Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 28-05-2017 Uruchomiony przez Prezes (administrator) DESKTOP-8PIETUM (28-05-2017 19:53:19) Uruchomiony z C:\Users\dom\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads Załadowane profile: Prezes (Dostępne profile: Prezes) Platform: Windows 10 Pro Wersja 1703 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-28] (AVAST Software) HKU\S-1-5-21-3235144574-3153595074-2864541245-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9773272 2017-05-19] (Piriform Ltd) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-28] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 Tcpip\..\Interfaces\{40ba2aad-b903-4df4-b9d3-0b5a7887aad5}: [DhcpNameServer] 192.168.8.1 Internet Explorer: ================== ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-28] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-28] (AVAST Software) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-04-20] (NVIDIA Corporation) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-28] (AVAST Software s.r.o.) S3 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-28] (AVAST Software s.r.o.) S3 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-28] (AVAST Software s.r.o.) S3 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-28] (AVAST Software s.r.o.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-28] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-28] (AVAST Software) S3 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-28] (AVAST Software) S0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-28] (AVAST Software) S3 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-28] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-28] (AVAST Software) S3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-28] (AVAST Software) S3 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-28] (AVAST Software) S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_274d0ab8ee30c459\nvlddmkm.sys [14847088 2017-04-21] (NVIDIA Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [43888 2017-05-12] (SteelSeries ApS) R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS) S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64640 2016-09-05] (QUALCOMM Incorporated) S3 t_mouse.sys; C:\WINDOWS\System32\drivers\t_mouse.sys [6144 2013-04-09] () S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) U3 aswbdisk; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-05-28 19:53 - 2017-05-28 19:53 - 00000000 ____D C:\FRST 2017-05-28 19:31 - 2017-05-28 19:31 - 00000000 ____D C:\ProgramData\SWCUTemp 2017-05-28 19:30 - 2017-05-28 19:30 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2017-05-28 19:30 - 2017-05-28 19:30 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2017-05-28 19:30 - 2017-05-28 19:30 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2017-05-28 19:30 - 2017-05-28 19:30 - 00001974 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2017-05-28 19:30 - 2017-05-28 19:30 - 00000000 ____D C:\Users\dom\AppData\Roaming\AVAST Software 2017-05-28 19:30 - 2017-05-28 19:29 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00158368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.149599262125002 2017-05-28 19:30 - 2017-05-28 19:29 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys 2017-05-28 19:30 - 2017-05-28 19:29 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-05-28 19:29 - 2017-05-28 19:29 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2017-05-28 19:28 - 2017-05-28 19:28 - 00000000 ____D C:\Program Files\AVAST Software 2017-05-28 19:27 - 2017-05-28 19:27 - 00000000 ____D C:\ProgramData\AVAST Software 2017-05-28 19:09 - 2017-05-28 19:09 - 00000000 ____D C:\Users\dom\AppData\Local\ElevatedDiagnostics 2017-05-28 12:52 - 2017-05-28 18:11 - 00000000 ____D C:\Users\dom\AppData\Roaming\TS3Client 2017-05-28 12:52 - 2017-05-28 12:52 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-28 12:51 - 2017-05-28 12:51 - 00001285 _____ C:\Users\dom\Desktop\TeamSpeak 3 Client.lnk 2017-05-28 12:51 - 2017-05-28 12:51 - 00001243 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2017-05-28 12:51 - 2017-05-28 12:51 - 00000000 ____D C:\Users\dom\AppData\Local\TeamSpeak 3 Client 2017-05-28 11:26 - 2017-05-28 11:26 - 00000000 ____D C:\Users\dom\AppData\Local\PeerDistRepub 2017-05-27 14:00 - 2017-05-27 13:54 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-05-27 13:59 - 2017-05-27 14:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-05-27 13:59 - 2017-05-27 13:59 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-05-27 11:48 - 2017-05-27 11:48 - 09551280 _____ (Piriform Ltd) C:\Users\dom\Downloads\ccsetup530.exe 2017-05-27 11:48 - 2017-05-27 11:48 - 00002872 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-05-27 11:48 - 2017-05-27 11:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-05-27 11:48 - 2017-05-27 11:48 - 00000000 ____D C:\Program Files\CCleaner 2017-05-27 10:57 - 2017-05-27 10:57 - 00000000 ____D C:\WINDOWS\pss 2017-05-27 10:53 - 2017-05-27 10:53 - 00000000 ____D C:\WINDOWS\InfusedApps 2017-05-27 10:52 - 2017-05-27 10:53 - 