09:25:01 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininetlui.dll [2015-12-03 09:25:01 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosStorage.dll [2015-12-03 09:25:00 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvc.dll [2015-12-03 09:25:00 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll [2015-12-03 09:25:00 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosStorage.dll [2015-12-03 09:25:00 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshost.dll [2015-12-03 09:24:59 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2015-12-03 09:24:59 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapsBtSvc.dll [2015-12-03 09:24:59 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputLocaleManager.dll [2015-12-03 09:24:58 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll [2015-12-03 09:24:58 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll [2015-12-03 09:24:58 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll [2015-12-03 09:24:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosHostClient.dll [2015-12-03 09:24:58 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll [2015-12-03 09:24:57 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsCSP.dll [2015-12-03 09:24:57 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosHostClient.dll [2015-12-03 09:24:57 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll [2015-12-03 09:24:57 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rilproxy.dll [2015-12-03 09:24:57 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsplib.dll [2015-12-03 09:24:57 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WordBreakers.dll [2015-12-03 09:24:56 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ihvrilproxy.dll [2015-12-03 09:24:56 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapstoasttask.dll [2015-12-03 09:24:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll [2015-12-03 09:24:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapsupdatetask.dll [2015-12-03 09:24:56 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nativemap.dll [2015-12-03 09:24:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvcProxy.dll [2015-12-03 09:24:52 | 000,205,824 | ---- | C] (Nokia) -- C:\WINDOWS\SysWow64\NmaDirect.dll [2015-12-03 09:24:51 | 000,264,192 | ---- | C] (Nokia) -- C:\WINDOWS\SysNative\NmaDirect.dll [2015-12-03 09:24:51 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCoreRes.dll [2015-12-03 09:24:51 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCoreRes.dll [2015-12-03 09:24:50 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MapControls.dll [2015-12-03 09:24:50 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MapControls.dll [2015-12-03 09:24:50 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosResource.dll [2015-12-03 09:24:50 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosResource.dll [2015-12-03 09:24:50 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosTrace.dll [2015-12-03 09:24:50 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosTrace.dll [2015-12-03 09:24:49 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosHost.dll [2015-12-03 09:24:49 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosHost.dll [2015-12-03 09:24:49 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlStringsRes.dll [2015-12-03 09:24:49 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlStringsRes.dll [2015-12-01 10:59:52 | 000,000,000 | ---D | C] -- C:\Users\Adam\REACHit [2015-12-01 10:59:45 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Downloaded Installations [2015-11-25 10:33:47 | 000,809,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe [2015-11-25 10:33:47 | 000,704,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe [2015-11-25 10:33:47 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll [2015-11-25 10:33:47 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll [2015-11-25 10:33:47 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-AppModelExecEvents.dll [2015-11-24 10:18:21 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\ElevatedDiagnostics [2015-11-21 09:42:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy [2015-11-19 14:52:45 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\ActiveSync [2015-11-19 14:28:06 | 000,000,000 | --SD | C] -- C:\Users\Adam\AppData\Roaming\Microsoft [2015-11-19 14:28:06 | 000,000,000 | R-SD | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell [2015-11-19 14:28:06 | 000,000,000 | R--D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2015-11-19 14:28:06 | 000,000,000 | R--D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2015-11-19 14:28:06 | 000,000,000 | R--D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Ustawienia lokalne [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\AppData\Local\Temporary Internet Files [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Szablony [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\SendTo [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Recent [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\PrintHood [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\NetHood [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Documents\Moje wideo [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Documents\Moje obrazy [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Moje dokumenty [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Documents\Moja muzyka [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Menu Start [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\AppData\Local\Historia [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Dane aplikacji [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\AppData\Local\Dane aplikacji [2015-11-19 14:28:06 | 000,000,000 | -HSD | C] -- C:\Users\Adam\Cookies [2015-11-19 14:28:06 | 000,000,000 | -H-D | C] -- C:\Users\Adam\AppData [2015-11-19 14:28:06 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Temp [2015-11-19 14:28:06 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Microsoft [2015-11-19 14:28:06 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2015-11-19 14:25:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant [2015-11-19 14:24:51 | 000,427,224 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\SysWow64\SASrv.exe [2015-11-19 14:24:43 | 000,206,552 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\SysNative\CxAudMsg64.exe [2015-11-19 14:24:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby [2015-11-19 14:24:33 | 000,000,000 | ---D | C] -- C:\Program Files\Dolby Digital Plus [2015-11-19 14:24:23 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2015-11-19 14:24:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Conexant [2015-11-19 14:23:56 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT [2015-11-19 14:23:55 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2015-11-19 14:23:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sda [2015-11-19 14:23:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Lenovo [2015-11-19 14:23:48 | 000,086,528 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.DLL [2015-11-19 14:23:48 | 000,082,432 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL [2015-11-19 14:23:03 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2015-11-19 14:22:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel [2015-11-19 14:22:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Validity [2015-11-19 14:21:58 | 002,718,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll [2015-11-19 14:19:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2015-11-19 14:17:30 | 000,000,000 | -HSD | C] -- C:\Recovery [2015-11-19 14:17:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther [2015-11-19 14:13:05 | 000,000,000 | ---D | C] -- C:\Windows.old [2015-11-19 14:12:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppCapture.dll [2015-11-19 14:12:31 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.proxy.dll [2015-11-19 14:12:30 | 002,544,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2015-11-19 14:12:30 | 002,179,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2015-11-19 14:12:30 | 000,803,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2015-11-19 14:12:30 | 000,536,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2015-11-19 14:12:30 | 000,516,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2015-11-19 14:12:30 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll [2015-11-19 14:12:30 | 000,408,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2015-11-19 14:12:30 | 000,382,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll [2015-11-19 14:12:30 | 000,369,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2015-11-19 14:12:30 | 000,366,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll [2015-11-19 14:12:30 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe [2015-11-19 14:12:30 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2015-11-19 14:12:30 | 000,245,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll [2015-11-19 14:12:30 | 000,116,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfps.dll [2015-11-19 14:12:30 | 000,110,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll [2015-11-19 14:12:30 | 000,088,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\remoteaudioendpoint.dll [2015-11-19 14:12:30 | 000,073,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\remoteaudioendpoint.dll [2015-11-19 14:12:27 | 011,545,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2015-11-19 14:12:27 | 009,918,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2015-11-19 14:12:27 | 002,444,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll [2015-11-19 14:12:27 | 002,001,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll [2015-11-19 14:12:27 | 000,911,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcomp.dll [2015-11-19 14:12:27 | 000,698,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll [2015-11-19 14:12:27 | 000,675,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dcomp.dll [2015-11-19 14:12:27 | 000,674,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll [2015-11-19 14:12:27 | 000,647,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2015-11-19 14:12:27 | 000,630,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe [2015-11-19 14:12:27 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneProviders.dll [2015-11-19 14:12:27 | 000,586,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll [2015-11-19 14:12:27 | 000,586,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll [2015-11-19 14:12:27 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll [2015-11-19 14:12:27 | 000,540,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe [2015-11-19 14:12:27 | 000,523,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe [2015-11-19 14:12:27 | 000,517,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv [2015-11-19 14:12:27 | 000,511,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll [2015-11-19 14:12:27 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll [2015-11-19 14:12:27 | 000,450,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll [2015-11-19 14:12:27 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe [2015-11-19 14:12:27 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll [2015-11-19 14:12:27 | 000,365,568 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll [2015-11-19 14:12:27 | 000,334,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\policymanager.dll [2015-11-19 14:12:27 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll [2015-11-19 14:12:27 | 000,303,104 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll [2015-11-19 14:12:27 | 000,296,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\policymanager.dll [2015-11-19 14:12:27 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll [2015-11-19 14:12:27 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll [2015-11-19 14:12:27 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCore.dll [2015-11-19 14:12:27 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe [2015-11-19 14:12:27 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll [2015-11-19 14:12:27 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll [2015-11-19 14:12:27 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provops.dll [2015-11-19 14:12:27 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll [2015-11-19 14:12:27 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe [2015-11-19 14:12:27 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCsp.dll [2015-11-19 14:12:27 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll [2015-11-19 14:12:27 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontsub.dll [2015-11-19 14:12:27 | 000,092,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll [2015-11-19 14:12:27 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NFCProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tzautoupdate.dll [2015-11-19 14:12:27 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppCapture.dll [2015-11-19 14:12:27 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BarcodeProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvPluginEng.dll [2015-11-19 14:12:27 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe [2015-11-19 14:12:27 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll [2015-11-19 14:12:27 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemovableMediaProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,045,568 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll [2015-11-19 14:12:27 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.proxy.dll [2015-11-19 14:12:27 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe [2015-11-19 14:12:27 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll [2015-11-19 14:12:27 | 000,035,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfpmp.exe [2015-11-19 14:12:27 | 000,032,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfpmp.exe [2015-11-19 14:12:27 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringconfigsp.dll [2015-11-19 14:12:27 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe [2015-11-19 14:12:27 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll [2015-11-19 14:12:27 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IcsEntitlementHost.exe [2015-11-19 14:12:27 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dciman32.dll [2015-11-19 14:12:27 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpk.dll [2015-11-19 14:03:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Microsoft [2015-11-19 14:00:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer [2015-11-19 14:00:54 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2015-11-19 14:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies [2015-11-19 14:00:54 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2015-11-19 14:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild [2015-11-19 14:00:24 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll [2015-11-19 14:00:24 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2015-11-19 14:00:24 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe [2015-11-19 14:00:16 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll [2015-11-19 14:00:16 | 000,124,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2015-11-19 14:00:16 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe [2015-11-19 13:22:31 | 000,593,624 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\SysNative\drivers\RtkBtfilter.sys [2015-11-17 12:21:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2015-11-17 12:21:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015-12-16 13:55:33 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2015-12-16 13:55:11 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat [2015-12-16 13:53:31 | 634,798,311 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2015-12-16 13:53:31 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2015-12-16 13:53:27 | 1672,118,272 | -HS- | M] () -- C:\hiberfil.sys [2015-12-16 13:48:53 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys [2015-12-16 13:44:01 | 000,063,736 | ---- | M] () -- C:\Users\Adam\Desktop\problemy.jpg [2015-12-16 13:40:41 | 001,845,594 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2015-12-16 13:40:41 | 000,818,302 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat [2015-12-16 13:40:41 | 000,734,494 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2015-12-16 13:40:41 | 000,157,970 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat [2015-12-16 13:40:41 | 000,139,034 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2015-12-16 13:39:49 | 833,163,264 | -HS- | M] () -- C:\WINDOWS\lenovo_fastboot.img [2015-12-16 13:35:32 | 000,686,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll [2015-12-16 11:00:41 | 000,004,768 | ---- | M] () -- C:\WINDOWS\SysWow64\Kaaplhv.ini [2015-12-16 11:00:41 | 000,002,488 | ---- | M] () -- C:\WINDOWS\SysWow64\KaaplhvOff.ini [2015-12-16 11:00:41 | 000,002,488 | ---- | M] () -- C:\WINDOWS\SysNative\KaaplhvOff.ini [2015-12-16 10:43:59 | 000,000,895 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hp.bak [2015-12-16 10:43:59 | 000,000,895 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts [2015-12-16 00:01:06 | 000,056,456 | ---- | M] () -- C:\Users\Adam\Desktop\12391003_983513595062038_5589053736203047197_n.jpg [2015-12-14 23:54:24 | 005,760,425 | ---- | M] () -- C:\WINDOWS\NGIPacket.KTL [2015-12-14 23:54:24 | 000,293,521 | ---- | M] () -- C:\WINDOWS\NGIControl.KTL [2015-12-14 23:54:23 | 000,288,104 | ---- | M] () -- C:\WINDOWS\SentOSPackets.KTL [2015-12-14 23:54:23 | 000,139,910 | ---- | M] () -- C:\WINDOWS\Control.KTL [2015-12-13 01:00:20 | 000,369,400 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2015-12-08 22:29:10 | 009,498,816 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerInstaller.exe [2015-12-01 01:33:29 | 000,826,872 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2015-12-01 01:33:29 | 000,176,632 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2015-11-24 13:07:40 | 001,817,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2015-11-24 11:26:50 | 001,399,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2015-11-24 10:54:15 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\readingviewresources.dll [2015-11-24 10:45:01 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wshrm.dll [2015-11-24 10:37:04 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rmcast.sys [2015-11-24 10:19:35 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll [2015-11-24 10:12:41 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\catsrvut.dll [2015-11-24 09:58:24 | 000,604,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2015-11-24 09:55:41 | 001,393,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2015-11-24 09:52:05 | 001,717,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll [2015-11-24 09:49:47 | 001,648,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll [2015-11-24 09:27:15 | 003,593,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2015-11-24 09:14:34 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvut.dll [2015-11-24 08:59:27 | 001,467,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll [2015-11-24 08:57:56 | 001,328,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll [2015-11-24 08:35:50 | 022,393,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2015-11-24 08:29:31 | 002,352,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll [2015-11-24 08:11:35 | 018,678,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2015-11-24 08:04:25 | 002,155,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2015-11-22 11:47:58 | 007,476,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2015-11-22 11:47:45 | 002,653,816 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2015-11-22 11:41:56 | 001,284,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll [2015-11-22 11:41:48 | 000,026,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe [2015-11-22 11:41:04 | 001,859,448 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2015-11-22 11:35:10 | 000,538,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWanAPI.dll [2015-11-22 11:34:32 | 000,080,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwapi.dll [2015-11-22 11:34:09 | 000,975,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll [2015-11-22 11:33:49 | 000,058,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.dll [2015-11-22 11:33:40 | 000,051,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsUtilsV2.dll [2015-11-22 11:33:26 | 000,095,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys [2015-11-22 11:26:06 | 000,431,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWanAPI.dll [2015-11-22 11:25:38 | 000,063,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wwapi.dll [2015-11-22 11:24:14 | 002,772,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll [2015-11-22 11:20:25 | 000,795,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll [2015-11-22 11:19:24 | 000,440,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe [2015-11-22 11:14:03 | 002,185,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll [2015-11-22 11:00:26 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsCSP.dll [2015-11-22 11:00:24 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosResource.dll [2015-11-22 10:57:57 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosHost.dll [2015-11-22 10:57:33 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosTrace.dll [2015-11-22 10:57:30 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCoreRes.dll [2015-11-22 10:57:21 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MapControls.dll [2015-11-22 10:56:52 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rilproxy.dll [2015-11-22 10:56:33 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ihvrilproxy.dll [2015-11-22 10:56:31 | 001,268,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.dll [2015-11-22 10:56:21 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosHostClient.dll [2015-11-22 10:55:24 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvcProxy.dll [2015-11-22 10:55:14 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll [2015-11-22 10:54:51 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll [2015-11-22 10:54:51 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2015-11-22 10:54:46 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ETWCoreUIComponentsResources.dll [2015-11-22 10:54:46 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll [2015-11-22 10:54:44 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlStringsRes.dll [2015-11-22 10:54:39 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\capimg.sys [2015-11-22 10:54:37 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll [2015-11-22 10:54:26 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsplib.dll [2015-11-22 10:54:25 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nativemap.dll [2015-11-22 10:52:59 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll [2015-11-22 10:52:58 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapsupdatetask.dll [2015-11-22 10:52:47 | 016,984,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2015-11-22 10:52:14 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininetlui.dll [2015-11-22 10:51:53 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosStorage.dll [2015-11-22 10:51:24 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe [2015-11-22 10:51:21 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll [2015-11-22 10:51:20 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvc.dll [2015-11-22 10:51:08 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapstoasttask.dll [2015-11-22 10:50:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssign32.dll [2015-11-22 10:49:54 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll [2015-11-22 10:49:44 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshost.dll [2015-11-22 10:49:41 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe [2015-11-22 10:49:25 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wwanpref.dll [2015-11-22 10:48:59 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\SensorsCx.dll [2015-11-22 10:48:33 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosResource.dll [2015-11-22 10:47:27 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll [2015-11-22 10:46:20 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll [2015-11-22 10:46:17 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll [2015-11-22 10:45:44 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe [2015-11-22 10:45:37 | 000,264,192 | ---- | M] (Nokia) -- C:\WINDOWS\SysNative\NmaDirect.dll [2015-11-22 10:45:32 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosHost.dll [2015-11-22 10:45:16 | 000,638,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll [2015-11-22 10:45:14 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosTrace.dll [2015-11-22 10:45:13 | 006,572,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanmm.dll [2015-11-22 10:45:09 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCoreRes.dll [2015-11-22 10:45:07 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwancfg.dll [2015-11-22 10:45:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MapControls.dll [2015-11-22 10:44:55 | 000,558,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll [2015-11-22 10:44:15 | 001,268,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Resources.dll [2015-11-22 10:44:06 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosHostClient.dll [2015-11-22 10:43:53 | 000,704,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll [2015-11-22 10:43:34 | 000,459,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll [2015-11-22 10:43:32 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll [2015-11-22 10:43:01 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll [2015-11-22 10:42:46 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll [2015-11-22 10:42:35 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ETWCoreUIComponentsResources.dll [2015-11-22 10:42:34 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlStringsRes.dll [2015-11-22 10:42:32 | 007,979,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll [2015-11-22 10:42:28 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WordBreakers.dll [2015-11-22 10:42:25 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmmigrator.dll [2015-11-22 10:42:15 | 013,017,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2015-11-22 10:41:20 | 000,607,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll [2015-11-22 10:41:14 | 001,814,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pnidui.dll [2015-11-22 10:41:13 | 000,948,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManager.dll [2015-11-22 10:40:54 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanconn.dll [2015-11-22 10:40:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll [2015-11-22 10:40:23 | 001,056,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll [2015-11-22 10:40:18 | 000,850,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll [2015-11-22 10:40:01 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wininetlui.dll [2015-11-22 10:39:54 | 001,713,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRHInproc.dll [2015-11-22 10:39:52 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinelsa.dll [2015-11-22 10:39:49 | 000,957,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll [2015-11-22 10:39:41 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosStorage.dll [2015-11-22 10:39:23 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll [2015-11-22 10:39:16 | 002,126,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl [2015-11-22 10:39:16 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2015-11-22 10:39:13 | 000,938,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll [2015-11-22 10:39:06 | 000,870,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2015-11-22 10:39:01 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapsBtSvc.dll [2015-11-22 10:38:54 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptngc.dll [2015-11-22 10:38:50 | 001,223,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll [2015-11-22 10:38:46 | 000,912,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usermgr.dll [2015-11-22 10:38:29 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssign32.dll [2015-11-22 10:37:36 | 000,515,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll [2015-11-22 10:37:19 | 001,395,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2015-11-22 10:37:08 | 002,624,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll [2015-11-22 10:36:43 | 001,042,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingOnlineServices.dll [2015-11-22 10:34:52 | 002,843,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2015-11-22 10:34:51 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll [2015-11-22 10:34:49 | 000,345,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2015-11-22 10:34:41 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll [2015-11-22 10:34:39 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2015-11-22 10:34:31 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll [2015-11-22 10:33:57 | 