00000000 ____D C:\Windows.old 2017-05-27 10:52 - 2017-05-27 10:52 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-05-27 10:52 - 2017-05-27 09:54 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-05-27 10:51 - 2017-05-27 10:51 - 00000000 ____D C:\WINDOWS\Setup 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\WINDOWS\OCR 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\Program Files\MSBuild 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-05-27 10:50 - 2017-05-27 10:50 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-05-27 10:49 - 2017-05-28 08:03 - 00852014 _____ C:\WINDOWS\system32\perfh015.dat 2017-05-27 10:49 - 2017-05-28 08:03 - 00168258 _____ C:\WINDOWS\system32\perfc015.dat 2017-05-27 10:49 - 2017-05-27 10:48 - 00343212 _____ C:\WINDOWS\system32\perfi015.dat 2017-05-27 10:49 - 2017-05-27 10:48 - 00041370 _____ C:\WINDOWS\system32\perfd015.dat 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\pl 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\winrm 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\WCN 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\slmgr 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\pl 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\0409 2017-05-27 10:48 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\DigitalLocker 2017-05-27 10:46 - 2017-04-29 03:05 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-05-27 10:46 - 2017-04-29 03:05 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-27 10:43 - 2017-05-27 10:53 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-05-27 10:43 - 2017-05-27 10:40 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2017-05-27 10:43 - 2017-05-27 10:40 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2017-05-27 10:43 - 2017-05-27 10:40 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2017-05-27 10:43 - 2017-05-27 10:40 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2017-05-27 10:43 - 2017-05-27 10:40 - 00027136 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll 2017-05-27 10:43 - 2017-05-27 10:40 - 00017635 _____ C:\WINDOWS\system32\Drivers\etc\services 2017-05-27 10:43 - 2017-05-27 10:40 - 00015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-05-27 10:43 - 2017-05-27 10:40 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK 2017-05-27 10:43 - 2017-05-27 10:40 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2017-05-27 10:43 - 2017-05-27 10:40 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2017-05-27 10:43 - 2017-05-27 10:40 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2017-05-27 10:43 - 2017-05-27 10:40 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2017-05-27 10:43 - 2017-05-27 10:40 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2017-05-27 10:43 - 2017-05-27 10:40 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2017-05-27 10:42 - 2017-05-28 15:39 - 00000000 ___HD C:\Program Files\WindowsApps 2017-05-27 10:42 - 2017-05-28 08:11 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-05-27 10:42 - 2017-05-28 07:59 - 00000000 ____D C:\WINDOWS\appcompat 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-05-27 10:42 - 2017-05-28 00:04 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-05-27 10:42 - 2017-05-28 00:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-05-27 10:42 - 2017-05-27 10:50 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-05-27 10:42 - 2017-05-27 10:50 - 00000000 ____D C:\WINDOWS\SystemApps 2017-05-27 10:42 - 2017-05-27 10:50 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ___RD C:\Program Files\Windows Defender 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\setup 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\system32\Com 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\IME 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\Program Files\Common Files\System 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-05-27 10:42 - 2017-05-27 10:48 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ___SD C:\WINDOWS\system32\Nui 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ___SD C:\WINDOWS\system32\AppV 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\icsxml 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\ias 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\downlevel 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\DDFs 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2017-05-27 10:42 - 2017-05-27 10:43 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 __SHD C:\Program Files\Windows Sidebar 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 __RSD C:\WINDOWS\Media 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Web 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Vss 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\tracing 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\TAPI 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SystemResources 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\winevt 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\ras 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\IME 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\Hydrogen 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\System 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SKB 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\security 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\schemas 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\SchCache 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Resources 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\RemotePackages 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Registration 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\PLA 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Performance 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\L2Schemas 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\InputMethod 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Globalization 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Cursors 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\Branding 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\addins 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\ProgramData\WindowsHolographicDevices 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files\Windows Security 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files\Windows Portable Devices 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files\Common Files\Services 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files (x86)\Windows NT 2017-05-27 10:42 - 2017-05-27 10:42 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2017-05-27 10:42 - 2017-05-27 10:40 - 00000219 _____ C:\WINDOWS\system.ini 2017-05-27 10:42 - 2017-05-27 10:40 - 00000092 _____ C:\WINDOWS\win.ini 2017-05-27 10:42 - 2017-05-27 10:15 - 00000000 ____D C:\ProgramData\USOPrivate 2017-05-27 10:42 - 2017-05-27 10:10 - 00000000 ____D C:\WINDOWS\rescache 2017-05-27 10:42 - 2017-05-27 10:09 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-05-27 10:42 - 2017-05-27 10:08 - 00000000 ____D C:\Program Files\Windows NT 2017-05-27 10:42 - 2017-05-27 10:07 - 00000000 ____D C:\WINDOWS\system32\spool 2017-05-27 10:42 - 2017-05-27 10:07 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2017-05-27 10:42 - 2017-05-27 10:06 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-27 10:42 - 2017-05-27 10:06 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-05-27 10:42 - 2017-05-27 10:03 - 00000000 ____D C:\WINDOWS\CSC 2017-05-27 10:42 - 2017-05-27 10:02 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-05-27 10:42 - 2017-05-27 09:59 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-05-27 10:42 - 2017-05-27 09:59 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-05-27 10:42 - 2017-05-27 09:59 - 00000000 ____D C:\WINDOWS\HoloShell 2017-05-27 10:42 - 2017-05-27 09:58 - 00000000 ____D C:\WINDOWS\Help 2017-05-27 10:41 - 2017-05-28 19:05 - 00000000 ____D C:\WINDOWS\INF 2017-05-27 10:34 - 2017-05-27 13:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-05-27 10:31 - 2017-05-28 00:05 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-05-27 10:31 - 2017-05-27 11:49 - 00000000 ____D C:\WINDOWS\Panther 2017-05-27 10:31 - 2017-05-27 10:48 - 00000000 ____D C:\WINDOWS\servicing 2017-05-27 10:31 - 2017-05-27 10:42 - 00000000 ____D C:\WINDOWS\system32\SMI 2017-05-27 10:31 - 2017-05-27 10:07 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-05-27 10:30 - 2017-05-27 10:47 - 00000891 _____ C:\Users\Public\Desktop\League of Legends.lnk 2017-05-27 10:30 - 2017-05-27 10:09 - 00000000 ____D C:\$Windows.~BT 2017-05-27 10:30 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2017-05-27 10:30 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2017-05-27 10:30 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2017-05-27 10:30 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2017-05-27 10:30 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2017-05-27 10:29 - 2017-05-27 10:31 - 00000000 ____D C:\Users\dom\AppData\Roaming\Riot Games 2017-05-27 10:26 - 2017-05-27 10:26 - 00000000 ____D C:\Users\dom\AppData\Local\Comms 2017-05-27 10:17 - 2017-05-27 10:17 - 00000000 ____D C:\Users\dom\AppData\Local\CEF 2017-05-27 10:17 - 2017-05-27 10:17 - 00000000 ____D C:\ProgramData\Riot Games 2017-05-27 10:15 - 2017-05-27 10:15 - 00000000 ____D C:\ProgramData\USOShared 2017-05-27 10:12 - 2017-05-27 10:12 - 00003292 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-05-27 10:12 - 2017-05-27 10:12 - 00002412 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-05-27 10:12 - 2017-05-27 10:12 - 00000279 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz.lnk 2017-05-27 10:12 - 2017-05-27 10:12 - 00000000 ____D C:\Users\dom\AppData\Local\MicrosoftEdge 2017-05-27 10:11 - 2017-05-27 10:11 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-05-27 10:10 - 2017-05-28 08:03 - 01918772 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-05-27 10:10 - 2017-05-27 10:10 - 00000000 ____D C:\Users\dom\AppData\Local\Publishers 2017-05-27 10:09 - 2017-05-27 11:51 - 00000000 ____D C:\Users\dom\AppData\Local\Packages 2017-05-27 10:09 - 2017-05-27 10:09 - 