002,587,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll [2015-11-22 10:33:46 | 000,205,824 | ---- | M] (Nokia) -- C:\WINDOWS\SysWow64\NmaDirect.dll [2015-11-22 10:32:10 | 000,346,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll [2015-11-22 10:32:02 | 000,340,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll [2015-11-22 10:31:18 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll [2015-11-22 10:31:17 | 000,470,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll [2015-11-22 10:31:01 | 007,199,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll [2015-11-22 10:30:34 | 002,598,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll [2015-11-22 10:29:27 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll [2015-11-22 10:28:55 | 001,443,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRHInproc.dll [2015-11-22 10:28:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinelsa.dll [2015-11-22 10:28:28 | 000,784,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NMAA.dll [2015-11-22 10:28:27 | 000,870,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll [2015-11-22 10:28:27 | 000,793,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRH.dll [2015-11-22 10:28:07 | 001,387,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2015-11-22 10:28:04 | 000,948,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll [2015-11-22 10:27:56 | 000,711,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll [2015-11-22 10:27:54 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptngc.dll [2015-11-22 10:27:53 | 002,049,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl [2015-11-22 10:27:51 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll [2015-11-22 10:27:34 | 003,993,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2015-11-22 10:27:25 | 001,944,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll [2015-11-22 10:26:53 | 000,421,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll [2015-11-22 10:26:12 | 001,139,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2015-11-22 10:26:06 | 000,709,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingOnlineServices.dll [2015-11-22 10:26:03 | 003,355,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll [2015-11-22 10:25:33 | 006,297,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll [2015-11-22 10:25:12 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll [2015-11-22 10:24:59 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TextInputFramework.dll [2015-11-22 10:24:53 | 001,995,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll [2015-11-22 10:24:49 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll [2015-11-22 10:24:48 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputLocaleManager.dll [2015-11-22 10:23:02 | 005,202,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll [2015-11-22 10:20:27 | 001,860,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2015-11-22 10:19:57 | 002,064,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll [2015-11-22 10:18:53 | 000,697,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll [2015-11-22 10:18:48 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll [2015-11-22 10:17:23 | 002,680,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2015-11-22 10:16:58 | 001,706,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll [2015-11-22 10:11:36 | 000,517,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll [2015-11-21 07:21:56 | 000,809,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe [2015-11-21 07:02:53 | 000,704,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe [2015-11-21 06:44:47 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-AppModelExecEvents.dll [2015-11-21 06:29:32 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll [2015-11-21 06:07:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll [2015-11-19 14:47:16 | 000,019,053 | ---- | M] () -- C:\WINDOWS\diagwrn.xml [2015-11-19 14:47:16 | 000,019,053 | ---- | M] () -- C:\WINDOWS\diagerr.xml [2015-11-19 14:42:52 | 000,023,140 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2015-11-19 14:25:25 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf [2015-11-19 14:24:07 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl [2015-11-19 14:23:55 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf [2015-11-19 14:23:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf [2015-11-19 14:23:53 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2015-11-19 14:23:42 | 000,000,200 | ---- | M] () -- C:\WINDOWS\SysNative\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat [2015-11-19 14:22:42 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf [2015-11-19 14:12:31 | 000,334,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe [2015-11-19 14:12:31 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppCapture.dll [2015-11-19 14:12:31 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.proxy.dll [2015-11-19 14:12:30 | 002,544,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2015-11-19 14:12:30 | 002,179,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2015-11-19 14:12:30 | 000,803,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2015-11-19 14:12:30 | 000,536,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2015-11-19 14:12:30 | 000,516,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2015-11-19 14:12:30 | 000,497,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll [2015-11-19 14:12:30 | 000,408,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2015-11-19 14:12:30 | 000,382,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll [2015-11-19 14:12:30 | 000,369,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2015-11-19 14:12:30 | 000,366,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll [2015-11-19 14:12:30 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2015-11-19 14:12:30 | 000,245,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll [2015-11-19 14:12:30 | 000,116,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfps.dll [2015-11-19 14:12:30 | 000,110,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll [2015-11-19 14:12:30 | 000,088,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\remoteaudioendpoint.dll [2015-11-19 14:12:30 | 000,073,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\remoteaudioendpoint.dll [2015-11-19 14:12:27 | 011,545,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2015-11-19 14:12:27 | 009,918,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2015-11-19 14:12:27 | 002,444,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll [2015-11-19 14:12:27 | 002,001,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll [2015-11-19 14:12:27 | 000,911,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcomp.dll [2015-11-19 14:12:27 | 000,698,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll [2015-11-19 14:12:27 | 000,675,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dcomp.dll [2015-11-19 14:12:27 | 000,674,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll [2015-11-19 14:12:27 | 000,647,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2015-11-19 14:12:27 | 000,630,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe [2015-11-19 14:12:27 | 000,623,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneProviders.dll [2015-11-19 14:12:27 | 000,586,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll [2015-11-19 14:12:27 | 000,586,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll [2015-11-19 14:12:27 | 000,543,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll [2015-11-19 14:12:27 | 000,540,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe [2015-11-19 14:12:27 | 000,523,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe [2015-11-19 14:12:27 | 000,517,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv [2015-11-19 14:12:27 | 000,511,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll [2015-11-19 14:12:27 | 000,490,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll [2015-11-19 14:12:27 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll [2015-11-19 14:12:27 | 000,414,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe [2015-11-19 14:12:27 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll [2015-11-19 14:12:27 | 000,365,568 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll [2015-11-19 14:12:27 | 000,334,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\policymanager.dll [2015-11-19 14:12:27 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll [2015-11-19 14:12:27 | 000,303,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll [2015-11-19 14:12:27 | 000,296,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\policymanager.dll [2015-11-19 14:12:27 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll [2015-11-19 14:12:27 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll [2015-11-19 14:12:27 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCore.dll [2015-11-19 14:12:27 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe [2015-11-19 14:12:27 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll [2015-11-19 14:12:27 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll [2015-11-19 14:12:27 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provops.dll [2015-11-19 14:12:27 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll [2015-11-19 14:12:27 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe [2015-11-19 14:12:27 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCsp.dll [2015-11-19 14:12:27 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll [2015-11-19 14:12:27 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontsub.dll [2015-11-19 14:12:27 | 000,092,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll [2015-11-19 14:12:27 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NFCProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tzautoupdate.dll [2015-11-19 14:12:27 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppCapture.dll [2015-11-19 14:12:27 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BarcodeProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvPluginEng.dll [2015-11-19 14:12:27 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe [2015-11-19 14:12:27 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll [2015-11-19 14:12:27 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemovableMediaProvisioningPlugin.dll [2015-11-19 14:12:27 | 000,045,568 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll [2015-11-19 14:12:27 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.proxy.dll [2015-11-19 14:12:27 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe [2015-11-19 14:12:27 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll [2015-11-19 14:12:27 | 000,035,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfpmp.exe [2015-11-19 14:12:27 | 000,032,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfpmp.exe [2015-11-19 14:12:27 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringconfigsp.dll [2015-11-19 14:12:27 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe [2015-11-19 14:12:27 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll [2015-11-19 14:12:27 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IcsEntitlementHost.exe [2015-11-19 14:12:27 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dciman32.dll [2015-11-19 14:12:27 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpk.dll [2015-11-19 14:09:16 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\synth3dvsc.sys.mui [2015-11-19 14:09:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\netvsc.sys.mui [2015-11-19 14:09:16 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\vmstorfl.sys.mui [2015-11-19 14:09:16 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\dmvsc.sys.mui [2015-11-19 14:09:16 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\usbrpm.sys.mui [2015-11-19 14:09:14 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\fvevol.sys.mui [2015-11-19 14:09:12 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\en-US\WpdMtpDr.dll.mui [2015-11-19 14:09:11 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\en-US\NdisImPlatform.sys.mui [2015-11-19 14:09:10 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\en-US\ndiscap.sys.mui [2015-11-19 14:09:10 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\en-US\wfplwfs.sys.mui [2015-11-19 14:09:05 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\nwifi.sys.mui [2015-11-19 14:09:05 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\NdisImPlatform.sys.mui [2015-11-19 14:09:05 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mslldp.sys.mui [2015-11-19 14:09:05 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\agilevpn.sys.mui [2015-11-19 14:09:05 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ws2ifsl.sys.mui [2015-11-19 14:09:04 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\tcpip.sys.mui [2015-11-19 14:09:04 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ntfs.sys.mui [2015-11-19 14:09:04 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\srv2.sys.mui [2015-11-19 14:09:04 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ndis.sys.mui [2015-11-19 14:09:04 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mrxsmb.sys.mui [2015-11-19 14:09:04 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\http.sys.mui [2015-11-19 14:09:04 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\afd.sys.mui [2015-11-19 14:09:04 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mup.sys.mui [2015-11-19 14:09:04 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\en-US\SensorsHid.dll.mui [2015-11-19 14:09:04 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\storqosflt.sys.mui [2015-11-19 14:09:04 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\refsv1.sys.mui [2015-11-19 14:09:04 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\tunnel.sys.mui [2015-11-19 14:09:04 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ndiscap.sys.mui [2015-11-19 14:09:04 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\rdbss.sys.mui [2015-11-19 14:09:04 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\fltmgr.sys.mui [2015-11-19 14:09:04 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\modem.sys.mui [2015-11-19 14:09:04 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wfplwfs.sys.mui [2015-11-19 14:09:04 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wdf01000.sys.mui [2015-11-19 14:09:04 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ndisuio.sys.mui [2015-11-19 14:09:04 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wudfpf.sys.mui [2015-11-19 14:09:04 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\volmgrx.sys.mui [2015-11-19 14:09:04 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\partmgr.sys.mui [2015-11-19 14:09:04 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mountmgr.sys.mui [2015-11-19 14:09:04 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\en-US\SensorsCx.dll.mui [2015-11-19 14:09:04 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\NdisVirtualBus.sys.mui [2015-11-19 14:09:02 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\scfilter.sys.mui [2015-11-19 14:09:02 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mshidumdf.sys.mui [2015-11-19 14:08:59 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\volsnap.sys.mui [2015-11-19 14:08:59 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\spaceport.sys.mui [2015-11-19 14:08:59 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\usbport.sys.mui [2015-11-19 14:08:59 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\USBHUB3.SYS.mui [2015-11-19 14:08:59 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\pacer.sys.mui [2015-11-19 14:08:59 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\USBXHCI.SYS.mui [2015-11-19 14:08:59 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\usbhub.sys.mui [2015-11-19 14:08:59 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\1394ohci.sys.mui [2015-11-19 14:08:59 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\vhdmp.sys.mui [2015-11-19 14:08:59 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\vdrvroot.sys.mui [2015-11-19 14:08:59 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\serial.sys.mui [2015-11-19 14:08:59 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\i8042prt.sys.mui [2015-11-19 14:08:59 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\tpm.sys.mui [2015-11-19 14:08:59 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\pci.sys.mui [2015-11-19 14:08:59 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\battc.sys.mui [2015-11-19 14:08:59 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ataport.sys.mui [2015-11-19 14:08:59 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\luafv.sys.mui [2015-11-19 14:08:59 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\hidclass.sys.mui [2015-11-19 14:08:59 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wof.sys.mui [2015-11-19 14:08:59 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\sermouse.sys.mui [2015-11-19 14:08:59 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wacompen.sys.mui [2015-11-19 14:08:59 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mouclass.sys.mui [2015-11-19 14:08:59 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\kbdclass.sys.mui [2015-11-19 14:08:59 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\parport.sys.mui [2015-11-19 14:08:59 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\isapnp.sys.mui [2015-11-19 14:08:59 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\usbehci.sys.mui [2015-11-19 14:08:59 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\umbus.sys.mui [2015-11-19 14:08:59 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mssmbios.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\vhf.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\USBSTOR.SYS.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\ULIAGPKX.SYS.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\UAGP35.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\qwavedrv.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\NV_AGP.SYS.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\MTConfig.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\mouhid.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\kbdhid.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\GAGP30KX.sys.mui [2015-11-19 14:08:59 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\AGP440.sys.mui [2015-11-19 14:08:59 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\volmgr.sys.mui [2015-11-19 14:08:59 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\pdc.sys.mui [2015-11-19 14:08:59 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\msgpiowin32.sys.mui [2015-11-19 14:08:58 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\wmbclass.sys.mui [2015-11-19 14:08:58 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\bthport.sys.mui [2015-11-19 14:08:58 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\processr.sys.mui [2015-11-19 14:08:58 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\intelppm.sys.mui [2015-11-19 14:08:58 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\amdppm.sys.mui [2015-11-19 14:08:58 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\amdk8.sys.mui [2015-11-19 14:08:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BthLEEnum.sys.mui [2015-11-19 14:08:58 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\acpi.sys.mui [2015-11-19 14:08:58 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\EhStorTcgDrv.sys.mui [2015-11-19 14:08:58 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui [2015-11-19 14:08:58 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\sdbus.sys.mui [2015-11-19 14:08:58 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\dumpsd.sys.mui [2015-11-19 14:08:58 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\IPMIDrv.sys.mui [2015-11-19 14:08:58 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\disk.sys.mui [2015-11-19 14:08:58 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\hidbth.sys.mui [2015-11-19 14:08:58 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\bthpan.sys.mui [2015-11-19 14:08:58 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\portcls.sys.mui [2015-11-19 14:08:58 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\pcmcia.sys.mui [2015-11-19 14:08:58 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\en-US\HidBthLE.dll.mui [2015-11-19 14:08:58 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\hdaudbus.sys.mui [2015-11-19 14:08:58 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BthA2DP.sys.mui [2015-11-19 14:08:58 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\hidi2c.sys.mui [2015-11-19 14:08:58 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BthMini.SYS.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\sdstor.sys.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\rndismpx.sys.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\rndismp6.sys.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\HdAudio.sys.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BTHUSB.SYS.mui [2015-11-19 14:08:58 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\bthhfenum.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\usbvideo.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\USBAUDIO.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\serscan.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\rfcomm.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\pnpmem.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\cdrom.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\bthenum.sys.mui [2015-11-19 14:08:58 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BthAvrcpTg.sys.mui [2015-11-19 14:08:58 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\en-US\BthhfHid.sys.mui [2015-11-19 13:22:31 | 000,593,624 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\SysNative\drivers\RtkBtfilter.sys [2015-11-19 13:22:31 | 000,050,928 | ---- | M] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll [2015-11-19 13:22:31 | 000,050,876 | ---- | M] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll [2015-11-19 13:22:31 | 000,049,088 | ---- | M] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll [2015-11-19 13:22:31 | 000,048,276 | ---- | M] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll [2015-11-19 13:22:31 | 000,048,192 | ---- | M] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll [2015-11-19 13:22:31 | 000,045,868 | ---- | M] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll [2015-11-19 13:22:31 | 000,040,516 | ---- | M] () -- C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll [2015-11-19 13:22:31 | 000,033,620 | ---- | M] () -- C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015-12-16 13:53:31 | 634,798,311 | ---- | C] () -- C:\WINDOWS\MEMORY.DMP [2015-12-16 13:44:01 | 000,063,736 | ---- | C] () -- C:\Users\Adam\Desktop\problemy.jpg [2015-12-16 11:00:33 | 000,004,768 | ---- | C] () -- C:\WINDOWS\SysWow64\Kaaplhv.ini [2015-12-16 11:00:33 | 000,002,488 | ---- | C] () -- C:\WINDOWS\SysWow64\KaaplhvOff.ini [2015-12-16 11:00:33 | 000,002,488 | ---- | C] () -- C:\WINDOWS\SysNative\KaaplhvOff.ini [2015-12-16 00:01:05 | 000,056,456 | ---- | C] () -- C:\Users\Adam\Desktop\12391003_983513595062038_5589053736203047197_n.jpg [2015-12-04 12:01:39 | 000,139,910 | ---- | C] () -- C:\WINDOWS\Control.KTL [2015-12-03 09:25:49 | 002,653,816 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2015-12-03 09:25:45 | 001,859,448 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2015-11-19 14:36:27 | 1672,118,272 | -HS- | C] () -- C:\hiberfil.sys [2015-11-19 14:34:34 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2015-11-19 14:25:25 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf [2015-11-19 14:24:49 | 000,004,664 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\CxSfPt.dat [2015-11-19 14:24:38 | 000,002,832 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\SamSfPa.dat [2015-11-19 14:24:07 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2015-11-19 14:23:55 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf [2015-11-19 14:23:54 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf [2015-11-19 14:23:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2015-11-19 14:23:42 | 000,000,200 | ---- | C] () -- C:\WINDOWS\SysNative\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat [2015-11-19 14:23:42 | 000,000,180 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat [2015-11-19 14:22:42 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf [2015-11-19 14:19:49 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2015-11-19 14:18:23 | 000,369,400 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2015-11-19 14:17:20 | 000,054,924 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf [2015-11-19 14:17:20 | 000,054,924 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf [2015-11-19 13:22:31 | 000,050,928 | ---- | C] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll [2015-11-19 13:22:31 | 000,050,876 | ---- | C] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll [2015-11-19 13:22:31 | 000,049,088 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll [2015-11-19 13:22:31 | 000,048,276 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll [2015-11-19 13:22:31 | 000,048,192 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll [2015-11-19 13:22:31 | 000,045,868 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll [2015-11-19 13:22:31 | 000,040,516 | ---- | C] () -- C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll [2015-11-19 13:22:31 | 000,033,620 | ---- | C] () -- C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll [2015-10-30 08:24:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2015-10-30 08:24:43 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2015-10-30 08:18:39 | 000,164,224 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll [2015-10-30 08:18:36 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2015-10-30 08:18:36 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2015-10-30 08:18:34 | 000,157,696 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll [2015-10-30 08:18:34 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll [2015-10-30 08:18:31 | 000,252,928 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll [2015-10-30 08:18:31 | 000,029,184 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe [2015-10-30 08:18:29 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2015-10-30 08:18:29 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll [2015-10-30 08:18:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll [2015-10-30 08:18:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2015-10-30 08:18:23 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat [2015-10-30 08:17:40 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2014-11-10 10:22:07 | 000,000,000 | ---- | C] () -- C:\Users\Adam\defogger_reenable [2014-07-18 22:48:26 | 000,007,637 | ---- | C] () -- C:\Users\Adam\AppData\Local\Resmon.ResmonCfg [2014-07-18 11:14:22 | 000,026,647 | ---- | C] () -- C:\Users\Adam\battery-report.html [2014-07-17 21:52:23 | 000,000,193 | ---- | C] () -- C:\Users\Adam\AppData\Local\RegisteredPackageInformation.xml [2014-05-16 09:45:16 | 000,044,104 | ---- | C] () -- C:\WINDOWS\runSW.exe [2014-05-16 09:45:15 | 000,451,072 | ---- | C] () -- C:\WINDOWS\SysWow64\ISSRemoveSP.exe [color=#E56717]========== ZeroAccess Check ==========[/color] [2015-11-19 14:59:11 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\windows.storage.dll -- [2015-10-30 08:17:59 | 006,601,408 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\windows.storage.dll -- [2015-10-30 08:18:31 | 005,237,336 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015-10-30 08:17:43 | 000,987,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2015-10-30 08:18:21 | 000,765,440 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015-10-30 08:17:45 | 000,518,656 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2015-11-07 19:34:42 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\AVG [2015-12-16 10:57:47 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\cpuminer [2014-07-17 21:53:28 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Lenovo [2015-09-25 22:07:26 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\LSC [2015-02-09 18:18:04 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ModelViews [2014-10-20 12:17:25 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\My Bluetooth [2015-10-09 23:52:28 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\NeuroProgrammer3 [2015-02-04 17:58:10 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Opera Software [2015-12-16 13:34:54 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\RunDir [2015-11-07 19:17:54 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\TuneUp Software [2015-03-19 22:12:35 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WandoujiaUsbDriver [2015-11-08 10:48:07 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WarThunder [2015-02-11 18:00:27 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WebApp [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 237 bytes -> C:\Users\Adam\SkyDrive:ms-properties @Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:157E1AD3 < End of report >

Dodano 16.12.2015 14:18:00:

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2015-12-16 13:58:49 - Run 7 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Adam\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.10586.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,89 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 49,48% Memory free 4,58 Gb Paging File | 2,62 Gb Available in Paging File | 57,17% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,25 Gb Total Space | 415,56 Gb Free Space | 92,09% Space Free | Partition Type: NTFS Drive E: | 48,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: ADAM-PC | User Name: Adam | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- Reg Error: Key error. File not found .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 91 DD 89 DB D0 22 D1 01 [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0B67A310-B464-46E4-BCF9-DCDE3A1AA88F}" = rport=138 | protocol=17 | dir=out | app=system | "{0D198387-B017-4316-B167-E5A058859E8C}" = lport=138 | protocol=17 | dir=in | app=system | "{13F11C9F-1F5F-4A65-B43E-852748BF72F0}" = lport=137 | protocol=17 | dir=in | app=system | "{1F9BD5C2-BF24-4E12-AB7C-D940A633B820}" = lport=139 | protocol=6 | dir=in | app=system | "{227BD3B4-FB24-420E-B3C3-845FFE5CC9A4}" = rport=139 | protocol=6 | dir=out | app=system | "{2F40FFFE-1631-44B8-9D8E-74F9B5D9DBB4}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe | "{36CEFED4-4EFA-4913-993A-29DD5D42E022}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe | "{647FF98C-3D4B-4EA3-BD78-FA9DA287EA1E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe | "{A1B2CDB6-6CCB-4BA2-8C18-0265E8373033}" = lport=445 | protocol=6 | dir=in | app=system | "{C142C3BB-4E94-4AF4-A3B7-FE7F1465D0D3}" = rport=445 | protocol=6 | dir=out | app=system | "{E464FC02-F5A3-483D-98DE-28B28A64A0B4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=udostępnianie plików i drukarek (usługa buforu — rpc-epmap) | "{EA7420CF-F39C-4848-8516-DE1A00B2B7A8}" = rport=137 | protocol=17 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04140FAB-55C2-41A0-B495-63BEE4FF348D}" = dir=out | name=@{microsoft.zunemusic_3.6.15131.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{04F9E5D2-81D6-4651-8624-AA97C1BC730B}" = dir=out | name=onenote | "{066D0E4C-3B5F-4A0A-BCFF-8590841DA280}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{0916C4DD-9BFB-4015-8FA6-F681533A015C}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{0A6E9583-9BC5-441D-8BFB-39A58F382B62}" = dir=out | name=lenovo quickcast | "{0C394DD8-89A1-468E-AE68-B6807CD61D25}" = dir=in | name=sway | "{0F04850F-02C5-4D6F-963A-2EAA558EAFC5}" = dir=in | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{12313959-B8C0-4A9F-BF36-9E505998EA48}" = dir=out | name=@{microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{1361D608-F9E8-4E77-8A58-258DB28D4E2C}" = dir=in | name=lenovo quickcast | "{13FFC50C-2003-42FC-9B14-C54ECB422E22}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{1A1B2E93-1C24-4452-BD1A-AC137024BAE6}" = dir=out | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{1F3AF2E2-3161-4D16-962D-51368E49A1DE}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{1F907165-A7A6-4CFC-ACCD-2C1AABBE3565}" = protocol=58 | dir=out | name=udostępnianie plików i drukarek (żądanie echa — ruch wychodzący icmpv6) | "{2376B862-38D5-4B55-9F1B-93BE6B7F7D11}" = dir=in | name=lenovo quickcast | "{2D0001DA-2DAD-4B8A-BD04-CA6477F8BDD6}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{2D0AEC53-ABE3-495E-B433-86B9790179C0}" = dir=out | name=@{microsoft.3dbuilder_10.10.38.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} | "{2D27AC79-003F-4A4E-8C8A-531419256E5F}" = dir=out | name=@{microsoft.commsphone_2.12.2002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{2D625DDE-8148-4750-B0CB-6EC4E4E0EBD6}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd cinema\powerdvdcinema10.exe | "{30B131CE-9513-4C99-BD5B-5643A35E73B9}" = dir=out | name=windows_ie_ac_001 | "{321A7695-AD67-4C7B-850C-5403638624EE}" = dir=in | name=@{microsoft.windows.photos_15.1208.10480.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{337DBFC9-B0D8-4265-9BEF-879077898B01}" = dir=out | name=@{microsoft.zunevideo_3.6.15731.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{34B61DD0-BA4B-4B01-A2B5-27C48308FD9C}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{35D50BE9-58B8-4900-AA7F-B3320F22812A}" = dir=in | name=powerdvd for lenovo think | "{37CF7230-1C0B-486D-8CA0-B6D6280A211E}" = dir=in | name=@{microsoft.bingweather_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{388FB2C9-0313-4495-B859-70192CBC119D}" = dir=in | name=@{microsoft.commsphone_2.12.2002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{3CCC3A42-2D4B-4F8A-B5CF-DA44DDE8D883}" = dir=out | name=powerdvd for lenovo think | "{3D9DDA88-6ADE-40F5-BEF0-F1E214ECD37E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "{3F77D2D4-8D4B-4E48-B37E-44E4D11D272A}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{405BB63F-159E-49D9-92F0-7180105CDA1A}" = dir=out | name=@{microsoft.windows.photos_15.1208.10480.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{43662A0E-0489-49C2-B8D6-EF615600BD7C}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{45725D1D-A29F-48D1-A061-511CFDAC1339}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{464437D8-04E2-4331-B473-8A15284BA1EB}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{48F841D0-E1E9-49ED-A0A5-9369E5697E2A}" = dir=out | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{4BD3BB6C-2B7F-4398-BDFE-B082BB1E5E6D}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{4F2CF0C7-7252-47FE-906E-94632615E1FC}" = dir=out | name=lenovo settings | "{50A1A287-2DC7-4D92-AEAA-6D5AD0EA989B}" = dir=in | name=@{microsoft.bingnews_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | "{5261CC9B-FDF6-4FC3-8D80-86456AE98DA1}" = dir=in | name=@{microsoft.zunevideo_3.6.15731.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{54A77347-82F7-4642-B01D-949A9DF1A8CA}" = dir=out | name=@{microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{557EF149-4D85-4D58-B140-FFD2509BE0A9}" = dir=out | name=windows_ie_ac_001 | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{5797AB5E-4CE6-43E3-B756-6F984306FA19}" = dir=in | name=@{microsoft.messaging_2.12.9011.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/microsoft.apps.messaging.skype/skypemessaging.resources/skype_appstorename} | "{58D44E00-84FE-4D46-8EC7-08C35EC3EF80}" = dir=in | name=@{microsoft.windowsstore_2015.23.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{595A22AF-97BA-47DD-86AD-EED60416676D}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} | "{5E51DF05-77DD-4E6E-A8C5-70D8EF62EFCE}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{614CD099-1EC5-49A5-A85F-A99AF99ADAA5}" = dir=out | name=microsoft solitaire collection | "{61657C24-3A3F-4A39-9FFA-39A353FBD2B2}" = protocol=58 | dir=in | name=udostępnianie plików i drukarek (żądanie echa — ruch przychodzący icmpv6) | "{6402AC23-72CF-4857-BBC2-883CF56F0230}" = dir=out | name=sway | "{6994BF53-1D9F-4914-8A82-A6966E03A732}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{6EF27A0B-5AD4-4862-8D4E-2929D7BA4A5A}" = dir=in | name=lenovo settings | "{70DD544C-11DC-4104-8876-943F4399A994}" = dir=out | name=@{microsoft.bingweather_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{74D4DFCA-9DB2-4892-ACF8-1FB1E0169D6F}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | "{75EE30EC-4422-4936-9A02-326C14435D76}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{761017CF-05BD-4509-8474-976B9C1390D9}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.6509.64001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | "{7996DECB-9B0D-4994-98C9-BB72CCBDE764}" = dir=out | name=lenovo support | "{7BCF5ADC-DB3A-4DE6-95F5-46300D3B1721}" = dir=out | name=@{microsoft.microsoftofficehub_17.6508.23761.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{81A9C93F-6AB1-4566-8CFC-A83749C87C8B}" = protocol=1 | dir=in | name=udostępnianie plików i drukarek (żądanie echa — ruch przychodzący icmpv4) | "{83C58653-9C9E-4083-8ACC-106DC8FBAC20}" = dir=out | app=c:\program files (x86)\lenovo\quickcontrol\quickcontrolservice.exe | "{90214200-2D3C-4DCC-85D2-F83DD841C8DA}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{92E106AD-31E2-4736-8000-A85B404FA6DE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{976B2107-F717-4476-AC11-ED217F8A2762}" = dir=in | name=lenovo settings | "{9852149A-3786-4190-AABF-F863F0EA4037}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\warface\live\nw.exe | "{98B8D95F-6FE3-4144-8A3D-8C98EB0687BC}" = dir=out | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A391BDFB-E2ED-4631-A5C8-6A9565734BA1}" = protocol=1 | dir=out | name=udostępnianie plików i drukarek (żądanie echa — ruch wychodzący icmpv4) | "{A6158C7C-8D86-4F3B-A265-83D67AF46926}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{A6CAB9EC-2566-488C-89C5-7FB6523C7708}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe | "{A9F82A54-0C1A-48A7-A174-81DD5E247E0C}" = dir=out | name=lenovo quickcast | "{AE6D5C00-AFDD-4C3C-8973-4515C9B3CEDB}" = dir=out | name=txtr ebooks lenovo edition | "{B1EE66ED-D7E9-4380-B41E-19C3AF3BE54F}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe | "{B69DBD9B-B5D7-4579-9943-BE51384D222D}" = dir=out | name=@{microsoft.connectivitystore_1.1511.2.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.connectivitystore/mswifiresources/appstorename} | "{B6F31C27-288A-4554-A63C-05BF710E86FF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{B7E16169-8F10-473E-B874-F33C18C258EF}" = dir=in | name=@{microsoft.bingsports_4.7.130.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | "{B8E06E1B-308A-4BCB-B89C-AC8E0C63C364}" = dir=out | name=@{microsoft.windowsmaps_4.1512.3450.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | "{C3C00D93-8AB9-47D3-ABD8-23C472F0FD63}" = dir=out | name=@{microsoft.messaging_2.12.9011.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/microsoft.apps.messaging.skype/skypemessaging.resources/skype_appstorename} | "{C4383460-C466-4FB7-ACCE-F35E5B1E2858}" = dir=out | name=@{microsoft.windowsphone_10.1511.18010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphone/resources/appstorename} | "{C4FAF11D-6602-47B1-9D06-E7013A724808}" = dir=in | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{C7E10971-5514-4886-9C5B-C3B906A756B4}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd10.exe | "{C8A4ED16-AF42-4887-BF66-E56E2963630C}" = protocol=6 | dir=out | app=c:\program files (x86)\lenovo\system update\uncserver.exe | "{C8D24036-ACA3-4ADC-8F54-E704BE5E7F22}" = dir=out | name=lenovo settings | "{C93D79E3-FF2B-40C5-9218-AD7BD31AC69E}" = dir=out | name=@{microsoft.windowsstore_2015.23.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{CA1FBDFD-0387-4564-9F9C-0A5573D95168}" = protocol=17 | dir=out | app=c:\program files (x86)\lenovo\system update\uncserver.exe | "{D00B6DDD-976A-4062-B7D0-2A7C8B8A7A0E}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D729F8F3-08D4-47A5-B932-65666F142B09}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{D7348DE9-CC36-4204-B2F0-2FD00CE22D5B}" = dir=in | name=@{microsoft.microsoftofficehub_17.6508.23761.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{D9C8C8BF-BBBF-4E6F-B5D4-6C94BD1F81C6}" = dir=out | name=xbox | "{DAA1274A-5392-4783-A88B-4D540624C923}" = dir=out | name=lenovo settings | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DBA3C4E2-B2F9-475F-A8C7-C1CB81AF0A19}" = dir=in | name=onenote | "{E0ECF072-4D31-4471-A117-C4F1C2A1D52F}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{E2B1EB03-809D-48F7-906E-83A170DFFCD6}" = dir=in | app=c:\program files (x86)\lenovo\quickcontrol\quickcontrolservice.exe | "{E58DE678-8714-4914-8B88-18ACDDA1C18C}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} | "{E69F9D01-1DC8-4973-AED9-7F56B38556C4}" = dir=in | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{E71FCD12-06C3-4D98-8633-FFFE3E03E0D1}" = dir=out | name=@{microsoft.bingfinance_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | "{E7A2D807-111C-46A8-BDE4-B288A7B2B017}" = dir=out | name=@{microsoft.getstarted_2.5.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | "{EA7E3B43-7C9D-415D-B993-B7F37493A62A}" = dir=in | name=@{microsoft.bingfinance_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | "{EAF44824-6877-4119-8B69-2584FF1D8C4D}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.6509.64001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{F14F9BAF-ACB4-494C-AEC4-9F7E6B2B136A}" = dir=in | name=xbox | "{F1AA0932-A40E-405E-8118-1CE9E5CB93B0}" = dir=out | name=@{microsoft.bingsports_4.7.130.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | "{F4E5A950-D4C7-44BB-BFFE-9044CFD82A36}" = dir=out | name=@{microsoft.bingnews_4.7.118.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F6DFD66E-1A6B-4141-8DB0-8145825508B0}" = dir=in | name=microsoft solitaire collection | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{FA2526FA-816A-4CBB-8E69-A1723895480C}" = dir=out | name=@{microsoft.people_10.0.3350.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | "{FD627E71-95D1-4249-BD41-4FCD69846B94}" = dir=out | name=norton studio | "{FE82692A-C40F-4358-ADC6-E4A42ADA3B8F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "TCP Query User{5CDCE01F-E7C2-43E7-A049-DA060AFEC946}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "TCP Query User{75971BBC-F91D-4BAC-9298-A1AEE9ED12C0}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{15D63003-B870-4060-8DED-920709D78624}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{A45CACD5-C548-46F3-BDBE-31FA8BE3C181}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{053ACA98-6B07-4DD0-9DB3-F51E3EB1780C}" = Lenovo Patch Utility 64 bit "{0788641D-D31A-478D-BB34-C41564AE9F93}" = Dependency Package Update "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1" = Lenovo Settings UMDF driver "{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1" = Lenovo Settings Dependency Package "{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 "{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5252431C-288E-409D-ADCF-24407E0E6F70}" = Dependency Package Update "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{88C6A6D9-324C-46E8-BA87-563D14021442}_is1" = Lenovo Settings - Camera Audio "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables "{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component "{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}" = Dolby Digital Plus Advanced Audio "{B5E06417-A4AC-4225-B36E-7E34C91616E7}" = Intel® Trusted Connect Service Client "{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 "{D3415F15-8C15-328C-933C-9075E60843CA}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK "{E92E1FF1-B188-43FE-BECA-2248E227E67D}" = Lenovo Solution Center "{FF5E324F-1FFF-49D4-8F71-0D25EDF12764}" = Validity WBF DDK 5011 "{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}" = Dependency Package Update "70FB73D983446AEE2932B0ED51A770D1BD1348DA" = Pakiet sterowników systemu Windows - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) "Bandizip" = Bandizip "C8A921233C0C441A4E4EAABC2AB08C872FD77A6E" = Pakiet sterowników systemu Windows - Intel Corporation (iaStorA) HDC (08/01/2013 12.8.0.1016) "CNXT_AUDIO_HDA" = Conexant HD Audio "Lenovo Dependency Package_is1" = Lenovo Dependency Package "LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility "LenovoEMC" = LenovoEMC Storage Connector "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK" = Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "O365HomePremRetail - pl-pl" = Microsoft Office 365 - pl-pl "OnScreenDisplay" = On Screen Display "Power Management Driver" = Lenovo Power Management Driver "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0274D240-4D1D-4FDA-9A36-09F0BECD288F}" = Adobe AIR "{13F59938-C595-479C-B479-F171AB9AF64F}" = Lenovo User Guide "{1D2682EA-75DD-44B6-BF2D-CD3C49EAD012}" = Dependency Package Update "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{25C64847-B900-48AD-A164-1B4F9B774650}" = Lenovo System Update "{3117B53D-A409-4D99-A0DE-11A1A40696FA}" = Dependency Package Update "{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}" = WaveEditor "{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go 7 "{4430150F-61B3-4142-BE04-EAC68C8DDA18}" = Dependency Package Update "{4532E4C5-C84D-4040-A044-ECFCC5C6995B}" = REACHit "{4855C42F-5197-4AAD-A50D-5066D2CC4647}" = Lenovo QuickControl "{4AF6C9BC-D8DB-4286-94D9-474CE54ADAA2}" = Dependency Package Update "{503B47A9-E34A-4841-ADD7-417191D5DB5E}" = Dependency Package Update "{546FF45D-2467-4950-AAFB-0A06ACBB6B2C}" = Dependency Package Update "{5B2190E9-199D-450A-94B3-4D6826C770C2}" = Dependency Package Update "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5BEFE1E1-F597-4B79-913B-15FFDB25B744}" = Dependency Package Update "{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}" = Intel(R) Update Manager "{63DE35C9-B080-4D03-B110-99E14FD35BCE}" = Dependency Package Update "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65316098-0220-4D5C-B37A-6136083A0897}" = Dependency Package Update "{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.15 "{6A6D86CD-B004-46b7-8951-7BB75A776F8C}" = Lenovo Solutions for Small Business "{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8E1CACF5-2493-4950-9AD5-189903FE57E7}" = ThinkPad OneLink Dock "{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component "{90150000-008C-0415-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component "{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D3D8C60-A5EF-4123-B2B9-172095903AB}" = REALTEK Bluetooth Driver "{9DAABC60-A5EF-41FF-B2B9-17329590CD5}" = REALTEK Wireless LAN Driver "{AC76BA86-0804-1033-1959-001824161310}" = Adobe Refresh Manager "{AC76BA86-7AD7-1045-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Polish "{AFD7B869-3B70-40C7-8983-769256BA3BD2}" = Lenovo Solutions for Small Business Customizations "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer 5.5 "{C79D4402-E622-4922-9C02-89F9080BF081}_is1" = Lenovo Settings - Location Awareness "{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 "{D6E853EC-8960-4D44-AF03-7361BB93227C}" = PowerDVD Create 10 "{DDAA788F-52E6-44EA-ADB8-92837B11BF26}" = Metric Collection SDK "{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}" = Integrated Camera "{E33DB440-A008-4928-8A4E-5FC5ADDED608}" = OpenOffice.org 2.4 "{E8F27ADF-B1ED-41AF-A7EF-D5E71778480C}" = Lenovo Patch Utility "{E966DBE4-5075-465E-BA81-BC9A3A3204B3}" = Dependency Package Update "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}" = Lenovo Warranty Information "0E7DAF70-FB54-4B91-B192-7E771C25AEEB" = Intel Collaborative Processor Performance Control "Adobe AIR" = Adobe AIR "Fastboot" = RapidBoot HDD Accelerator "InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}" = PowerDVD Create "InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10 "Internet Manager" = Internet Manager "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.2.0.1024 "Mozilla Firefox 42.0 (x86 pl)" = Mozilla Firefox 42.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Steam" = Steam "vt30niemmp3_is1" = VT Niemiecki Kurs podstawowy mp3 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{B149918F-6DA2-490B-0357-810002D58095}" = Car Extension [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2015-12-02 08:40:43 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-02 08:40:43 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-02 08:40:43 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-02 09:17:34 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-02 19:07:18 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-02 19:07:42 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: SkypeHost.exe, wersja: 10.0.0.507, sygnatura czasowa: 0x56422ca1 Nazwa modułu powodującego błąd: SkypeBackgroundTasks.dll, wersja: 0.0.0.0, sygnatura czasowa: 0x56422c6c Kod wyjątku: 0xc0000602 Przesunięcie błędu: 0x0000caa1 Identyfikator procesu powodującego błąd: 0xf6f8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d12d55f936bbb6 Ścieżka aplikacji powodującej błąd: C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe Ścieżka modułu powodującego błąd: C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll Identyfikator raportu: 7881f86f-d726-46a2-8d08-bbe1e994350e Pełna nazwa pakietu powodującego błąd: Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe Identyfikator aplikacji względem pakietu powodującego błąd: ppleae38af2e007f4358a809ac99a64a67c1 Error - 2015-12-03 04:13:05 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-12-03 04:13:29 | Computer Name = ADAM-PC | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: SkypeHost.exe, wersja: 10.0.0.507, sygnatura czasowa: 0x56422ca1 Nazwa modułu powodującego błąd: SkypeBackgroundTasks.dll, wersja: 0.0.0.0, sygnatura czasowa: 0x56422c6c Kod wyjątku: 0xc0000602 Przesunięcie błędu: 0x0000caa1 Identyfikator procesu powodującego błąd: 0xbed8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d12da24389cfb5 Ścieżka aplikacji powodującej błąd: C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe Ścieżka modułu powodującego błąd: C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll Identyfikator raportu: 0d4f27c3-b8d5-4ede-9d36-d78eed98d87d Pełna nazwa pakietu powodującego błąd: Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe Identyfikator aplikacji względem pakietu powodującego błąd: ppleae38af2e007f4358a809ac99a64a67c1 Error - 2015-12-03 04:47:57 | Computer Name = ADAM-PC | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error - 2015-12-03 19:10:08 | Computer Name = ADAM-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp nie powiodła się. Błąd: -2144927148. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. [ System Events ] Error - 2015-12-16 08:53:55 | Computer Name = ADAM-PC | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Naqho z powodu następującego błędu: %%2 Error - 2015-12-16 08:53:55 | Computer Name = ADAM-PC | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi SAService z powodu następującego błędu: %%2 Error - 2015-12-16 08:54:07 | Computer Name = ADAM-PC | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Internet Manager. RunOuc. Error - 2015-12-16 08:54:07 | Computer Name = ADAM-PC | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Internet Manager. RunOuc z powodu następującego błędu: %%1053 Error - 2015-12-16 08:54:40 | Computer Name = ADAM-PC | Source = BugCheck | ID = 1001 Description = Error - 2015-12-16 08:57:05 | Computer Name = ADAM-PC | Source = DCOM | ID = 10016 Description = Error - 2015-12-16 08:57:05 | Computer Name = ADAM-PC | Source = DCOM | ID = 10016 Description = Error - 2015-12-16 08:57:06 | Computer Name = ADAM-PC | Source = DCOM | ID = 10016 Description = Error - 2015-12-16 08:57:06 | Computer Name = ADAM-PC | Source = DCOM | ID = 10016 Description = Error - 2015-12-16 08:58:19 | Computer Name = ADAM-PC | Source = DCOM | ID = 10010 Description = < End of report >

Dodano 16.12.2015 14:24:20:
EDIT:

Dziwna sytuacja bo Windows Defender mam wyłączony i wszystkie zabezpieczenia także

co teraz sie dzieje?

Dodano 16.12.2015 14:28:40:

Kod: Zaznacz wszystko: Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (2015-12-16 14:24:01) Uruchomiony z C:\Users\Adam\Downloads Windows 8 Pro (X64) (2015-11-19 13:48:37) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Adam (S-1-5-21-395553583-66053808-1738365731-1001 - Administrator - Enabled) => C:\Users\Adam Administrator (S-1-5-21-395553583-66053808-1738365731-500 - Administrator - Disabled) Gość (S-1-5-21-395553583-66053808-1738365731-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-395553583-66053808-1738365731-1003 - Limited - Enabled) Konto domyślne (S-1-5-21-395553583-66053808-1738365731-503 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.213 - Adobe Systems Incorporated) Bandizip (HKLM\...\Bandizip) (Version: 5.01 - Bandisoft.com) Car Extension (HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\{B149918F-6DA2-490B-0357-810002D58095}) (Version: 1.4.5 - Experience Image corp) <==== UWAGA Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant) CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.) Dependency Package Update (Version: 1.6.25.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10236 - Realtek Semiconductor Corp.) Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1014 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.17.49 - Huawei Technologies Co.,Ltd) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.10 - ) Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.4.0.4 - Lenovo Group Limited) Hidden Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.17 - Lenovo) Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 1.50 - Lenovo Group Limited) Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.1.12.100 - Lenovo Corporation) Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.3.0.8 - Lenovo Group Limited) Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.0.0.9 - Lenovo Group Limited) Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.1.0.2 - Lenovo Group Limited) Lenovo Solution Center (HKLM\...\{E92E1FF1-B188-43FE-BECA-2248E227E67D}) (Version: 2.8.005.00 - Lenovo Group Limited) Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.42.8185 - Intel(R) Corporation) Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.2.0003.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0003 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) LenovoEMC Storage Connector (HKLM\...\LenovoEMC) (Version: 1.1.2.26394 - LenovoEMC) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Microsoft Office 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 15.0.4675.1003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 42.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 pl)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - ) OpenOffice.org 2.4 (HKLM-x32\...\{E33DB440-A008-4928-8A4E-5FC5ADDED608}) (Version: 2.4.9364 - OpenOffice.org) Pakiet sterowników systemu Windows - Intel Corporation (iaStorA) HDC (08/01/2013 12.8.0.1016) (HKLM\...\C8A921233C0C441A4E4EAABC2AB08C872FD77A6E) (Version: 08/01/2013 12.8.0.1016 - Intel Corporation) Pakiet sterowników systemu Windows - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) (HKLM\...\70FB73D983446AEE2932B0ED51A770D1BD1348DA) (Version: 11/07/2013 1.67.04.04 - Lenovo) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) PowerDVD Create (HKLM-x32\...\InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}) (Version: 10.0 - CyberLink Corp.) PowerDVD Create 10 (x32 Version: 10.0.1.2704 - CyberLink Corp.) Hidden RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo) REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.5.002.10 - Lenovo) REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.773.101113 - REALTEK Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek) REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation) Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.102 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.27 - Synaptics Incorporated) ThinkPad OneLink Dock (HKLM-x32\...\{8E1CACF5-2493-4950-9AD5-189903FE57E7}) (Version: 1.08.25 - Lenovo) ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.78.0.10 - Lenovo) Validity WBF DDK 5011 (HKLM\...\{FF5E324F-1FFF-49D4-8F71-0D25EDF12764}) (Version: 4.5.240.0 - Validity Sensors, Inc.) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VT Niemiecki Kurs podstawowy mp3 (HKLM-x32\...\vt30niemmp3_is1) (Version: - ) WaveEditor (x32 Version: 1.0.1.4514 - CyberLink Corp.) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Punkty Przywracania systemu ========================= 26-11-2015 23:17:44 Instalator modułów systemu Windows 03-12-2015 09:47:34 Windows Update 12-12-2015 15:24:32 Windows Update 16-12-2015 10:51:41 Windows Defender Checkpoint ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2015-12-16 10:43 - 00000895 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {1C9884D1-BA14-4048-BD74-0F4E0A38519F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] () Task: {3435619E-12F7-4D13-B10D-7C87C112CB28} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe Task: {345F1000-E18E-4B2B-B59C-D6F5E8E5693A} - \SwiftSearch Auto Updater 1.10.0.25 Pending Update -> Brak pliku <==== UWAGA Task: {3494046A-943F-4A56-B11F-9D0D62636D51} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe Task: {3D85D482-5E5D-4948-8563-B926D0DF631F} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-17] (Lenovo) Task: {4AA7D6A0-C007-4254-BB91-EE67011ED747} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {4DDAFC40-61A9-462A-A3B2-F4E7080AAF5D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation) Task: {50588E19-1301-4DC3-A2C6-047E82297897} - \CCleanerSkipUAC -> Brak pliku <==== UWAGA Task: {52A55D29-3845-4A9A-A6D5-D1EA382F9776} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {6B29A057-F7D6-4AE3-B6EC-AE409A3E716E} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {72BA38E3-3145-4387-928B-6FA5CEEFC22B} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-06-28] (CyberLink Corp.) Task: {77FBE4FE-B67F-4D45-8FEA-380F167EFAE2} - System32\Tasks\{D1D8488A-0778-4CC5-97E1-F73AB6CEBC5F} => pcalua.exe -a "C:\Program Files\Common Files\LogiShrd\sp6_Uninstall\setup.exe" Task: {7935CB70-FE59-412C-B2E0-EF5D594303B2} - \SwiftSearch Auto Updater 1.10.0.25 Core -> Brak pliku <==== UWAGA Task: {7F833EF3-E491-4E3F-9A56-02BD5C271AD2} - System32\Tasks\{5F96CA58-DA95-484B-999B-856A295F2FBD} => pcalua.exe -a C:\Users\Adam\AppData\Local\SmartWeb\__u.exe -c _?=C:\Users\Adam\AppData\Local\SmartWeb Task: {94B0BB25-EB2E-490B-BD3A-20405F0E1E55} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-17] (Lenovo) Task: {9B1304F7-5491-4DCB-977E-12A80DC604FE} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {A6BFD066-E8BF-4BD6-948B-1248DEDC94AB} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-25] (Synaptics Incorporated) Task: {A803B78A-1D35-4DC6-AD7C-A754A68BA7E4} - System32\Tasks\Mekioo => C:\PROGRA~1\GROOVE~1\Acange.bat Task: {B5CD948A-7244-482D-A63F-EFA32D3BF9DA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-12] (Microsoft Corporation) Task: {C0AE073A-80A2-46F6-A7ED-E9E8EFFA441B} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2013-03-06] (CyberLink) Task: {C72380D0-6875-471B-A67C-C4F0758E2F83} - System32\Tasks\Car Extension => Rundll32.exe "C:\Users\Adam\AppData\Local\Car Extension\{05B948B3-37B0-235F-D287-5BA3794DED95}\CarExtension.dll",#1 <==== UWAGA Task: {DA4612D5-67C5-4047-AA8D-7D2DE12CDF29} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {DCBE9010-AA58-4F5C-854B-D9E3B3BE59BA} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {E784CFA0-26B0-44E0-9586-003B27FF9191} - System32\Tasks\Car Extension2 => Rundll32.exe "C:\Users\Adam\AppData\Local\Car Extension\{05B948B3-37B0-235F-D287-5BA3794DED95}\hzhebv.dll",#1 <==== UWAGA Task: {ECE94F82-649E-4FBC-B3EC-C64125C27AA4} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {F1BB6CFC-4554-432D-ADAA-D039D674A256} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-07-01] () Task: {FC79F339-4DA3-4FCC-B48D-92CC4078BD09} - \SmartWeb Upgrade Trigger Task -> Brak pliku <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2014-05-16 10:26 - 2013-10-11 06:44 - 00104960 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.dll 2014-09-25 22:16 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-01-15 04:42 - 2014-01-15 04:42 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe 2015-02-09 14:59 - 2014-04-26 07:15 - 00682064 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00090704 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe 2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-11-19 14:24 - 2010-10-26 12:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-05-16 09:42 - 2013-10-28 15:48 - 00915968 _____ () C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe 2014-05-16 10:26 - 2013-10-11 06:44 - 00104960 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.DLL 2014-05-16 10:26 - 2013-11-01 16:16 - 00467720 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe 2014-05-16 10:26 - 2013-11-01 16:16 - 00013064 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe 2015-12-03 09:24 - 2015-11-22 10:23 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-12-03 09:24 - 2015-11-22 10:18 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-12-03 09:25 - 2015-11-22 10:21 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2014-05-16 10:14 - 2014-05-16 10:14 - 00033520 _____ () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll 2015-02-09 14:59 - 2013-08-16 07:53 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll 2015-02-09 14:59 - 2013-08-16 07:53 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll 2015-02-09 14:59 - 2014-02-15 08:31 - 02416640 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll 2015-02-09 14:59 - 2014-02-15 08:33 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll 2015-11-26 01:36 - 2015-11-26 01:36 - 01232896 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\cbdb8960c3ba64df28ebd50f8b804142\Windows.Networking.ni.dll 2015-11-26 01:36 - 2015-11-26 01:36 - 03154432 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\6b4f5a3dae47e37b6ed163edc00b18ed\Windows.Devices.ni.dll 2015-11-19 19:34 - 2015-11-19 19:34 - 00335360 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\a0151f05db127c5e199c10af8a83aa95\Windows.Foundation.ni.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00457808 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\core.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00282704 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\sdk.dll 2015-02-09 14:57 - 2013-08-16 07:53 - 00011362 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\mingwm10.dll 2015-02-09 14:57 - 2013-08-16 07:53 - 00043008 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\libgcc_s_dw2-1.dll 2015-02-09 14:57 - 2014-02-15 08:31 - 02416640 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtCore4.dll 2015-02-09 14:57 - 2014-02-15 08:44 - 09559040 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtGui4.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00397392 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Proxy.DLL 2015-02-09 14:57 - 2014-08-13 10:16 - 00250448 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Common.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00164432 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Trace.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00553040 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\PluginContainer.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00267344 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AtCodec.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00329296 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00243792 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00162896 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSDialup.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00197200 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\XCodec.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00161360 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DataServicePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00291408 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00225872 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00149072 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00345680 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceAppPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00072272 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSPowerMgr.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00121424 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Win7Support.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00174672 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\ATR2SMgr.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 01095248 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00715344 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsAppPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00165456 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00240720 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DialUpPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00109136 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSAdapt.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00206928 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00138320 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSNDIS.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 01153616 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISAPI.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00324688 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00566864 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceMgrUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00310864 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\XFramePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00826448 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\MiniFramePlugin.dll 2015-02-09 14:57 - 2014-02-15 08:32 - 00398336 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtXml4.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00104016 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NotifyServicePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00338512 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00426064 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DialupUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00325712 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\StatusBarMgrPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00283216 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\MenuMgrPlugin.dll 2015-02-09 14:57 - 2014-02-15 08:33 - 01148416 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtNetwork4.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00123984 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\LayoutPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00312912 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SettingUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00509520 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSettingPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00315472 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoRecordUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00107088 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\CompressRatePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00155728 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\VPNPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00525392 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoUIExPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00847952 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SMSUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00116816 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\ServiceUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00419408 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DiagnosisPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00146512 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\HelpUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00457296 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00815184 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookUIPlugin.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00082944 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qgif4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00081920 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qico4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00192000 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qjpeg4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00350720 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qmng4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00370176 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qtiff4.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00719952 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\LiveUpdateInterface.dll 2013-03-06 20:49 - 2013-03-06 20:49 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2013-03-06 20:52 - 2013-03-06 20:52 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2014-05-16 09:40 - 2013-09-16 04:19 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\ProgramData\Temp:157E1AD3 ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Adam\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg DNS Servers: 213.158.199.1 - 213.158.199.5 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 HKLM\...\StartupApproved\Run: => "HotKeysCmds" HKLM\...\StartupApproved\Run: => "Persistence" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{B1EE66ED-D7E9-4380-B41E-19C3AF3BE54F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{A6CAB9EC-2566-488C-89C5-7FB6523C7708}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{066D0E4C-3B5F-4A0A-BCFF-8590841DA280}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3F77D2D4-8D4B-4E48-B37E-44E4D11D272A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E2B1EB03-809D-48F7-906E-83A170DFFCD6}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{83C58653-9C9E-4083-8ACC-106DC8FBAC20}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{2D625DDE-8148-4750-B0CB-6EC4E4E0EBD6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{C7E10971-5514-4886-9C5B-C3B906A756B4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{75EE30EC-4422-4936-9A02-326C14435D76}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B6F31C27-288A-4554-A63C-05BF710E86FF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3D9DDA88-6ADE-40F5-BEF0-F1E214ECD37E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FE82692A-C40F-4358-ADC6-E4A42ADA3B8F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{E0ECF072-4D31-4471-A117-C4F1C2A1D52F}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{2D0001DA-2DAD-4B8A-BD04-CA6477F8BDD6}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{4BD3BB6C-2B7F-4398-BDFE-B082BB1E5E6D}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{6994BF53-1D9F-4914-8A82-A6966E03A732}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{34B61DD0-BA4B-4B01-A2B5-27C48308FD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{43662A0E-0489-49C2-B8D6-EF615600BD7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{5CDCE01F-E7C2-43E7-A049-DA060AFEC946}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{A45CACD5-C548-46F3-BDBE-31FA8BE3C181}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{92E106AD-31E2-4736-8000-A85B404FA6DE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [{9852149A-3786-4190-AABF-F863F0EA4037}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [TCP Query User{75971BBC-F91D-4BAC-9298-A1AEE9ED12C0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{15D63003-B870-4060-8DED-920709D78624}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{C8A4ED16-AF42-4887-BF66-E56E2963630C}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe FirewallRules: [{CA1FBDFD-0387-4564-9F9C-0A5573D95168}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/16/2015 01:56:34 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (396) Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\ProgramData\Microsoft\SmsRouter\MessageStore\edb.log. Error: (12/16/2015 01:56:29 PM) (Source: ESENT) (EventID: 454) (User: ) Description: svchost (396) Odzyskiwanie/przywracanie bazy danych nie powiodło się z powodu nieoczekiwanego błędu: -530. Error: (12/16/2015 01:56:29 PM) (Source: ESENT) (EventID: 412) (User: ) Description: svchost (396) Nie można odczytać nagłówka pliku dziennika C:\ProgramData\Microsoft\SmsRouter\MessageStore\edb00004.log. Błąd -530. Error: (12/16/2015 01:40:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji E046963F.LenovoSupport_k1h2ywk1493x8!App nie powiodła się. Błąd: -2147024865. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji E046963F.LenovoSupport_k1h2ywk1493x8!App nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji LenovoCorporation.LenovoSettings_4642shxvsv8s2!App nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Dziennik System: ============= Error: (12/16/2015 02:21:56 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: ADAM-PC) Description: C:\Device\HarddiskVolume43 Error: (12/16/2015 02:21:56 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: ZARZĄDZANIE NT) Description: C:\Device\HarddiskVolume42 Error: (12/16/2015 02:08:23 PM) (Source: Ntfs) (EventID: 55) (User: ZARZĄDZANIE NT) Description: Wykryto uszkodzenie w strukturze systemu plików woluminu C:. Dokładna istota uszkodzenia nie jest znana. Należy przeskanować struktury systemu plików w trybie online. Error: (12/16/2015 01:58:19 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (12/16/2015 01:57:06 PM) (Source: DCOM) (EventID: 10016) (User: ADAM-PC) Description: domyślne ustawienia komputeraLokalnyAktywacja{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ADAM-PCAdamS-1-5-21-395553583-66053808-1738365731-1001LocalHost (użycie LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (12/16/2015 01:57:06 PM) (Source: DCOM) (EventID: 10016) (User: ADAM-PC) Description: domyślne ustawienia komputeraLokalnyAktywacja{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ADAM-PCAdamS-1-5-21-395553583-66053808-1738365731-1001LocalHost (użycie LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (12/16/2015 01:57:05 PM) (Source: DCOM) (EventID: 10016) (User: ADAM-PC) Description: domyślne ustawienia komputeraLokalnyAktywacja{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ADAM-PCAdamS-1-5-21-395553583-66053808-1738365731-1001LocalHost (użycie LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (12/16/2015 01:57:05 PM) (Source: DCOM) (EventID: 10016) (User: ADAM-PC) Description: domyślne ustawienia komputeraLokalnyAktywacja{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ADAM-PCAdamS-1-5-21-395553583-66053808-1738365731-1001LocalHost (użycie LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (12/16/2015 01:54:40 PM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x000000be (0xfffff9604cca0000, 0x8030000000cad001, 0xffffd0011cc28131, 0x000000000000000b)C:\WINDOWS\MEMORY.DMPae90dffa-b477-4fc3-95e9-265b76c0bd01 Error: (12/16/2015 01:54:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Internet Manager. RunOuc z powodu następującego błędu: %%1053 CodeIntegrity: =================================== Date: 2015-12-16 10:51:33.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.602 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.446 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:32.424 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-14 10:01:46.906 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 01:01:20.143 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-09 16:17:58.895 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.881 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.826 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-4000M CPU @ 2.40GHz Procent pamięci w użyciu: 55% Całkowita pamięć fizyczna: 3986.65 MB Dostępna pamięć fizyczna: 1778.27 MB Całkowita pamięć wirtualna: 4690.65 MB Dostępna pamięć wirtualna: 2340.12 MB ==================== Dyski ================================ Drive c: (Windows8_OS) (Fixed) (Total:451.25 GB) (Free:415.57 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive e: (Internet Manager) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 5E855232) Partition: GPT. ==================== Koniec Addition.txt ============================

Dodano 16.12.2015 14:29:05:

Kod: Zaznacz wszystko: Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (administrator) ADAM-PC (16-12-2015 14:18:55) Uruchomiony z C:\Users\Adam\Downloads Załadowane profile: Adam (Dostępne profile: Adam) Platform: Windows 8 Pro (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe () C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (LenovoEMC Products USA, LLC) C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.) HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [147160 2013-06-19] (Realtek Semiconductor Corp.) HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited) HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [384296 2013-10-28] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [600568 2013-11-05] (Lenovo Corporation) HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [396688 2015-07-17] () HKLM\...\Run: [SynLenovoHelper] => C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [163960 2015-10-25] (Synaptics) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [750320 2014-05-16] (Lenovo) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50515584 2015-11-17] (Skype Technologies S.A.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {60794a9e-ad8f-11e4-8286-28d24482f56a} - "E:\AutoRun.exe" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {840dd4a1-8ec2-11e5-89ae-28d24482f56a} - "E:\AutoRun.exe" ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk [2015-11-09] ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe () ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\..\Interfaces\{1C17FFB4-6E49-4992-A54D-971CCC201392}: [NameServer] 213.158.199.1 213.158.199.5 Tcpip\..\Interfaces\{20265aec-d3fd-4f1d-8540-5af401f54c87}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{51eacf3f-c4a5-42a8-908b-9869c48943ee}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676272479&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676467617&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-395553583-66053808-1738365731-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - Brak pliku Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943 FF SelectedSearchEngine: webssearches FF Homepage: hxxps://trafficmonsoon.com/?ref=SuperMan777 FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Extension: Flashlight - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions\flashlight@stephennolan.com.au [2015-06-17] FF Extension: Facebook Phishing Protector - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-06-17] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\!E9F231D8C9E95BE6CF66696E797FD59DE9F2.js [2015-12-16] <==== UWAGA FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\E9F231D8C9E95BE6CF66696E797FD59DE9F2 [2015-12-16] <==== UWAGA ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [573432 2013-11-05] (Lenovo Corporation) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2014-05-16] (Lenovo) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] () R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-09-24] (Intel Corporation) S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682064 2014-04-26] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2083592 2013-11-06] (Lenovo Group Limited) R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [695800 2013-11-05] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LenovoEMCDiscovery; C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe [1410888 2014-04-08] (LenovoEMC Products USA, LLC) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [467720 2013-11-01] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272424 2015-08-17] (Lenovo) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [58360 2013-10-08] (Lenovo Group Limited) R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [140280 2013-10-08] (Lenovo Group Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22008 2015-07-01] () R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-10-25] (Synaptics Incorporated) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-01-29] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) S2 Naqho; "C:\Users\Adam\AppData\Roaming\XyvetiElo\Tynrutg.exe" -cms [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [65928 2014-05-16] (Windows (R) Win 7 DDK provider) R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.) R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.) R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77456 2013-08-19] (Intel Corporation) S3 kxtdrpod; C:\Users\Adam\AppData\Local\Temp\kxtdrpod.sys [56496 2015-12-16] (GMER) [Brak podpisu cyfrowego] S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek ) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-11-19] (Realtek Semiconductor Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8244312 2013-06-19] (Realtek Semiconductor Corp.) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51320 2015-10-25] (Synaptics Incorporated) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-28] (Lenovo Group Limited) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-16 14:18 - 2015-12-16 14:21 - 00019719 _____ C:\Users\Adam\Downloads\FRST.txt 2015-12-16 14:14 - 2015-12-16 14:14 - 00078914 _____ C:\Users\Adam\Downloads\Extras.Txt 2015-12-16 14:13 - 2015-12-16 14:13 - 00358836 _____ C:\Users\Adam\Downloads\OTL.Txt 2015-12-16 13:53 - 2015-12-16 13:54 - 00281916 _____ C:\WINDOWS\Minidump\121615-26859-01.dmp 2015-12-16 13:53 - 2015-12-16 13:53 - 634798311 _____ C:\WINDOWS\MEMORY.DMP 2015-12-16 13:53 - 2015-12-16 13:53 - 00000000 ____D C:\WINDOWS\Minidump 2015-12-16 13:51 - 2015-12-16 14:18 - 02370048 _____ (Farbar) C:\Users\Adam\Downloads\FRST64.exe 2015-12-16 13:50 - 2015-12-16 13:58 - 00602112 _____ (OldTimer Tools) C:\Users\Adam\Downloads\OTL_[www.programosy.pl].exe 2015-12-16 13:49 - 2015-12-16 13:51 - 00380416 _____ C:\Users\Adam\Downloads\wfl9mv2w.exe 2015-12-16 13:46 - 2015-12-16 13:46 - 00000000 ___HD C:\OneDriveTemp 2015-12-16 13:35 - 2015-12-16 13:35 - 00000000 ____D C:\WINDOWS\system32\big 2015-12-16 13:33 - 2015-12-16 13:33 - 00025736 _____ C:\Users\Adam\Desktop\malwarebytes.txt 2015-12-16 12:16 - 2015-12-16 12:16 - 00003316 _____ C:\WINDOWS\System32\Tasks\{5F96CA58-DA95-484B-999B-856A295F2FBD} 2015-12-16 12:12 - 2015-12-16 12:12 - 00000923 _____ C:\Users\Adam\Desktop\pomocy.txt 2015-12-16 11:00 - 2015-12-16 11:00 - 00014040 _____ C:\WINDOWS\system32\Drivers\bsdriver.sys 2015-12-16 11:00 - 2015-12-16 11:00 - 00004768 _____ C:\WINDOWS\SysWOW64\Kaaplhv.ini 2015-12-16 11:00 - 2015-12-16 11:00 - 00002488 _____ C:\WINDOWS\SysWOW64\KaaplhvOff.ini 2015-12-16 11:00 - 2015-12-16 11:00 - 00002488 _____ C:\WINDOWS\system32\KaaplhvOff.ini 2015-12-16 11:00 - 2015-12-16 11:00 - 00000000 ____D C:\Users\Adam\AppData\Local\Tempfolder 2015-12-16 10:59 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Company 2015-12-16 10:59 - 2015-12-16 10:59 - 00003400 _____ C:\WINDOWS\System32\Tasks\Mekioo 2015-12-16 10:57 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\Roaming\RunDir 2015-12-16 10:57 - 2015-12-16 10:57 - 00000000 ____D C:\Users\Adam\AppData\Roaming\cpuminer 2015-12-16 10:56 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\Local\SmartWeb 2015-12-16 10:56 - 2015-12-16 10:56 - 00003244 _____ C:\WINDOWS\System32\Tasks\Car Extension 2015-12-16 10:56 - 2015-12-16 10:56 - 00003234 _____ C:\WINDOWS\System32\Tasks\Car Extension2 2015-12-16 10:54 - 2015-12-16 10:54 - 00380416 _____ C:\Users\Adam\Downloads\i1eltqxv.exe 2015-12-16 10:45 - 2015-12-16 10:43 - 00000895 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2015-12-16 10:41 - 2015-12-16 10:41 - 02386650 _____ ( ) C:\Users\Adam\Downloads\MK_[www.programosy.pl].exe 2015-12-16 08:52 - 2015-12-16 10:59 - 00014040 _____ C:\WINDOWS\system32\Drivers\cherimoya.sys 2015-12-12 15:32 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-12-12 15:32 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-12-12 15:32 - 2015-11-24 12:07 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-12-12 15:32 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-12-12 15:32 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-12-12 15:32 - 2015-11-24 11:03 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-12-12 15:32 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2015-12-12 15:32 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-12-12 15:32 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2015-12-12 15:32 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-12-12 15:32 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-12-12 15:32 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-12-12 15:32 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-12-12 15:32 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-12-12 15:32 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 09:27 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-12-12 15:32 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-12-12 15:32 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-12-12 15:32 - 2015-11-24 08:25 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:09 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-12-10 12:59 - 2015-12-10 12:59 - 00000000 ___RD C:\Users\Adam\3D Objects 2015-12-08 22:29 - 2015-12-08 22:29 - 09498816 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2015-12-04 12:01 - 2015-12-14 23:54 - 00139910 _____ C:\WINDOWS\Control.KTL 2015-12-04 01:21 - 2015-12-08 15:50 - 00000000 ____D C:\Users\Adam\Desktop\TM 2015-12-03 09:26 - 2015-11-22 11:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-12-03 09:26 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2015-12-03 09:26 - 2015-11-22 10:52 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:42 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-12-03 09:26 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-12-03 09:26 - 2015-11-22 10:33 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-12-03 09:26 - 2015-11-22 10:24 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-12-03 09:25 - 2015-11-22 11:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2015-12-03 09:25 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2015-12-03 09:25 - 2015-11-22 11:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-12-03 09:25 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-12-03 09:25 - 2015-11-22 11:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2015-12-03 09:25 - 2015-11-22 11:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-12-03 09:25 - 2015-11-22 11:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2015-12-03 09:25 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2015-12-03 09:25 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2015-12-03 09:25 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-12-03 09:25 - 2015-11-22 10:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2015-12-03 09:25 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2015-12-03 09:25 - 2015-11-22 10:47 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-12-03 09:25 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-12-03 09:25 - 2015-11-22 10:44 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-12-03 09:25 - 2015-11-22 10:30 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-12-03 09:25 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:16 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2015-12-03 09:24 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2015-12-03 09:24 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2015-12-03 09:24 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2015-12-01 11:06 - 2015-12-01 11:06 - 01736704 _____ C:\Users\Adam\Downloads\adwcleaner_5.023.exe 2015-12-01 10:59 - 2015-12-13 09:23 - 00001892 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk 2015-12-01 10:59 - 2015-12-13 09:23 - 00000000 ____D C:\Users\Adam\AppData\Local\Downloaded Installations 2015-12-01 10:59 - 2015-12-01 10:59 - 00000000 ____D C:\Users\Adam\REACHit 2015-11-25 10:33 - 2015-11-21 07:21 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 07:02 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2015-11-25 10:33 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2015-11-25 10:33 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2015-11-24 10:18 - 2015-11-24 10:18 - 00000000 ____D C:\Users\Adam\AppData\Local\ElevatedDiagnostics 2015-11-21 09:42 - 2015-11-21 09:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-11-19 14:52 - 2015-11-19 14:52 - 00000000 ____D C:\Users\Adam\AppData\Local\ActiveSync 2015-11-19 14:49 - 2015-11-19 14:49 - 00000020 ___SH C:\Users\Adam\ntuser.ini 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Szablony 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Menu Start 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2015-11-19 14:42 - 2015-12-16 13:53 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-11-19 14:34 - 2015-11-19 14:34 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Local\Pokki 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Local\Pokki 2015-11-19 14:29 - 2015-11-19 14:35 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2015-11-19 14:28 - 2015-12-16 13:55 - 00000000 ____D C:\Users\Adam 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Ustawienia lokalne 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Szablony 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Moje dokumenty 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Menu Start 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje wideo 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje obrazy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moja muzyka 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Dane aplikacji 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Historia 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Dane aplikacji 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant 2015-11-19 14:24 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Conexant 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\Program Files\Dolby Digital Plus 2015-11-19 14:24 - 2015-04-18 10:26 - 00427224 _____ (Conexant Systems, Inc.) C:\WINDOWS\SysWOW64\SASrv.exe 2015-11-19 14:24 - 2014-11-26 11:01 - 00004664 _____ C:\WINDOWS\system32\Drivers\CxSfPt.dat 2015-11-19 14:24 - 2013-07-31 18:41 - 00002832 _____ C:\WINDOWS\system32\Drivers\SamSfPa.dat 2015-11-19 14:24 - 2013-07-25 14:39 - 00206552 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe 2015-11-19 14:23 - 2015-12-16 13:55 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-11-19 14:23 - 2015-12-11 15:35 - 00000000 ____D C:\ProgramData\Lenovo 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Synaptics 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Intel 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\CONEXANT 2015-11-19 14:23 - 2015-11-19 14:23 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2015-11-19 14:23 - 2015-07-17 22:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2015-11-19 14:23 - 2015-07-17 22:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2015-11-19 14:22 - 2015-12-16 13:53 - 00000000 ____D C:\ProgramData\Validity 2015-11-19 14:22 - 2015-11-19 14:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf 2015-11-19 14:21 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-11-19 14:18 - 2015-12-13 01:00 - 00369400 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-11-19 14:17 - 2015-11-19 18:39 - 00000000 ___DC C:\WINDOWS\Panther 2015-11-19 14:13 - 2015-12-10 10:56 - 00000000 ____D C:\Windows.old 2015-11-19 14:12 - 2015-11-19 14:12 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2015-11-19 14:03 - 2015-11-19 14:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\MSBuild 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-11-19 14:00 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00593624 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtkBtfilter.sys 2015-11-19 13:22 - 2015-11-19 13:22 - 00050928 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00050876 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00049088 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048276 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048192 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00045868 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00040516 _____ C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00033620 _____ C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-17 12:21 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-11-16 14:22 - 2015-12-13 01:05 - 01388432 _____ C:\Users\Public\VOIP.dat ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-16 14:18 - 2015-11-08 23:08 - 00000000 ____D C:\FRST 2015-12-16 13:56 - 2014-07-17 17:41 - 00000000 __RDO C:\Users\Adam\SkyDrive 2015-12-16 13:55 - 2015-08-06 09:07 - 00000000 __SHD C:\Users\Adam\IntelGraphicsProfiles 2015-12-16 13:53 - 2015-10-30 07:28 - 00000000 ____D C:\Windows 2015-12-16 13:48 - 2015-02-04 18:15 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-16 13:46 - 2015-02-04 18:35 - 00000000 ____D C:\Users\Adam\AppData\Roaming\OpenOffice.org2 2015-12-16 13:41 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-16 13:40 - 2015-10-30 20:19 - 00818302 _____ C:\WINDOWS\system32\perfh015.dat 2015-12-16 13:40 - 2015-10-30 20:19 - 00157970 _____ C:\WINDOWS\system32\perfc015.dat 2015-12-16 13:40 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2015-12-16 13:40 - 2015-08-06 08:51 - 01845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-16 13:39 - 2014-05-16 10:14 - 833163264 ___SH C:\WINDOWS\lenovo_fastboot.img 2015-12-16 13:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\System 2015-12-16 13:35 - 2015-10-30 08:18 - 00686984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2015-12-16 13:35 - 2015-10-30 08:18 - 00535088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Users\Adam\AppData\Local\NP3 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Program Files (x86)\Neuro-Programmer 3 2015-12-16 10:56 - 2015-10-15 21:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-16 08:58 - 2014-07-17 22:49 - 00004202 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8E1D0878-E5DB-4924-BDA0-3028CE274BD3} 2015-12-15 23:21 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-15 23:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-14 23:54 - 2015-10-22 15:06 - 05760425 _____ C:\WINDOWS\NGIPacket.KTL 2015-12-14 23:54 - 2015-10-22 15:06 - 00288104 _____ C:\WINDOWS\SentOSPackets.KTL 2015-12-14 23:54 - 2015-08-06 09:27 - 00293521 _____ C:\WINDOWS\NGIControl.KTL 2015-12-14 00:48 - 2014-11-26 23:46 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Temp 2015-12-14 00:44 - 2015-03-22 01:41 - 00000000 ____D C:\Users\Adam\AppData\Local\Adobe 2015-12-13 09:23 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2015-12-12 19:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-12-12 16:43 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-12 16:43 - 2014-07-18 11:07 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-12-12 16:39 - 2014-07-18 11:07 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-12-12 04:30 - 2015-08-06 09:10 - 00002449 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-09 16:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2015-12-09 04:39 - 2014-08-17 11:14 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-12-07 16:35 - 2015-11-08 22:13 - 00000000 ____D C:\AdwCleaner 2015-12-07 16:35 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-12-04 01:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-12-02 00:12 - 2015-04-19 11:56 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Skype 2015-12-01 11:02 - 2015-08-05 16:47 - 00001944 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk 2015-12-01 11:02 - 2014-07-17 23:06 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-12-01 10:59 - 2014-07-17 21:52 - 00000000 ____D C:\Users\Adam\AppData\Local\Lenovo 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2015-12-01 10:59 - 2014-05-16 09:42 - 00000000 ____D C:\Program Files (x86)\Lenovo 2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-30 16:03 - 2015-10-30 20:20 - 00000000 ____D C:\WINDOWS\OCR 2015-11-27 00:15 - 2015-06-01 16:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-11-24 23:28 - 2015-04-19 11:55 - 00000000 ____D C:\ProgramData\Skype 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-11-20 11:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat 2015-11-20 02:06 - 2015-08-06 09:07 - 00000000 ____D C:\Users\Adam\AppData\Local\Comms 2015-11-19 15:09 - 2014-07-17 21:51 - 00000000 ____D C:\Users\Adam\AppData\Local\Packages 2015-11-19 15:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-11-19 14:49 - 2014-07-17 21:49 - 00000000 __RHD C:\Users\Public\AccountPictures 2015-11-19 14:47 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT 2015-11-19 14:47 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagwrn.xml 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagerr.xml 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries 2015-11-19 14:42 - 2015-08-06 08:57 - 00023140 _____ C:\WINDOWS\system32\emptyregdb.dat 2015-11-19 14:42 - 2015-06-01 16:50 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-11-19 14:42 - 2014-12-21 20:28 - 00002266 _____ C:\WINDOWS\System32\Tasks\{D1D8488A-0778-4CC5-97E1-F73AB6CEBC5F} 2015-11-19 14:42 - 2014-07-17 21:58 - 00002874 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-1001 2015-11-19 14:42 - 2014-05-16 10:28 - 00002048 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements 2015-11-19 14:42 - 2014-05-16 10:26 - 00001934 _____ C:\WINDOWS\System32\Tasks\PMTask 2015-11-19 14:42 - 2014-05-16 10:22 - 00002048 _____ C:\WINDOWS\System32\Tasks\StartPowerDVDService 2015-11-19 14:42 - 2014-05-16 10:19 - 00002340 _____ C:\WINDOWS\System32\Tasks\CLMLSvc 2015-11-19 14:42 - 2014-05-16 09:26 - 00002314 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-500 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ModemLogs 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-11-19 14:35 - 2015-02-19 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VT Niemiecki Kurs podstawowy mp3 2015-11-19 14:35 - 2015-02-09 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager 2015-11-19 14:35 - 2015-02-04 17:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 2.4 2015-11-19 14:35 - 2014-09-24 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-11-19 14:35 - 2014-09-20 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandizip 2015-11-19 14:35 - 2014-09-06 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-11-19 14:35 - 2014-05-16 10:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2015-11-19 14:35 - 2014-05-16 10:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3 2015-11-19 14:35 - 2014-05-16 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2015-11-19 14:34 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-11-19 14:30 - 2014-07-18 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LenovoEMC 2015-11-19 14:30 - 2014-05-16 10:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10 2015-11-19 14:30 - 2014-05-16 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-11-19 14:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS 2015-11-19 14:27 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-11-19 14:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-11-19 14:18 - 2015-10-30 20:30 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2015-11-19 14:17 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-11-19 14:09 - 2015-10-30 20:23 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-11-19 14:09 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\servicing 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-11-17 12:21 - 2015-04-19 11:56 - 00000000 ___RD C:\Program Files (x86)\Skype ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-03-21 15:22 - 2015-08-06 07:47 - 0333528 _____ () C:\Users\Adam\AppData\Local\BTServer.log 2014-07-17 21:52 - 2014-07-17 19:58 - 0000193 _____ () C:\Users\Adam\AppData\Local\RegisteredPackageInformation.xml 2014-07-18 22:48 - 2015-10-22 18:43 - 0007637 _____ () C:\Users\Adam\AppData\Local\Resmon.ResmonCfg 2015-11-19 14:24 - 2015-11-19 14:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-05-16 10:21 - 2014-05-16 10:21 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log 2014-05-16 10:18 - 2014-05-16 10:19 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2014-05-16 10:19 - 2014-05-16 10:20 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log 2014-05-16 10:20 - 2014-05-16 10:21 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log Pliki do przeniesienia lub usunięcia: ==================== C:\Users\Public\VOIP.dat Niektóre pliki w TEMP: ==================== C:\Users\Adam\AppData\Local\Temp\BANDIZIP-SETUP.EXE C:\Users\Adam\AppData\Local\Temp\SpOrder.dll C:\Users\Adam\AppData\Local\Temp\sqlite3.dll C:\Users\Adam\AppData\Local\Temp\Uninstall.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll [2015-10-30 08:18] - [2015-12-16 13:35] - 0686984 ____A (Microsoft Corporation) 504DADE7E712EE51CA5756845CDEA20D C:\WINDOWS\SysWOW64\dnsapi.dll [2015-10-30 08:18] - [2015-12-16 13:35] - 0535088 ____A (Microsoft Corporation) B95C3FB0D6CDED7763D989EF62FAD02E C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-10 20:04 ==================== Koniec FRST.txt ============================

**Posty:** 4765 · przez **ordynat** 16 Gru 2015, 16:30

1) Odinstaluj ten program:
Car Extension (HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\{B149918F-6DA2-490B-0357-810002D58095}) (Version: 1.4.5 - Experience Image corp) <==== UWAGA

2) Otwórz Notatnik i wklej w nim:

Task: {345F1000-E18E-4B2B-B59C-D6F5E8E5693A} - \SwiftSearch Auto Updater 1.10.0.25 Pending Update -> Brak pliku <==== UWAGA
Task: {50588E19-1301-4DC3-A2C6-047E82297897} - \CCleanerSkipUAC -> Brak pliku <==== UWAGA
Task: {7935CB70-FE59-412C-B2E0-EF5D594303B2} - \SwiftSearch Auto Updater 1.10.0.25 Core -> Brak pliku <==== UWAGA
Task: {7F833EF3-E491-4E3F-9A56-02BD5C271AD2} - System32\Tasks\{5F96CA58-DA95-484B-999B-856A295F2FBD} => pcalua.exe -a C:\Users\Adam\AppData\Local\SmartWeb\__u.exe -c _?=C:\Users\Adam\AppData\Local\SmartWeb
C:\Users\Adam\AppData\Local\SmartWeb
Task: {C72380D0-6875-471B-A67C-C4F0758E2F83} - System32\Tasks\Car Extension => Rundll32.exe "C:\Users\Adam\AppData\Local\Car Extension\{05B948B3-37B0-235F-D287-5BA3794DED95}\CarExtension.dll",#1 <==== UWAGA
C:\Users\Adam\AppData\Local\Car Extension
Task: {E784CFA0-26B0-44E0-9586-003B27FF9191} - System32\Tasks\Car Extension2 => Rundll32.exe "C:\Users\Adam\AppData\Local\Car Extension\{05B948B3-37B0-235F-D287-5BA3794DED95}\hzhebv.dll",#1 <==== UWAGA
Task: {FC79F339-4DA3-4FCC-B48D-92CC4078BD09} - \SmartWeb Upgrade Trigger Task -> Brak pliku <==== UWAGA
C:\Users\Public\VOIP.dat
2015-12-16 10:57 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\Roaming\RunDir
2015-12-16 10:57 - 2015-12-16 10:57 - 00000000 ____D C:\Users\Adam\AppData\Roaming\cpuminer
2015-12-16 10:56 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\Local\SmartWeb
2015-12-16 10:56 - 2015-12-16 10:56 - 00003244 _____ C:\WINDOWS\System32\Tasks\Car Extension
2015-12-16 10:56 - 2015-12-16 10:56 - 00003234 _____ C:\WINDOWS\System32\Tasks\Car Extension2
2015-12-16 10:54 - 2015-12-16 10:54 - 00380416 _____ C:\Users\Adam\Downloads\i1eltqxv.exe
2015-12-16 11:00 - 2015-12-16 11:00 - 00004768 _____ C:\WINDOWS\SysWOW64\Kaaplhv.ini
2015-12-16 11:00 - 2015-12-16 11:00 - 00002488 _____ C:\WINDOWS\SysWOW64\KaaplhvOff.ini
2015-12-16 11:00 - 2015-12-16 11:00 - 00002488 _____ C:\WINDOWS\system32\KaaplhvOff.ini
2015-12-16 13:49 - 2015-12-16 13:51 - 00380416 _____ C:\Users\Adam\Downloads\wfl9mv2w.exe
2015-12-16 13:53 - 2015-12-16 13:54 - 00281916 _____ C:\WINDOWS\Minidump\121615-26859-01.dmp
S2 Naqho; "C:\Users\Adam\AppData\Roaming\XyvetiElo\Tynrutg.exe" -cms [X]
C:\Users\Adam\AppData\Roaming\XyvetiElo
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\!E9F231D8C9E95BE6CF66696E797FD59DE9F2.js [2015-12-16] <==== UWAGA
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\E9F231D8C9E95BE6CF66696E797FD59DE9F2 [2015-12-16] <==== UWAGA
FF SelectedSearchEngine: webssearches
FF Homepage: hxxps://trafficmonsoon.com/?ref=SuperMan777
SearchScopes: HKU\S-1-5-21-395553583-66053808-1738365731-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).
Powstanie plik fixlog.txt.
Daj ten log.

Napisz, czy problem znikł?
.

**Posty:** 271 · przez **Sythev** 16 Gru 2015, 17:41

nie moge usunac programu Car

Dodano 16.12.2015 16:51:33:
Niestety reklamy dalej wyskakuja i problem nie znikł

Czy moge sie logować na konto bankowe itp czy to ryzyko?

Dodano 16.12.2015 17:07:49:
Nie ukrywam,że zależy mi na czasie a reklamy uniemozliwiaja prace i nawet ADWCleaner jest dziwnie blokowany bo przy usuwaniu plikow sie zawiesza..
zrobie zaraz jeszcze raz log z FRST ale cos czuje,ze bez formata sie nie obedzie.

Dodano 16.12.2015 17:11:02:

Kod: Zaznacz wszystko: Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (2015-12-16 17:09:38) Uruchomiony z C:\Users\Adam\Downloads Windows 10 Home (X64) (2015-11-19 13:48:37) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Adam (S-1-5-21-395553583-66053808-1738365731-1001 - Administrator - Enabled) => C:\Users\Adam Administrator (S-1-5-21-395553583-66053808-1738365731-500 - Administrator - Disabled) Gość (S-1-5-21-395553583-66053808-1738365731-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-395553583-66053808-1738365731-1003 - Limited - Enabled) Konto domyślne (S-1-5-21-395553583-66053808-1738365731-503 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.213 - Adobe Systems Incorporated) Bandizip (HKLM\...\Bandizip) (Version: 5.01 - Bandisoft.com) Car Extension (HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\{B149918F-6DA2-490B-0357-810002D58095}) (Version: 1.4.5 - Experience Image corp) <==== UWAGA Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant) CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.) Dependency Package Update (Version: 1.6.25.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10236 - Realtek Semiconductor Corp.) Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1014 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.17.49 - Huawei Technologies Co.,Ltd) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.10 - ) Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.4.0.4 - Lenovo Group Limited) Hidden Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.17 - Lenovo) Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 1.50 - Lenovo Group Limited) Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.1.12.100 - Lenovo Corporation) Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.3.0.8 - Lenovo Group Limited) Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.0.0.9 - Lenovo Group Limited) Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.1.0.2 - Lenovo Group Limited) Lenovo Solution Center (HKLM\...\{E92E1FF1-B188-43FE-BECA-2248E227E67D}) (Version: 2.8.005.00 - Lenovo Group Limited) Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.42.8185 - Intel(R) Corporation) Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.2.0003.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0003 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) LenovoEMC Storage Connector (HKLM\...\LenovoEMC) (Version: 1.1.2.26394 - LenovoEMC) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Microsoft Office 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 15.0.4675.1003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 43.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0 (x86 pl)) (Version: 43.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.0.5820 - Mozilla) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - ) OpenOffice.org 2.4 (HKLM-x32\...\{E33DB440-A008-4928-8A4E-5FC5ADDED608}) (Version: 2.4.9364 - OpenOffice.org) Pakiet sterowników systemu Windows - Intel Corporation (iaStorA) HDC (08/01/2013 12.8.0.1016) (HKLM\...\C8A921233C0C441A4E4EAABC2AB08C872FD77A6E) (Version: 08/01/2013 12.8.0.1016 - Intel Corporation) Pakiet sterowników systemu Windows - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) (HKLM\...\70FB73D983446AEE2932B0ED51A770D1BD1348DA) (Version: 11/07/2013 1.67.04.04 - Lenovo) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) PowerDVD Create (HKLM-x32\...\InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}) (Version: 10.0 - CyberLink Corp.) PowerDVD Create 10 (x32 Version: 10.0.1.2704 - CyberLink Corp.) Hidden RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo) REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.5.002.10 - Lenovo) REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.773.101113 - REALTEK Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek) REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation) Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.102 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.27 - Synaptics Incorporated) ThinkPad OneLink Dock (HKLM-x32\...\{8E1CACF5-2493-4950-9AD5-189903FE57E7}) (Version: 1.08.25 - Lenovo) ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.78.0.10 - Lenovo) Validity WBF DDK 5011 (HKLM\...\{FF5E324F-1FFF-49D4-8F71-0D25EDF12764}) (Version: 4.5.240.0 - Validity Sensors, Inc.) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VT Niemiecki Kurs podstawowy mp3 (HKLM-x32\...\vt30niemmp3_is1) (Version: - ) WaveEditor (x32 Version: 1.0.1.4514 - CyberLink Corp.) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-395553583-66053808-1738365731-1001_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl64.dll (Bandisoft.com) CustomCLSID: HKU\S-1-5-21-395553583-66053808-1738365731-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= 26-11-2015 23:17:44 Instalator modułów systemu Windows 03-12-2015 09:47:34 Windows Update 12-12-2015 15:24:32 Windows Update 16-12-2015 10:51:41 Windows Defender Checkpoint ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2015-12-16 10:43 - 00000895 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {1C9884D1-BA14-4048-BD74-0F4E0A38519F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] () Task: {3435619E-12F7-4D13-B10D-7C87C112CB28} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe Task: {3494046A-943F-4A56-B11F-9D0D62636D51} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe Task: {3D85D482-5E5D-4948-8563-B926D0DF631F} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-17] (Lenovo) Task: {4AA7D6A0-C007-4254-BB91-EE67011ED747} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {4DDAFC40-61A9-462A-A3B2-F4E7080AAF5D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation) Task: {52A55D29-3845-4A9A-A6D5-D1EA382F9776} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {6B29A057-F7D6-4AE3-B6EC-AE409A3E716E} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {72BA38E3-3145-4387-928B-6FA5CEEFC22B} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-06-28] (CyberLink Corp.) Task: {77FBE4FE-B67F-4D45-8FEA-380F167EFAE2} - System32\Tasks\{D1D8488A-0778-4CC5-97E1-F73AB6CEBC5F} => pcalua.exe -a "C:\Program Files\Common Files\LogiShrd\sp6_Uninstall\setup.exe" Task: {94B0BB25-EB2E-490B-BD3A-20405F0E1E55} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-17] (Lenovo) Task: {9B1304F7-5491-4DCB-977E-12A80DC604FE} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {A6BFD066-E8BF-4BD6-948B-1248DEDC94AB} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-25] (Synaptics Incorporated) Task: {A803B78A-1D35-4DC6-AD7C-A754A68BA7E4} - System32\Tasks\Mekioo => C:\PROGRA~1\GROOVE~1\Acange.bat Task: {B5CD948A-7244-482D-A63F-EFA32D3BF9DA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-12] (Microsoft Corporation) Task: {C0AE073A-80A2-46F6-A7ED-E9E8EFFA441B} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2013-03-06] (CyberLink) Task: {DA4612D5-67C5-4047-AA8D-7D2DE12CDF29} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {DCBE9010-AA58-4F5C-854B-D9E3B3BE59BA} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {ECE94F82-649E-4FBC-B3EC-C64125C27AA4} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {F1BB6CFC-4554-432D-ADAA-D039D674A256} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-07-01] () (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2014-05-16 10:26 - 2013-11-01 16:16 - 00013064 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe 2015-12-03 09:24 - 2015-11-22 10:23 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-12-03 09:24 - 2015-11-22 10:18 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-12-03 09:25 - 2015-11-22 10:21 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2014-09-25 22:16 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-05-16 10:26 - 2013-10-11 06:44 - 00104960 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.dll 2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-10-30 08:18 - 2015-10-30 08:18 - 00218456 _____ () c:\windows\system32\WerEtw.dll 2014-05-16 09:40 - 2013-09-16 04:19 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\ProgramData\Temp:157E1AD3 ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Adam\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg DNS Servers: 213.158.199.1 - 213.158.199.5 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 HKLM\...\StartupApproved\Run: => "HotKeysCmds" HKLM\...\StartupApproved\Run: => "Persistence" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{B1EE66ED-D7E9-4380-B41E-19C3AF3BE54F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{A6CAB9EC-2566-488C-89C5-7FB6523C7708}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{066D0E4C-3B5F-4A0A-BCFF-8590841DA280}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3F77D2D4-8D4B-4E48-B37E-44E4D11D272A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E2B1EB03-809D-48F7-906E-83A170DFFCD6}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{83C58653-9C9E-4083-8ACC-106DC8FBAC20}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{2D625DDE-8148-4750-B0CB-6EC4E4E0EBD6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{C7E10971-5514-4886-9C5B-C3B906A756B4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{75EE30EC-4422-4936-9A02-326C14435D76}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B6F31C27-288A-4554-A63C-05BF710E86FF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3D9DDA88-6ADE-40F5-BEF0-F1E214ECD37E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FE82692A-C40F-4358-ADC6-E4A42ADA3B8F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{E0ECF072-4D31-4471-A117-C4F1C2A1D52F}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{2D0001DA-2DAD-4B8A-BD04-CA6477F8BDD6}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{4BD3BB6C-2B7F-4398-BDFE-B082BB1E5E6D}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{6994BF53-1D9F-4914-8A82-A6966E03A732}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{34B61DD0-BA4B-4B01-A2B5-27C48308FD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{43662A0E-0489-49C2-B8D6-EF615600BD7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{5CDCE01F-E7C2-43E7-A049-DA060AFEC946}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{A45CACD5-C548-46F3-BDBE-31FA8BE3C181}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{92E106AD-31E2-4736-8000-A85B404FA6DE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [{9852149A-3786-4190-AABF-F863F0EA4037}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [TCP Query User{75971BBC-F91D-4BAC-9298-A1AEE9ED12C0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{15D63003-B870-4060-8DED-920709D78624}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{C8A4ED16-AF42-4887-BF66-E56E2963630C}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe FirewallRules: [{CA1FBDFD-0387-4564-9F9C-0A5573D95168}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/16/2015 05:08:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: adwcleaner_5.025.exe, wersja: 5.0.2.5, sygnatura czasowa: 0x566da983 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.10586.20, sygnatura czasowa: 0x5654262a Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000302b5 Identyfikator procesu powodującego błąd: 0xb34 Godzina uruchomienia aplikacji powodującej błąd: 0xadwcleaner_5.025.exe0 Ścieżka aplikacji powodującej błąd: adwcleaner_5.025.exe1 Ścieżka modułu powodującego błąd: adwcleaner_5.025.exe2 Identyfikator raportu: adwcleaner_5.025.exe3 Pełna nazwa pakietu powodującego błąd: adwcleaner_5.025.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: adwcleaner_5.025.exe5 Error: (12/16/2015 05:05:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: adwcleaner_5.025.exe, wersja: 5.0.2.5, sygnatura czasowa: 0x566da983 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.10586.20, sygnatura czasowa: 0x5654262a Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000302b5 Identyfikator procesu powodującego błąd: 0x1c28 Godzina uruchomienia aplikacji powodującej błąd: 0xadwcleaner_5.025.exe0 Ścieżka aplikacji powodującej błąd: adwcleaner_5.025.exe1 Ścieżka modułu powodującego błąd: adwcleaner_5.025.exe2 Identyfikator raportu: adwcleaner_5.025.exe3 Pełna nazwa pakietu powodującego błąd: adwcleaner_5.025.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: adwcleaner_5.025.exe5 Error: (12/16/2015 01:56:34 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (396) Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\ProgramData\Microsoft\SmsRouter\MessageStore\edb.log. Error: (12/16/2015 01:56:29 PM) (Source: ESENT) (EventID: 454) (User: ) Description: svchost (396) Odzyskiwanie/przywracanie bazy danych nie powiodło się z powodu nieoczekiwanego błędu: -530. Error: (12/16/2015 01:56:29 PM) (Source: ESENT) (EventID: 412) (User: ) Description: svchost (396) Nie można odczytać nagłówka pliku dziennika C:\ProgramData\Microsoft\SmsRouter\MessageStore\edb00004.log. Błąd -530. Error: (12/16/2015 01:40:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji E046963F.LenovoSupport_k1h2ywk1493x8!App nie powiodła się. Błąd: -2147024865. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji E046963F.LenovoSupport_k1h2ywk1493x8!App nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji LenovoCorporation.LenovoSettings_4642shxvsv8s2!App nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 01:40:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Dziennik System: ============= Error: (12/16/2015 05:08:16 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: właściwe dla aplikacjiLokalnyAktywacja{3185A766-B338-11E4-A71E-12E3F512A338}{7006698D-2974-4091-A424-85DD0B909E23}ZARZĄDZANIE NTUSŁUGA LOKALNAS-1-5-19LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (12/16/2015 05:08:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/16/2015 05:08:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/16/2015 05:08:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. Error: (12/16/2015 05:08:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Usługa Szybka instalacja pakietu Microsoft Office niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 0 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/16/2015 05:08:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Intel(R) Capability Licensing Service Interface niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 0 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/16/2015 05:03:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Lenovo Settings Power Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/16/2015 05:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa LocationTaskManager niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/16/2015 05:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa LenovoEMCDiscovery niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/16/2015 05:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) Dynamic Application Loader Host Interface Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. CodeIntegrity: =================================== Date: 2015-12-16 10:51:33.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.602 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.446 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:32.424 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-14 10:01:46.906 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 01:01:20.143 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-09 16:17:58.895 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.881 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.826 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-4000M CPU @ 2.40GHz Procent pamięci w użyciu: 32% Całkowita pamięć fizyczna: 3986.65 MB Dostępna pamięć fizyczna: 2683.44 MB Całkowita pamięć wirtualna: 4690.65 MB Dostępna pamięć wirtualna: 3497.51 MB ==================== Dyski ================================ Drive c: (Windows8_OS) (Fixed) (Total:451.25 GB) (Free:415.96 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive e: (Internet Manager) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 5E855232) Partition: GPT. ==================== Koniec Addition.txt ============================

Dodano 16.12.2015 17:11:19:

Kod: Zaznacz wszystko: Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (administrator) ADAM-PC (16-12-2015 17:08:34) Uruchomiony z C:\Users\Adam\Downloads Załadowane profile: Adam (Dostępne profile: Adam) Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.) HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [147160 2013-06-19] (Realtek Semiconductor Corp.) HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited) HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [384296 2013-10-28] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [600568 2013-11-05] (Lenovo Corporation) HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [396688 2015-07-17] () HKLM\...\Run: [SynLenovoHelper] => C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [163960 2015-10-25] (Synaptics) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [750320 2014-05-16] (Lenovo) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50515584 2015-11-17] (Skype Technologies S.A.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {60794a9e-ad8f-11e4-8286-28d24482f56a} - "E:\AutoRun.exe" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {840dd4a1-8ec2-11e5-89ae-28d24482f56a} - "E:\AutoRun.exe" ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk [2015-11-09] ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe () ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\..\Interfaces\{1C17FFB4-6E49-4992-A54D-971CCC201392}: [NameServer] 213.158.199.1 213.158.199.5 Tcpip\..\Interfaces\{20265aec-d3fd-4f1d-8540-5af401f54c87}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{51eacf3f-c4a5-42a8-908b-9869c48943ee}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676272479&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676467617&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - Brak pliku Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943 FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Extension: Flashlight - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions\flashlight@stephennolan.com.au [2015-06-17] FF Extension: Facebook Phishing Protector - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-06-17] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [573432 2013-11-05] (Lenovo Corporation) S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation) S2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2014-05-16] (Lenovo) S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] () S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-09-24] (Intel Corporation) S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682064 2014-04-26] () S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2083592 2013-11-06] (Lenovo Group Limited) S2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [695800 2013-11-05] (Lenovo Corporation) S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) S2 LenovoEMCDiscovery; C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe [1410888 2014-04-08] (LenovoEMC Products USA, LLC) S2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [467720 2013-11-01] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272424 2015-08-17] (Lenovo) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [58360 2013-10-08] (Lenovo Group Limited) S3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [140280 2013-10-08] (Lenovo Group Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22008 2015-07-01] () S2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-10-25] (Synaptics Incorporated) S2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-01-29] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [65928 2014-05-16] (Windows (R) Win 7 DDK provider) R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.) R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.) R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77456 2013-08-19] (Intel Corporation) S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek ) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-11-19] (Realtek Semiconductor Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8244312 2013-06-19] (Realtek Semiconductor Corp.) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51320 2015-10-25] (Synaptics Incorporated) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-28] (Lenovo Group Limited) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 kxtdrpod; \??\C:\Users\Adam\AppData\Local\Temp\kxtdrpod.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-16 17:08 - 2015-12-16 17:09 - 00015413 _____ C:\Users\Adam\Downloads\FRST.txt 2015-12-16 17:02 - 2015-12-16 17:02 - 00002372 _____ C:\WINDOWS\ProcessedPackets.KTL 2015-12-16 16:55 - 2015-12-16 16:55 - 01740288 _____ C:\Users\Adam\Downloads\adwcleaner_5.025.exe 2015-12-16 16:47 - 2015-12-16 16:47 - 00000000 ___HD C:\OneDriveTemp 2015-12-16 16:34 - 2015-12-16 16:34 - 00012864 ____N C:\bootsqm.dat 2015-12-16 16:34 - 2015-12-16 16:34 - 00000000 __SHD C:\found.000 2015-12-16 15:10 - 2015-12-16 16:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-16 13:53 - 2015-12-16 16:43 - 00000000 ____D C:\WINDOWS\Minidump 2015-12-16 13:53 - 2015-12-16 13:53 - 634798311 _____ C:\WINDOWS\MEMORY.DMP 2015-12-16 13:51 - 2015-12-16 14:18 - 02370048 _____ (Farbar) C:\Users\Adam\Downloads\FRST64.exe 2015-12-16 13:50 - 2015-12-16 13:58 - 00602112 _____ (OldTimer Tools) C:\Users\Adam\Downloads\OTL_[www.programosy.pl].exe 2015-12-16 13:35 - 2015-12-16 13:35 - 00000000 ____D C:\WINDOWS\system32\big 2015-12-16 11:00 - 2015-12-16 11:00 - 00000000 ____D C:\Users\Adam\AppData\Local\Tempfolder 2015-12-16 10:59 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Company 2015-12-16 10:59 - 2015-12-16 10:59 - 00003400 _____ C:\WINDOWS\System32\Tasks\Mekioo 2015-12-16 10:45 - 2015-12-16 10:43 - 00000895 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2015-12-16 10:41 - 2015-12-16 10:41 - 02386650 _____ ( ) C:\Users\Adam\Downloads\MK_[www.programosy.pl].exe 2015-12-12 15:32 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-12-12 15:32 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-12-12 15:32 - 2015-11-24 12:07 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-12-12 15:32 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-12-12 15:32 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-12-12 15:32 - 2015-11-24 11:03 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-12-12 15:32 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2015-12-12 15:32 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-12-12 15:32 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2015-12-12 15:32 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-12-12 15:32 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-12-12 15:32 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-12-12 15:32 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-12-12 15:32 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-12-12 15:32 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 09:27 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-12-12 15:32 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-12-12 15:32 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-12-12 15:32 - 2015-11-24 08:25 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:09 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-12-10 12:59 - 2015-12-10 12:59 - 00000000 ___RD C:\Users\Adam\3D Objects 2015-12-08 22:29 - 2015-12-08 22:29 - 09498816 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2015-12-04 12:01 - 2015-12-16 17:02 - 00088484 _____ C:\WINDOWS\Control.KTL 2015-12-04 01:21 - 2015-12-08 15:50 - 00000000 ____D C:\Users\Adam\Desktop\TM 2015-12-03 09:26 - 2015-11-22 11:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-12-03 09:26 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2015-12-03 09:26 - 2015-11-22 10:52 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:42 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-12-03 09:26 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-12-03 09:26 - 2015-11-22 10:33 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-12-03 09:26 - 2015-11-22 10:24 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-12-03 09:25 - 2015-11-22 11:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2015-12-03 09:25 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2015-12-03 09:25 - 2015-11-22 11:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-12-03 09:25 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-12-03 09:25 - 2015-11-22 11:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2015-12-03 09:25 - 2015-11-22 11:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-12-03 09:25 - 2015-11-22 11:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2015-12-03 09:25 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2015-12-03 09:25 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2015-12-03 09:25 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-12-03 09:25 - 2015-11-22 10:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2015-12-03 09:25 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2015-12-03 09:25 - 2015-11-22 10:47 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-12-03 09:25 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-12-03 09:25 - 2015-11-22 10:44 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-12-03 09:25 - 2015-11-22 10:30 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-12-03 09:25 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:16 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2015-12-03 09:24 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2015-12-03 09:24 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2015-12-03 09:24 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2015-12-01 10:59 - 2015-12-13 09:23 - 00001892 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk 2015-12-01 10:59 - 2015-12-13 09:23 - 00000000 ____D C:\Users\Adam\AppData\Local\Downloaded Installations 2015-12-01 10:59 - 2015-12-01 10:59 - 00000000 ____D C:\Users\Adam\REACHit 2015-11-25 10:33 - 2015-11-21 07:21 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 07:02 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2015-11-25 10:33 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2015-11-25 10:33 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2015-11-24 10:18 - 2015-11-24 10:18 - 00000000 ____D C:\Users\Adam\AppData\Local\ElevatedDiagnostics 2015-11-21 09:42 - 2015-11-21 09:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-11-19 14:52 - 2015-11-19 14:52 - 00000000 ____D C:\Users\Adam\AppData\Local\ActiveSync 2015-11-19 14:49 - 2015-11-19 14:49 - 00000020 ___SH C:\Users\Adam\ntuser.ini 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Szablony 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Menu Start 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2015-11-19 14:42 - 2015-12-16 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-11-19 14:34 - 2015-11-19 14:34 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Local\Pokki 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Local\Pokki 2015-11-19 14:29 - 2015-11-19 14:35 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2015-11-19 14:28 - 2015-12-16 15:17 - 00000000 ____D C:\Users\Adam 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Ustawienia lokalne 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Szablony 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Moje dokumenty 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Menu Start 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje wideo 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje obrazy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moja muzyka 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Dane aplikacji 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Historia 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Dane aplikacji 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant 2015-11-19 14:24 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Conexant 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\Program Files\Dolby Digital Plus 2015-11-19 14:24 - 2015-04-18 10:26 - 00427224 _____ (Conexant Systems, Inc.) C:\WINDOWS\SysWOW64\SASrv.exe 2015-11-19 14:24 - 2014-11-26 11:01 - 00004664 _____ C:\WINDOWS\system32\Drivers\CxSfPt.dat 2015-11-19 14:24 - 2013-07-31 18:41 - 00002832 _____ C:\WINDOWS\system32\Drivers\SamSfPa.dat 2015-11-19 14:24 - 2013-07-25 14:39 - 00206552 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe 2015-11-19 14:23 - 2015-12-16 16:46 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-11-19 14:23 - 2015-12-11 15:35 - 00000000 ____D C:\ProgramData\Lenovo 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Synaptics 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Intel 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\CONEXANT 2015-11-19 14:23 - 2015-11-19 14:23 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2015-11-19 14:23 - 2015-07-17 22:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2015-11-19 14:23 - 2015-07-17 22:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2015-11-19 14:22 - 2015-12-16 17:08 - 00000000 ____D C:\ProgramData\Validity 2015-11-19 14:22 - 2015-11-19 14:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf 2015-11-19 14:21 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-11-19 14:18 - 2015-12-13 01:00 - 00369400 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-11-19 14:17 - 2015-11-19 18:39 - 00000000 ___DC C:\WINDOWS\Panther 2015-11-19 14:13 - 2015-12-10 10:56 - 00000000 ____D C:\Windows.old 2015-11-19 14:12 - 2015-11-19 14:12 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2015-11-19 14:03 - 2015-11-19 14:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\MSBuild 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-11-19 14:00 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00593624 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtkBtfilter.sys 2015-11-19 13:22 - 2015-11-19 13:22 - 00050928 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00050876 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00049088 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048276 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048192 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00045868 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00040516 _____ C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00033620 _____ C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-17 12:21 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-16 17:08 - 2015-11-08 23:08 - 00000000 ____D C:\FRST 2015-12-16 17:08 - 2015-11-08 22:13 - 00000000 ____D C:\AdwCleaner 2015-12-16 17:03 - 2014-07-17 17:41 - 00000000 __RDO C:\Users\Adam\SkyDrive 2015-12-16 17:02 - 2015-10-30 07:28 - 00000000 ____D C:\Windows 2015-12-16 17:02 - 2015-10-22 15:06 - 00001422 _____ C:\WINDOWS\NGIPacket.KTL 2015-12-16 17:02 - 2015-10-22 15:06 - 00000997 _____ C:\WINDOWS\SentOSPackets.KTL 2015-12-16 17:02 - 2015-08-06 09:27 - 00015194 _____ C:\WINDOWS\NGIControl.KTL 2015-12-16 16:52 - 2015-02-04 18:15 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-16 16:50 - 2015-10-30 20:19 - 00818302 _____ C:\WINDOWS\system32\perfh015.dat 2015-12-16 16:50 - 2015-10-30 20:19 - 00157970 _____ C:\WINDOWS\system32\perfc015.dat 2015-12-16 16:50 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2015-12-16 16:50 - 2015-08-06 08:51 - 01845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-16 16:50 - 2015-02-04 18:35 - 00000000 ____D C:\Users\Adam\AppData\Roaming\OpenOffice.org2 2015-12-16 16:46 - 2015-08-06 09:07 - 00000000 __SHD C:\Users\Adam\IntelGraphicsProfiles 2015-12-16 16:44 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-16 16:44 - 2014-11-26 23:46 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Temp 2015-12-16 16:35 - 2014-07-17 23:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-16 13:39 - 2014-05-16 10:14 - 833163264 ___SH C:\WINDOWS\lenovo_fastboot.img 2015-12-16 13:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\System 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Users\Adam\AppData\Local\NP3 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Program Files (x86)\Neuro-Programmer 3 2015-12-16 08:58 - 2014-07-17 22:49 - 00004202 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8E1D0878-E5DB-4924-BDA0-3028CE274BD3} 2015-12-15 23:21 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-15 23:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-14 00:44 - 2015-03-22 01:41 - 00000000 ____D C:\Users\Adam\AppData\Local\Adobe 2015-12-13 09:23 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2015-12-12 19:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-12-12 16:43 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-12 16:43 - 2014-07-18 11:07 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-12-12 16:39 - 2014-07-18 11:07 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-12-12 04:30 - 2015-08-06 09:10 - 00002449 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-09 16:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2015-12-09 04:39 - 2014-08-17 11:14 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-12-07 16:35 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-12-04 01:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-12-02 00:12 - 2015-04-19 11:56 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Skype 2015-12-01 11:02 - 2015-08-05 16:47 - 00001944 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk 2015-12-01 11:02 - 2014-07-17 23:06 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-12-01 10:59 - 2014-07-17 21:52 - 00000000 ____D C:\Users\Adam\AppData\Local\Lenovo 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2015-12-01 10:59 - 2014-05-16 09:42 - 00000000 ____D C:\Program Files (x86)\Lenovo 2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-30 16:03 - 2015-10-30 20:20 - 00000000 ____D C:\WINDOWS\OCR 2015-11-27 00:15 - 2015-06-01 16:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-11-24 23:28 - 2015-04-19 11:55 - 00000000 ____D C:\ProgramData\Skype 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-11-20 11:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat 2015-11-20 02:06 - 2015-08-06 09:07 - 00000000 ____D C:\Users\Adam\AppData\Local\Comms 2015-11-19 15:09 - 2014-07-17 21:51 - 00000000 ____D C:\Users\Adam\AppData\Local\Packages 2015-11-19 15:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-11-19 14:49 - 2014-07-17 21:49 - 00000000 __RHD C:\Users\Public\AccountPictures 2015-11-19 14:47 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT 2015-11-19 14:47 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagwrn.xml 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagerr.xml 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries 2015-11-19 14:42 - 2015-08-06 08:57 - 00023140 _____ C:\WINDOWS\system32\emptyregdb.dat 2015-11-19 14:42 - 2015-06-01 16:50 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-11-19 14:42 - 2014-12-21 20:28 - 00002266 _____ C:\WINDOWS\System32\Tasks\{D1D8488A-0778-4CC5-97E1-F73AB6CEBC5F} 2015-11-19 14:42 - 2014-07-17 21:58 - 00002874 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-1001 2015-11-19 14:42 - 2014-05-16 10:28 - 00002048 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements 2015-11-19 14:42 - 2014-05-16 10:26 - 00001934 _____ C:\WINDOWS\System32\Tasks\PMTask 2015-11-19 14:42 - 2014-05-16 10:22 - 00002048 _____ C:\WINDOWS\System32\Tasks\StartPowerDVDService 2015-11-19 14:42 - 2014-05-16 10:19 - 00002340 _____ C:\WINDOWS\System32\Tasks\CLMLSvc 2015-11-19 14:42 - 2014-05-16 09:26 - 00002314 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-500 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ModemLogs 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-11-19 14:35 - 2015-02-19 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VT Niemiecki Kurs podstawowy mp3 2015-11-19 14:35 - 2015-02-09 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager 2015-11-19 14:35 - 2015-02-04 17:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 2.4 2015-11-19 14:35 - 2014-09-24 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-11-19 14:35 - 2014-09-20 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandizip 2015-11-19 14:35 - 2014-09-06 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-11-19 14:35 - 2014-05-16 10:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2015-11-19 14:35 - 2014-05-16 10:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3 2015-11-19 14:35 - 2014-05-16 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2015-11-19 14:34 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-11-19 14:30 - 2014-07-18 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LenovoEMC 2015-11-19 14:30 - 2014-05-16 10:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10 2015-11-19 14:30 - 2014-05-16 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-11-19 14:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS 2015-11-19 14:27 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-11-19 14:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-11-19 14:18 - 2015-10-30 20:30 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2015-11-19 14:17 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-11-19 14:09 - 2015-10-30 20:23 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-11-19 14:09 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\servicing 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-11-17 12:21 - 2015-04-19 11:56 - 00000000 ___RD C:\Program Files (x86)\Skype ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-03-21 15:22 - 2015-08-06 07:47 - 0333528 _____ () C:\Users\Adam\AppData\Local\BTServer.log 2014-07-17 21:52 - 2014-07-17 19:58 - 0000193 _____ () C:\Users\Adam\AppData\Local\RegisteredPackageInformation.xml 2014-07-18 22:48 - 2015-10-22 18:43 - 0007637 _____ () C:\Users\Adam\AppData\Local\Resmon.ResmonCfg 2015-11-19 14:24 - 2015-11-19 14:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-05-16 10:21 - 2014-05-16 10:21 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log 2014-05-16 10:18 - 2014-05-16 10:19 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2014-05-16 10:19 - 2014-05-16 10:20 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log 2014-05-16 10:20 - 2014-05-16 10:21 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log Niektóre pliki w TEMP: ==================== C:\Users\Adam\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-10 20:04 ==================== Koniec FRST.txt ============================

**Posty:** 4765 · przez **ordynat** 16 Gru 2015, 18:38

Otwórz Notatnik i wklej w nim:

Task: {A803B78A-1D35-4DC6-AD7C-A754A68BA7E4} - System32\Tasks\Mekioo => C:\PROGRA~1\GROOVE~1\Acange.bat
C:\PROGRA~1\GROOVE~1
Task: {77FBE4FE-B67F-4D45-8FEA-380F167EFAE2} - System32\Tasks\{D1D8488A-0778-4CC5-97E1-F73AB6CEBC5F} => pcalua.exe -a "C:\Program Files\Common Files\LogiShrd\sp6_Uninstall\setup.exe"
Reg: reg delete "HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Car Extension" /f
Reg: reg delete "HKU\S-1-5-21-395553583-66053808-1738365731-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B149918F-6DA2-490B-0357-810002D58095}" /f
C:\found.000
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

Jeśli to nie pomoże, to już nic nie pomoże, bo na pewno nie masz żadnej infekcji, ale może System masz całkowicie zniszczony.
.

**Posty:** 271 · przez **Sythev** 16 Gru 2015, 22:40

Co to znaczy według Ciebie "system całkowicie zniszczony"? Moze zrobic przywracanie systemu czy to raczej nie pomoze?

Dodano 16.12.2015 21:41:07:
Co to znaczy według Ciebie "system całkowicie zniszczony"? Moze zrobic przywracanie systemu czy to raczej nie pomoze?

**Posty:** 261 · przez **AdamPL234** 17 Gru 2015, 10:16

Sythev, Nie odwiedzałeś nawiedzonych stron internetowych oraz czy nie instalowałeś nic innego z instalatora jakiegoś softu? Bo od takiego podejścia zawsze zdarzają sie problemy z systemem. Jeżeli blokuje ci AdwCleanera lub dziwnie chodzi podczas skanowania to podobnie wirus wstrzykuje w nim swój złośliwy kod. AdwCleanera spróbuj uruchomić w trybie awaryjnym i w nim wyczyść kompa z wykrytych infekcji jakie zostaną wykryte.

Dodano Dzisiaj, 10:18:
Tylko upewnij sie że AdwCleaner nie jest zainfekowany przez infekcje wirusa.

**Posty:** 271 · przez **Sythev** 17 Gru 2015, 10:55

wczoraj jeszcze raz przeskanowałem ADWCleanerem kompa i chyba wreszcie zaskoczyło bo reklamy znikły.
Dodatkowo zainstalowalem AVASTA,zeby czuwał cały czas

Dzieki za pomoc i wrzucę jeszcze raz log z FRST dla pewnosci czy nie ma tam czegos podejrzanego.

Dodano 17.12.2015 10:03:13:

Kod: Zaznacz wszystko: Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (2015-12-17 09:57:49) Uruchomiony z C:\Users\Adam\Downloads Windows 10 Home (X64) (2015-11-19 13:48:37) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Adam (S-1-5-21-395553583-66053808-1738365731-1001 - Administrator - Enabled) => C:\Users\Adam Administrator (S-1-5-21-395553583-66053808-1738365731-500 - Administrator - Disabled) Gość (S-1-5-21-395553583-66053808-1738365731-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-395553583-66053808-1738365731-1003 - Limited - Enabled) Konto domyślne (S-1-5-21-395553583-66053808-1738365731-503 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.213 - Adobe Systems Incorporated) Avast Internet Security (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software) Bandizip (HKLM\...\Bandizip) (Version: 5.01 - Bandisoft.com) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant) CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.) Dependency Package Update (Version: 1.6.25.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10236 - Realtek Semiconductor Corp.) Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1014 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.17.49 - Huawei Technologies Co.,Ltd) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.10 - ) Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.4.0.4 - Lenovo Group Limited) Hidden Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.17 - Lenovo) Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 1.50 - Lenovo Group Limited) Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.1.12.100 - Lenovo Corporation) Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.3.0.8 - Lenovo Group Limited) Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.0.0.9 - Lenovo Group Limited) Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.1.0.2 - Lenovo Group Limited) Lenovo Solution Center (HKLM\...\{E92E1FF1-B188-43FE-BECA-2248E227E67D}) (Version: 2.8.005.00 - Lenovo Group Limited) Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.42.8185 - Intel(R) Corporation) Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.2.0003.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0003 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) LenovoEMC Storage Connector (HKLM\...\LenovoEMC) (Version: 1.1.2.26394 - LenovoEMC) Malwarebytes Anti-Malware wersja 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Microsoft Office 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 15.0.4675.1003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 43.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0 (x86 pl)) (Version: 43.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.0.5820 - Mozilla) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - ) OpenOffice.org 2.4 (HKLM-x32\...\{E33DB440-A008-4928-8A4E-5FC5ADDED608}) (Version: 2.4.9364 - OpenOffice.org) Pakiet sterowników systemu Windows - Intel Corporation (iaStorA) HDC (08/01/2013 12.8.0.1016) (HKLM\...\C8A921233C0C441A4E4EAABC2AB08C872FD77A6E) (Version: 08/01/2013 12.8.0.1016 - Intel Corporation) Pakiet sterowników systemu Windows - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) (HKLM\...\70FB73D983446AEE2932B0ED51A770D1BD1348DA) (Version: 11/07/2013 1.67.04.04 - Lenovo) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) PowerDVD Create (HKLM-x32\...\InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}) (Version: 10.0 - CyberLink Corp.) PowerDVD Create 10 (x32 Version: 10.0.1.2704 - CyberLink Corp.) Hidden RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo) REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.5.002.10 - Lenovo) REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.773.101113 - REALTEK Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek) REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.) SafeZone Stable 1.46.1990.139 (x32 Version: 1.46.1990.139 - Avast Software) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation) Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.102 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.27 - Synaptics Incorporated) ThinkPad OneLink Dock (HKLM-x32\...\{8E1CACF5-2493-4950-9AD5-189903FE57E7}) (Version: 1.08.25 - Lenovo) ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.78.0.10 - Lenovo) Validity WBF DDK 5011 (HKLM\...\{FF5E324F-1FFF-49D4-8F71-0D25EDF12764}) (Version: 4.5.240.0 - Validity Sensors, Inc.) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VT Niemiecki Kurs podstawowy mp3 (HKLM-x32\...\vt30niemmp3_is1) (Version: - ) WaveEditor (x32 Version: 1.0.1.4514 - CyberLink Corp.) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-395553583-66053808-1738365731-1001_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl64.dll (Bandisoft.com) CustomCLSID: HKU\S-1-5-21-395553583-66053808-1738365731-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= 26-11-2015 23:17:44 Instalator modułów systemu Windows 03-12-2015 09:47:34 Windows Update 12-12-2015 15:24:32 Windows Update 16-12-2015 10:51:41 Windows Defender Checkpoint ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2015-12-16 10:43 - 00000895 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {1C9884D1-BA14-4048-BD74-0F4E0A38519F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] () Task: {28D90136-36BD-4464-857A-D4F452561636} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-16] (AVAST Software) Task: {3435619E-12F7-4D13-B10D-7C87C112CB28} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe Task: {3494046A-943F-4A56-B11F-9D0D62636D51} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe Task: {3D85D482-5E5D-4948-8563-B926D0DF631F} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-17] (Lenovo) Task: {4AA7D6A0-C007-4254-BB91-EE67011ED747} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {4DDAFC40-61A9-462A-A3B2-F4E7080AAF5D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation) Task: {52A55D29-3845-4A9A-A6D5-D1EA382F9776} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {6B29A057-F7D6-4AE3-B6EC-AE409A3E716E} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {72BA38E3-3145-4387-928B-6FA5CEEFC22B} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-06-28] (CyberLink Corp.) Task: {94B0BB25-EB2E-490B-BD3A-20405F0E1E55} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-17] (Lenovo) Task: {9B1304F7-5491-4DCB-977E-12A80DC604FE} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {A6BFD066-E8BF-4BD6-948B-1248DEDC94AB} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-25] (Synaptics Incorporated) Task: {ADDB237A-6555-4851-ACDC-40205D3A2698} - System32\Tasks\SafeZone scheduled Autoupdate 1450303712 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2015-12-01] (Avast Software) Task: {B5CD948A-7244-482D-A63F-EFA32D3BF9DA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-12] (Microsoft Corporation) Task: {C0AE073A-80A2-46F6-A7ED-E9E8EFFA441B} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2013-03-06] (CyberLink) Task: {DA4612D5-67C5-4047-AA8D-7D2DE12CDF29} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {DCBE9010-AA58-4F5C-854B-D9E3B3BE59BA} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo) Task: {ECE94F82-649E-4FBC-B3EC-C64125C27AA4} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => c:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] () Task: {F1BB6CFC-4554-432D-ADAA-D039D674A256} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-07-01] () (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2014-05-16 10:26 - 2013-10-11 06:44 - 00104960 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.dll 2014-01-15 04:42 - 2014-01-15 04:42 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe 2014-09-25 22:16 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2015-02-09 14:59 - 2014-04-26 07:15 - 00682064 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe 2014-05-16 10:26 - 2013-11-01 16:16 - 00467720 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2014-05-16 10:26 - 2013-11-01 16:16 - 00013064 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-12-03 09:24 - 2015-11-22 10:23 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-12-03 09:24 - 2015-11-22 10:18 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-12-03 09:25 - 2015-11-22 10:21 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-11-19 14:24 - 2010-10-26 12:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-05-16 09:42 - 2013-10-28 15:48 - 00915968 _____ () C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe 2014-05-16 10:26 - 2013-10-11 06:44 - 00104960 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.DLL 2015-02-09 14:57 - 2014-08-13 10:16 - 00090704 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe 2015-12-16 22:24 - 2015-12-16 22:25 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.11012.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2015-12-16 23:00 - 2015-12-16 23:00 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-12-16 23:00 - 2015-12-16 23:00 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-12-16 23:04 - 2015-12-16 23:04 - 02803712 _____ () C:\Program Files\AVAST Software\Avast\defs\15121600\algo.dll 2015-12-16 23:00 - 2015-12-16 23:00 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2014-05-16 10:14 - 2014-05-16 10:14 - 00033520 _____ () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll 2015-02-09 14:59 - 2013-08-16 07:53 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll 2015-02-09 14:59 - 2013-08-16 07:53 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll 2015-02-09 14:59 - 2014-02-15 08:31 - 02416640 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll 2015-02-09 14:59 - 2014-02-15 08:33 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll 2014-05-16 09:40 - 2013-09-16 04:19 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-11-26 01:36 - 2015-11-26 01:36 - 01232896 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\cbdb8960c3ba64df28ebd50f8b804142\Windows.Networking.ni.dll 2015-11-19 19:34 - 2015-11-19 19:34 - 00335360 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\a0151f05db127c5e199c10af8a83aa95\Windows.Foundation.ni.dll 2015-11-26 01:36 - 2015-11-26 01:36 - 03154432 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\6b4f5a3dae47e37b6ed163edc00b18ed\Windows.Devices.ni.dll 2015-12-16 23:00 - 2015-12-16 23:00 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-03-06 20:49 - 2013-03-06 20:49 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2013-03-06 20:52 - 2013-03-06 20:52 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00457808 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\core.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00282704 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\sdk.dll 2015-02-09 14:57 - 2013-08-16 07:53 - 00011362 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\mingwm10.dll 2015-02-09 14:57 - 2013-08-16 07:53 - 00043008 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\libgcc_s_dw2-1.dll 2015-02-09 14:57 - 2014-02-15 08:31 - 02416640 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtCore4.dll 2015-02-09 14:57 - 2014-02-15 08:44 - 09559040 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtGui4.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00397392 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Proxy.DLL 2015-02-09 14:57 - 2014-08-13 10:17 - 00164432 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Trace.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00250448 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Common.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00553040 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\PluginContainer.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00267344 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AtCodec.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00329296 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00243792 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00162896 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSDialup.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00197200 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\XCodec.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00161360 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DataServicePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00291408 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00225872 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00149072 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00345680 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceAppPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00072272 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSPowerMgr.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00121424 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\Win7Support.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00174672 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\ATR2SMgr.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 01095248 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00715344 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SmsAppPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00165456 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00240720 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DialUpPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00109136 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSAdapt.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00206928 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00138320 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\OSNDIS.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 01153616 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NDISAPI.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00324688 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoSrvPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00566864 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DeviceMgrUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00310864 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\XFramePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00826448 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\MiniFramePlugin.dll 2015-02-09 14:57 - 2014-02-15 08:32 - 00398336 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtXml4.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00104016 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NotifyServicePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00338512 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetConnectPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00426064 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DialupUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00325712 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\StatusBarMgrPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00283216 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\MenuMgrPlugin.dll 2015-02-09 14:57 - 2014-02-15 08:33 - 01148416 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\QtNetwork4.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00123984 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\LayoutPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00312912 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SettingUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00509520 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetSettingPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00315472 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoRecordUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00107088 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\CompressRatePlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00155728 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\VPNPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00525392 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\NetInfoUIExPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00847952 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\SMSUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00116816 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\ServiceUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00419408 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\DiagnosisPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00146512 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\HelpUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:17 - 00457296 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\USSDUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00815184 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\AddrBookUIPlugin.dll 2015-02-09 14:57 - 2014-08-13 10:16 - 00719952 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\LiveUpdateInterface.DLL 2015-02-09 14:57 - 2014-02-15 09:49 - 00082944 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qgif4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00081920 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qico4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00192000 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qjpeg4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00350720 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qmng4.dll 2015-02-09 14:57 - 2014-02-15 09:49 - 00370176 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_H\plugins\imageformats\qtiff4.dll 2015-12-16 22:24 - 2015-12-16 22:25 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.11012.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2015-12-16 22:24 - 2015-12-16 22:25 - 21844480 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.11012.0_x86__8wekyb3d8bbwe\SkyWrap.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\ProgramData\Temp:157E1AD3 ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Adam\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg DNS Servers: 213.158.199.1 - 213.158.199.5 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 HKLM\...\StartupApproved\Run: => "HotKeysCmds" HKLM\...\StartupApproved\Run: => "Persistence" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{B1EE66ED-D7E9-4380-B41E-19C3AF3BE54F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{A6CAB9EC-2566-488C-89C5-7FB6523C7708}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{066D0E4C-3B5F-4A0A-BCFF-8590841DA280}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3F77D2D4-8D4B-4E48-B37E-44E4D11D272A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E2B1EB03-809D-48F7-906E-83A170DFFCD6}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{83C58653-9C9E-4083-8ACC-106DC8FBAC20}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe FirewallRules: [{2D625DDE-8148-4750-B0CB-6EC4E4E0EBD6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{C7E10971-5514-4886-9C5B-C3B906A756B4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{75EE30EC-4422-4936-9A02-326C14435D76}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B6F31C27-288A-4554-A63C-05BF710E86FF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3D9DDA88-6ADE-40F5-BEF0-F1E214ECD37E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FE82692A-C40F-4358-ADC6-E4A42ADA3B8F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{E0ECF072-4D31-4471-A117-C4F1C2A1D52F}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{2D0001DA-2DAD-4B8A-BD04-CA6477F8BDD6}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{4BD3BB6C-2B7F-4398-BDFE-B082BB1E5E6D}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{6994BF53-1D9F-4914-8A82-A6966E03A732}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{34B61DD0-BA4B-4B01-A2B5-27C48308FD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{43662A0E-0489-49C2-B8D6-EF615600BD7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{5CDCE01F-E7C2-43E7-A049-DA060AFEC946}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{A45CACD5-C548-46F3-BDBE-31FA8BE3C181}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{92E106AD-31E2-4736-8000-A85B404FA6DE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [{9852149A-3786-4190-AABF-F863F0EA4037}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe FirewallRules: [TCP Query User{75971BBC-F91D-4BAC-9298-A1AEE9ED12C0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{15D63003-B870-4060-8DED-920709D78624}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{C8A4ED16-AF42-4887-BF66-E56E2963630C}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe FirewallRules: [{CA1FBDFD-0387-4564-9F9C-0A5573D95168}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/17/2015 12:54:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/17/2015 12:54:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/17/2015 12:54:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/17/2015 12:54:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAM-PC) Description: Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (12/16/2015 10:23:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: backgroundTaskHost.exe, wersja: 10.0.10586.0, sygnatura czasowa: 0x5632d8f0 Nazwa modułu powodującego błąd: Cortana.Core.dll, wersja: 0.0.0.0, sygnatura czasowa: 0x5651887d Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001325d Identyfikator procesu powodującego błąd: 0x10c4 Godzina uruchomienia aplikacji powodującej błąd: 0xbackgroundTaskHost.exe0 Ścieżka aplikacji powodującej błąd: backgroundTaskHost.exe1 Ścieżka modułu powodującego błąd: backgroundTaskHost.exe2 Identyfikator raportu: backgroundTaskHost.exe3 Pełna nazwa pakietu powodującego błąd: backgroundTaskHost.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: backgroundTaskHost.exe5 Error: (12/16/2015 10:19:17 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (12/16/2015 05:08:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: adwcleaner_5.025.exe, wersja: 5.0.2.5, sygnatura czasowa: 0x566da983 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.10586.20, sygnatura czasowa: 0x5654262a Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000302b5 Identyfikator procesu powodującego błąd: 0xb34 Godzina uruchomienia aplikacji powodującej błąd: 0xadwcleaner_5.025.exe0 Ścieżka aplikacji powodującej błąd: adwcleaner_5.025.exe1 Ścieżka modułu powodującego błąd: adwcleaner_5.025.exe2 Identyfikator raportu: adwcleaner_5.025.exe3 Pełna nazwa pakietu powodującego błąd: adwcleaner_5.025.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: adwcleaner_5.025.exe5 Error: (12/16/2015 05:05:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: adwcleaner_5.025.exe, wersja: 5.0.2.5, sygnatura czasowa: 0x566da983 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.10586.20, sygnatura czasowa: 0x5654262a Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000302b5 Identyfikator procesu powodującego błąd: 0x1c28 Godzina uruchomienia aplikacji powodującej błąd: 0xadwcleaner_5.025.exe0 Ścieżka aplikacji powodującej błąd: adwcleaner_5.025.exe1 Ścieżka modułu powodującego błąd: adwcleaner_5.025.exe2 Identyfikator raportu: adwcleaner_5.025.exe3 Pełna nazwa pakietu powodującego błąd: adwcleaner_5.025.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: adwcleaner_5.025.exe5 Error: (12/16/2015 01:56:34 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (396) Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\ProgramData\Microsoft\SmsRouter\MessageStore\edb.log. Error: (12/16/2015 01:56:29 PM) (Source: ESENT) (EventID: 454) (User: ) Description: svchost (396) Odzyskiwanie/przywracanie bazy danych nie powiodło się z powodu nieoczekiwanego błędu: -530. Dziennik System: ============= Error: (12/17/2015 09:09:55 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (12/17/2015 01:03:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dostęp do danych użytkownika_4ce74 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/17/2015 01:03:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Magazyn danych użytkownika_4ce74 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/17/2015 01:03:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dane kontaktowe_4ce74 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/17/2015 01:03:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Synchronizuj hosta_4ce74 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (12/17/2015 01:03:42 AM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: właściwe dla aplikacjiLokalnyAktywacja{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (12/17/2015 01:00:14 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (12/17/2015 12:56:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Internet Manager. RunOuc z powodu następującego błędu: %%1053 Error: (12/17/2015 12:56:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Internet Manager. RunOuc. Error: (12/17/2015 12:56:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi SAService z powodu następującego błędu: %%2 CodeIntegrity: =================================== Date: 2015-12-16 10:51:33.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.602 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:33.446 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-16 10:51:32.424 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-14 10:01:46.906 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 01:01:20.143 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-09 16:17:58.895 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.881 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 16:17:58.826 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-4000M CPU @ 2.40GHz Procent pamięci w użyciu: 51% Całkowita pamięć fizyczna: 3986.65 MB Dostępna pamięć fizyczna: 1948.03 MB Całkowita pamięć wirtualna: 4690.65 MB Dostępna pamięć wirtualna: 2372.98 MB ==================== Dyski ================================ Drive c: (Windows8_OS) (Fixed) (Total:451.25 GB) (Free:413.03 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive e: (Internet Manager) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 5E855232) Partition: GPT. ==================== Koniec Addition.txt ============================

Dodano 17.12.2015 10:03:30:

Kod: Zaznacz wszystko: Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:16-12-2015 01 Uruchomiony przez Adam (administrator) ADAM-PC (17-12-2015 09:56:24) Uruchomiony z C:\Users\Adam\Downloads Załadowane profile: Adam (Dostępne profile: Adam) Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (LenovoEMC Products USA, LLC) C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe () C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.11012.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.) HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [147160 2013-06-19] (Realtek Semiconductor Corp.) HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited) HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [384296 2013-10-28] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [600568 2013-11-05] (Lenovo Corporation) HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [396688 2015-07-17] () HKLM\...\Run: [SynLenovoHelper] => C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [163960 2015-10-25] (Synaptics) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [750320 2014-05-16] (Lenovo) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-16] (AVAST Software) HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50515584 2015-11-17] (Skype Technologies S.A.) HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {60794a9e-ad8f-11e4-8286-28d24482f56a} - "E:\AutoRun.exe" HKU\S-1-5-21-395553583-66053808-1738365731-1001\...\MountPoints2: {840dd4a1-8ec2-11e5-89ae-28d24482f56a} - "E:\AutoRun.exe" ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-16] (AVAST Software) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-12] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk [2015-11-09] ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe () ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\..\Interfaces\{1C17FFB4-6E49-4992-A54D-971CCC201392}: [NameServer] 213.158.199.1 213.158.199.5 Tcpip\..\Interfaces\{20265aec-d3fd-4f1d-8540-5af401f54c87}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{51eacf3f-c4a5-42a8-908b-9869c48943ee}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676272479&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130876740676467617&GUID=A30B73EC-CDF7-48AA-A8BB-2AF559D23CDA HKU\S-1-5-21-395553583-66053808-1738365731-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-16] (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-16] (AVAST Software) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - Brak pliku Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943 FF Homepage: hxxps://trafficmonsoon.com/?ref=SuperMan777 FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Extension: Flashlight - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\extensions\flashlight@stephennolan.com.au [2015-06-17] FF Extension: Facebook Phishing Protector - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\bav199lt.default-1423070591943\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-06-17] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-16] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-16] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-16] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109520 2015-12-16] (AVAST Software) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [573432 2013-11-05] (Lenovo Corporation) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2014-05-16] (Lenovo) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] () R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-09-24] (Intel Corporation) S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682064 2014-04-26] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2083592 2013-11-06] (Lenovo Group Limited) R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [695800 2013-11-05] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LenovoEMCDiscovery; C:\Program Files\LenovoEMC\StorageConnector\LenovoEMCDiscovery.exe [1410888 2014-04-08] (LenovoEMC Products USA, LLC) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [467720 2013-11-01] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272424 2015-08-17] (Lenovo) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [58360 2013-10-08] (Lenovo Group Limited) R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [140280 2013-10-08] (Lenovo Group Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22008 2015-07-01] () R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-10-25] (Synaptics Incorporated) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-01-29] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-16] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-12-16] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-16] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [466400 2015-12-16] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-16] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-16] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-16] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-16] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-16] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-16] (AVAST Software) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [65928 2014-05-16] (Windows (R) Win 7 DDK provider) R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.) R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.) R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77456 2013-08-19] (Intel Corporation) S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek ) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-11-19] (Realtek Semiconductor Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8244312 2013-06-19] (Realtek Semiconductor Corp.) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51320 2015-10-25] (Synaptics Incorporated) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-28] (Lenovo Group Limited) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 kxtdrpod; \??\C:\Users\Adam\AppData\Local\Temp\kxtdrpod.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-17 09:56 - 2015-12-17 09:57 - 00021294 _____ C:\Users\Adam\Downloads\FRST.txt 2015-12-17 09:11 - 2015-12-17 09:11 - 00000000 ___HD C:\OneDriveTemp 2015-12-16 23:08 - 2015-12-16 23:08 - 00003214 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1450303712 2015-12-16 23:08 - 2015-12-16 23:08 - 00001093 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2015-12-16 23:08 - 2015-12-16 23:08 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2015-12-16 23:04 - 2015-12-17 01:02 - 00000000 ____D C:\Program Files (x86)\Google 2015-12-16 23:04 - 2015-12-17 01:00 - 00000000 ____D C:\Users\Adam\AppData\Local\Google 2015-12-16 23:04 - 2015-12-16 23:03 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2015-12-16 23:04 - 2015-12-16 23:00 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2015-12-16 23:01 - 2015-12-17 01:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2015-12-16 23:01 - 2015-12-16 23:06 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-12-16 23:01 - 2015-12-16 23:01 - 00001978 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk 2015-12-16 23:01 - 2015-12-16 23:01 - 00000000 ____D C:\Users\Adam\AppData\Roaming\AVAST Software 2015-12-16 23:01 - 2015-12-16 23:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-12-16 23:01 - 2015-12-16 23:01 - 00000000 ____D C:\Program Files\Common Files\AV 2015-12-16 23:01 - 2015-12-16 23:00 - 01055560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00450504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2015-12-16 23:01 - 2015-12-16 23:00 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2015-12-16 23:00 - 2015-12-16 23:00 - 00466400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys 2015-12-16 23:00 - 2015-12-16 23:00 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2015-12-16 22:58 - 2015-12-16 23:03 - 00000000 ____D C:\Program Files\AVAST Software 2015-12-16 22:57 - 2015-12-16 23:03 - 00000000 ____D C:\ProgramData\AVAST Software 2015-12-16 22:56 - 2015-12-16 22:57 - 05037264 _____ (AVAST Software) C:\Users\Adam\Downloads\avast_internet_security_setup_online.exe 2015-12-16 17:02 - 2015-12-17 09:23 - 01466680 _____ C:\WINDOWS\ProcessedPackets.KTL 2015-12-16 16:55 - 2015-12-16 16:55 - 01740288 _____ C:\Users\Adam\Downloads\adwcleaner_5.025.exe 2015-12-16 15:10 - 2015-12-16 16:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-16 13:53 - 2015-12-16 16:43 - 00000000 ____D C:\WINDOWS\Minidump 2015-12-16 13:53 - 2015-12-16 13:53 - 634798311 _____ C:\WINDOWS\MEMORY.DMP 2015-12-16 13:51 - 2015-12-16 14:18 - 02370048 _____ (Farbar) C:\Users\Adam\Downloads\FRST64.exe 2015-12-16 13:50 - 2015-12-16 13:58 - 00602112 _____ (OldTimer Tools) C:\Users\Adam\Downloads\OTL_[www.programosy.pl].exe 2015-12-16 13:35 - 2015-12-16 13:35 - 00000000 ____D C:\WINDOWS\system32\big 2015-12-16 11:00 - 2015-12-16 11:00 - 00000000 ____D C:\Users\Adam\AppData\Local\Tempfolder 2015-12-16 10:59 - 2015-12-16 13:34 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Company 2015-12-16 10:45 - 2015-12-16 10:43 - 00000895 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2015-12-12 15:32 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-12-12 15:32 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-12-12 15:32 - 2015-11-24 12:07 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-12-12 15:32 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-12-12 15:32 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-12-12 15:32 - 2015-11-24 11:03 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-12-12 15:32 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2015-12-12 15:32 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-12-12 15:32 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2015-12-12 15:32 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-12-12 15:32 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-12-12 15:32 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-12-12 15:32 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-12-12 15:32 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-12-12 15:32 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2015-12-12 15:32 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 09:27 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-12-12 15:32 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-12-12 15:32 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-12-12 15:32 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-12-12 15:32 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-12-12 15:32 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-12-12 15:32 - 2015-11-24 08:25 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-12-12 15:32 - 2015-11-24 08:09 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-12-12 15:32 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-12-12 15:32 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-12-10 12:59 - 2015-12-10 12:59 - 00000000 ___RD C:\Users\Adam\3D Objects 2015-12-08 22:29 - 2015-12-08 22:29 - 09498816 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2015-12-04 12:01 - 2015-12-17 09:23 - 00101444 _____ C:\WINDOWS\Control.KTL 2015-12-04 01:21 - 2015-12-08 15:50 - 00000000 ____D C:\Users\Adam\Desktop\TM 2015-12-03 09:26 - 2015-11-22 11:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-12-03 09:26 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2015-12-03 09:26 - 2015-11-22 10:52 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2015-12-03 09:26 - 2015-11-22 10:42 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-12-03 09:26 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-12-03 09:26 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-12-03 09:26 - 2015-11-22 10:33 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-12-03 09:26 - 2015-11-22 10:24 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-12-03 09:25 - 2015-11-22 11:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-12-03 09:25 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2015-12-03 09:25 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2015-12-03 09:25 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2015-12-03 09:25 - 2015-11-22 11:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-12-03 09:25 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-12-03 09:25 - 2015-11-22 11:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-12-03 09:25 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2015-12-03 09:25 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2015-12-03 09:25 - 2015-11-22 11:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-12-03 09:25 - 2015-11-22 11:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2015-12-03 09:25 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2015-12-03 09:25 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2015-12-03 09:25 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-12-03 09:25 - 2015-11-22 10:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2015-12-03 09:25 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2015-12-03 09:25 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2015-12-03 09:25 - 2015-11-22 10:47 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-12-03 09:25 - 2015-11-22 10:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-12-03 09:25 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-12-03 09:25 - 2015-11-22 10:44 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2015-12-03 09:25 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-12-03 09:25 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2015-12-03 09:25 - 2015-11-22 10:41 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-12-03 09:25 - 2015-11-22 10:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2015-12-03 09:25 - 2015-11-22 10:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-12-03 09:25 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-12-03 09:25 - 2015-11-22 10:30 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-12-03 09:25 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-12-03 09:25 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-12-03 09:25 - 2015-11-22 10:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2015-12-03 09:25 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2015-12-03 09:25 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-12-03 09:25 - 2015-11-22 10:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2015-12-03 09:25 - 2015-11-22 10:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-12-03 09:25 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2015-12-03 09:25 - 2015-11-22 10:19 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-12-03 09:25 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-12-03 09:25 - 2015-11-22 10:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-12-03 09:25 - 2015-11-22 10:16 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2015-12-03 09:25 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2015-12-03 09:24 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2015-12-03 09:24 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2015-12-03 09:24 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2015-12-03 09:24 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2015-12-03 09:24 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2015-12-03 09:24 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2015-12-03 09:24 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2015-12-03 09:24 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2015-12-03 09:24 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2015-12-03 09:24 - 2015-11-22 10:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2015-12-03 09:24 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2015-12-03 09:24 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2015-12-01 10:59 - 2015-12-13 09:23 - 00001892 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk 2015-12-01 10:59 - 2015-12-13 09:23 - 00000000 ____D C:\Users\Adam\AppData\Local\Downloaded Installations 2015-12-01 10:59 - 2015-12-01 10:59 - 00000000 ____D C:\Users\Adam\REACHit 2015-11-25 10:33 - 2015-11-21 07:21 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 07:02 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-11-25 10:33 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2015-11-25 10:33 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2015-11-25 10:33 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2015-11-24 10:18 - 2015-11-24 10:18 - 00000000 ____D C:\Users\Adam\AppData\Local\ElevatedDiagnostics 2015-11-21 09:42 - 2015-11-21 09:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-11-19 14:52 - 2015-11-19 14:52 - 00000000 ____D C:\Users\Adam\AppData\Local\ActiveSync 2015-11-19 14:49 - 2015-11-19 14:49 - 00000020 ___SH C:\Users\Adam\ntuser.ini 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Szablony 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Menu Start 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2015-11-19 14:47 - 2015-11-19 14:47 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2015-11-19 14:42 - 2015-12-17 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-11-19 14:34 - 2015-11-19 14:34 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default\AppData\Local\Pokki 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2015-11-19 14:34 - 2015-11-19 14:34 - 00000000 ____D C:\Users\Default User\AppData\Local\Pokki 2015-11-19 14:29 - 2015-11-19 14:35 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2015-11-19 14:28 - 2015-12-16 15:17 - 00000000 ____D C:\Users\Adam 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Ustawienia lokalne 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Szablony 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Moje dokumenty 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Menu Start 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje wideo 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moje obrazy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Documents\Moja muzyka 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\Dane aplikacji 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Historia 2015-11-19 14:28 - 2015-11-19 14:28 - 00000000 _SHDL C:\Users\Adam\AppData\Local\Dane aplikacji 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2015-11-19 14:25 - 2015-11-19 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant 2015-11-19 14:24 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Conexant 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2015-11-19 14:24 - 2015-11-19 14:24 - 00000000 ____D C:\Program Files\Dolby Digital Plus 2015-11-19 14:24 - 2015-04-18 10:26 - 00427224 _____ (Conexant Systems, Inc.) C:\WINDOWS\SysWOW64\SASrv.exe 2015-11-19 14:24 - 2014-11-26 11:01 - 00004664 _____ C:\WINDOWS\system32\Drivers\CxSfPt.dat 2015-11-19 14:24 - 2013-07-31 18:41 - 00002832 _____ C:\WINDOWS\system32\Drivers\SamSfPa.dat 2015-11-19 14:24 - 2013-07-25 14:39 - 00206552 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe 2015-11-19 14:23 - 2015-12-17 09:06 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-11-19 14:23 - 2015-12-11 15:35 - 00000000 ____D C:\ProgramData\Lenovo 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Synaptics 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\Intel 2015-11-19 14:23 - 2015-11-19 14:30 - 00000000 ____D C:\Program Files\CONEXANT 2015-11-19 14:23 - 2015-11-19 14:23 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-11-19 14:23 - 2015-11-19 14:23 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2015-11-19 14:23 - 2015-07-17 22:58 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2015-11-19 14:23 - 2015-07-17 22:58 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2015-11-19 14:22 - 2015-12-17 00:55 - 00000000 ____D C:\ProgramData\Validity 2015-11-19 14:22 - 2015-11-19 14:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf 2015-11-19 14:21 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-11-19 14:18 - 2015-12-13 01:00 - 00369400 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-11-19 14:17 - 2015-11-19 18:39 - 00000000 ___DC C:\WINDOWS\Panther 2015-11-19 14:12 - 2015-11-19 14:12 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2015-11-19 14:12 - 2015-11-19 14:12 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2015-11-19 14:12 - 2015-11-19 14:12 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2015-11-19 14:12 - 2015-11-19 14:12 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2015-11-19 14:12 - 2015-11-19 14:12 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2015-11-19 14:03 - 2015-11-19 14:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files\MSBuild 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-11-19 14:00 - 2015-11-19 14:00 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-11-19 14:00 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-11-19 14:00 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-11-19 14:00 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00593624 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtkBtfilter.sys 2015-11-19 13:22 - 2015-11-19 13:22 - 00050928 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00050876 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00049088 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048276 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00048192 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00045868 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00040516 _____ C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll 2015-11-19 13:22 - 2015-11-19 13:22 - 00033620 _____ C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2015-11-17 12:21 - 2015-11-19 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-17 09:56 - 2015-11-08 23:08 - 00000000 ____D C:\FRST 2015-12-17 09:23 - 2015-10-30 07:28 - 00000000 ____D C:\Windows 2015-12-17 09:23 - 2015-10-22 15:06 - 05760224 _____ C:\WINDOWS\NGIPacket.KTL 2015-12-17 09:23 - 2015-10-22 15:06 - 00288103 _____ C:\WINDOWS\SentOSPackets.KTL 2015-12-17 09:23 - 2015-08-06 09:27 - 00290492 _____ C:\WINDOWS\NGIControl.KTL 2015-12-17 09:11 - 2014-07-17 17:41 - 00000000 __RDO C:\Users\Adam\SkyDrive 2015-12-17 09:06 - 2015-08-06 09:07 - 00000000 __SHD C:\Users\Adam\IntelGraphicsProfiles 2015-12-17 00:55 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-17 00:55 - 2014-05-16 10:25 - 00000000 ____D C:\ProgramData\Norton 2015-12-16 23:43 - 2014-11-26 23:46 - 00000000 ____D C:\Users\Adam\AppData\LocalLow\Temp 2015-12-16 23:40 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-16 23:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-16 23:08 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2015-12-16 23:08 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-12-16 23:01 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2015-12-16 22:47 - 2015-04-19 11:56 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Skype 2015-12-16 22:23 - 2015-02-04 18:35 - 00000000 ____D C:\Users\Adam\AppData\Roaming\OpenOffice.org2 2015-12-16 22:20 - 2015-11-08 22:13 - 00000000 ____D C:\AdwCleaner 2015-12-16 16:52 - 2015-02-04 18:15 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-16 16:50 - 2015-10-30 20:19 - 00818302 _____ C:\WINDOWS\system32\perfh015.dat 2015-12-16 16:50 - 2015-10-30 20:19 - 00157970 _____ C:\WINDOWS\system32\perfc015.dat 2015-12-16 16:50 - 2015-08-06 08:51 - 01845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-16 16:35 - 2014-07-17 23:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-16 13:39 - 2014-05-16 10:14 - 833163264 ___SH C:\WINDOWS\lenovo_fastboot.img 2015-12-16 13:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\System 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Users\Adam\AppData\Local\NP3 2015-12-16 12:17 - 2015-10-09 23:50 - 00000000 ____D C:\Program Files (x86)\Neuro-Programmer 3 2015-12-16 08:58 - 2014-07-17 22:49 - 00004202 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8E1D0878-E5DB-4924-BDA0-3028CE274BD3} 2015-12-14 00:44 - 2015-03-22 01:41 - 00000000 ____D C:\Users\Adam\AppData\Local\Adobe 2015-12-13 09:23 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2015-12-12 19:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-12-12 16:43 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-12 16:43 - 2014-07-18 11:07 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-12-12 16:39 - 2014-07-18 11:07 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-12-12 04:30 - 2015-08-06 09:10 - 00002449 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-09 16:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2015-12-09 04:39 - 2014-08-17 11:14 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-12-07 16:35 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-12-04 01:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-12-01 11:02 - 2015-08-05 16:47 - 00001944 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk 2015-12-01 11:02 - 2014-07-17 23:06 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-12-01 10:59 - 2014-07-17 21:52 - 00000000 ____D C:\Users\Adam\AppData\Local\Lenovo 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2015-12-01 10:59 - 2014-05-16 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2015-12-01 10:59 - 2014-05-16 09:42 - 00000000 ____D C:\Program Files (x86)\Lenovo 2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-30 16:03 - 2015-10-30 20:20 - 00000000 ____D C:\WINDOWS\OCR 2015-11-27 00:15 - 2015-06-01 16:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-11-24 23:28 - 2015-04-19 11:55 - 00000000 ____D C:\ProgramData\Skype 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-11-24 11:48 - 2015-02-04 18:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-11-20 11:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat 2015-11-20 02:06 - 2015-08-06 09:07 - 00000000 ____D C:\Users\Adam\AppData\Local\Comms 2015-11-19 15:09 - 2014-07-17 21:51 - 00000000 ____D C:\Users\Adam\AppData\Local\Packages 2015-11-19 15:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-11-19 14:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-11-19 14:49 - 2014-07-17 21:49 - 00000000 __RHD C:\Users\Public\AccountPictures 2015-11-19 14:47 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagwrn.xml 2015-11-19 14:47 - 2015-08-06 07:48 - 00019053 _____ C:\WINDOWS\diagerr.xml 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-11-19 14:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2015-11-19 14:42 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries 2015-11-19 14:42 - 2015-08-06 08:57 - 00023140 _____ C:\WINDOWS\system32\emptyregdb.dat 2015-11-19 14:42 - 2015-06-01 16:50 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-11-19 14:42 - 2014-07-17 21:58 - 00002874 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-1001 2015-11-19 14:42 - 2014-05-16 10:28 - 00002048 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements 2015-11-19 14:42 - 2014-05-16 10:26 - 00001934 _____ C:\WINDOWS\System32\Tasks\PMTask 2015-11-19 14:42 - 2014-05-16 10:22 - 00002048 _____ C:\WINDOWS\System32\Tasks\StartPowerDVDService 2015-11-19 14:42 - 2014-05-16 10:19 - 00002340 _____ C:\WINDOWS\System32\Tasks\CLMLSvc 2015-11-19 14:42 - 2014-05-16 09:26 - 00002314 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395553583-66053808-1738365731-500 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ModemLogs 2015-11-19 14:35 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-11-19 14:35 - 2015-02-19 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VT Niemiecki Kurs podstawowy mp3 2015-11-19 14:35 - 2015-02-09 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager 2015-11-19 14:35 - 2015-02-04 17:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 2.4 2015-11-19 14:35 - 2014-09-24 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-11-19 14:35 - 2014-09-20 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandizip 2015-11-19 14:35 - 2014-09-06 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-11-19 14:35 - 2014-05-16 10:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2015-11-19 14:35 - 2014-05-16 10:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3 2015-11-19 14:35 - 2014-05-16 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2015-11-19 14:34 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-11-19 14:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-11-19 14:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate 2015-11-19 14:30 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-11-19 14:30 - 2014-07-18 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LenovoEMC 2015-11-19 14:30 - 2014-05-16 10:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10 2015-11-19 14:30 - 2014-05-16 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-11-19 14:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS 2015-11-19 14:27 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-11-19 14:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-11-19 14:18 - 2015-10-30 20:30 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2015-11-19 14:17 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-11-19 14:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-11-19 14:12 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-11-19 14:09 - 2015-10-30 20:23 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-11-19 14:09 - 2015-10-30 20:19 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-11-19 14:09 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-11-19 14:09 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\servicing 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-11-19 14:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-11-17 12:21 - 2015-04-19 11:56 - 00000000 ___RD C:\Program Files (x86)\Skype ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-03-21 15:22 - 2015-08-06 07:47 - 0333528 _____ () C:\Users\Adam\AppData\Local\BTServer.log 2014-07-17 21:52 - 2014-07-17 19:58 - 0000193 _____ () C:\Users\Adam\AppData\Local\RegisteredPackageInformation.xml 2014-07-18 22:48 - 2015-10-22 18:43 - 0007637 _____ () C:\Users\Adam\AppData\Local\Resmon.ResmonCfg 2015-11-19 14:24 - 2015-11-19 14:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-05-16 10:21 - 2014-05-16 10:21 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log 2014-05-16 10:18 - 2014-05-16 10:19 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2014-05-16 10:19 - 2014-05-16 10:20 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log 2014-05-16 10:20 - 2014-05-16 10:21 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log Niektóre pliki w TEMP: ==================== C:\Users\Adam\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-16 22:14 ==================== Koniec FRST.txt ============================

**Posty:** 4765 · przez **ordynat** 17 Gru 2015, 11:11

Ja w tych logach nie widzę niczego podejrzanego.
.

Autor postu otrzymał pochwałę

**Posty:** 271 · przez **Sythev** 17 Gru 2015, 12:12

To znaczy,że już udało się ogarnąc wszystko

Dzieki wielkie za pomoc i przestroga przed sciaganiem w internetu programów..
Dziwie się tylko,że na PROGRAMOSY ktoś wrzucił paczkę do pobierania z wirusami.
Dokładnie to -> MP3 Knife
http://www.programosy.pl/program,mp3-knife.html
tutaj był ten wirus,wiec jak ktoś może to zgłośić najlepiej,zeby ktoś inny się nie wkopał. :evil:

Kto jest na forum