00000020 ___SH C:\Users\dom\ntuser.ini 2017-05-27 10:09 - 2017-05-27 10:09 - 00000000 ____D C:\Users\dom\AppData\Roaming\Adobe 2017-05-27 10:09 - 2017-05-27 10:09 - 00000000 ____D C:\Users\dom\AppData\Local\VirtualStore 2017-05-27 10:09 - 2017-05-27 10:09 - 00000000 ____D C:\Users\dom\AppData\Local\TileDataLayer 2017-05-27 10:09 - 2017-05-27 10:09 - 00000000 ____D C:\Users\dom\AppData\Local\ConnectedDevicesPlatform 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\Default User 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\Users\All Users 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Szablony 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Pulpit 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Menu Start 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Dokumenty 2017-05-27 10:08 - 2017-05-27 10:08 - 00000000 _SHDL C:\ProgramData\Dane aplikacji 2017-05-27 10:07 - 2017-05-28 07:56 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-05-27 10:06 - 2017-05-27 10:06 - 00012640 _____ C:\Users\dom\Desktop\Usunięte aplikacje.html 2017-05-27 10:03 - 2017-05-28 19:14 - 00000000 ____D C:\Users\dom 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Ustawienia lokalne 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Szablony 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Moje dokumenty 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Menu Start 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Documents\Moje wideo 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Documents\Moje obrazy 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Documents\Moja muzyka 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\Dane aplikacji 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\AppData\Local\Historia 2017-05-27 10:03 - 2017-05-27 10:03 - 00000000 _SHDL C:\Users\dom\AppData\Local\Dane aplikacji 2017-05-27 09:58 - 2017-05-28 19:14 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-27 09:58 - 2017-05-27 09:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-05-27 09:58 - 2017-05-27 09:58 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-05-27 09:58 - 2017-05-27 09:58 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-05-27 09:58 - 2017-04-20 02:45 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-05-27 09:58 - 2017-04-20 02:44 - 06437312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 02479736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 01762936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 00548472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 00082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-05-27 09:58 - 2017-04-20 02:44 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-05-27 09:58 - 2017-04-20 00:29 - 07915387 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-05-27 09:57 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-05-27 09:54 - 2017-05-28 15:16 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-05-27 09:54 - 2017-05-28 07:57 - 00218768 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-05-27 09:14 - 2017-05-27 10:53 - 00000000 ___HD C:\$SysReset 2017-05-25 22:16 - 2017-05-26 15:06 - 00000000 ____D C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dr Prot Antivirus 2017-05-25 22:10 - 2017-05-25 22:10 - 00000000 ___RD C:\Users\dom\3D Objects 2017-05-25 22:06 - 2017-05-27 08:10 - 00000000 ____D C:\Users\dom\Documents\temp 2017-05-25 14:04 - 2017-05-25 14:04 - 00000000 _____ C:\autoexec.bat 2017-05-23 21:11 - 2017-05-28 00:03 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-05-23 21:11 - 2017-05-23 21:11 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-05-23 21:11 - 2017-05-23 21:11 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-05-23 21:11 - 2017-05-23 21:11 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-05-23 21:11 - 2017-05-23 21:11 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-05-23 21:11 - 2017-05-23 21:11 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-05-23 21:11 - 2017-05-23 21:11 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-05-23 21:11 - 2017-05-23 21:11 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-05-23 21:11 - 2017-05-23 21:11 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-05-23 21:11 - 2017-05-23 21:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-05-23 21:11 - 2017-05-23 21:11 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2017-05-23 21:11 - 2017-05-23 21:11 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-05-23 21:04 - 2017-05-23 21:04 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-05-23 21:04 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-05-23 21:04 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-23 21:04 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-05-23 21:04 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-05-23 21:04 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-23 21:04 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-05-12 20:48 - 2017-05-12 20:48 - 01804672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll 2017-05-12 20:48 - 2017-05-12 20:48 - 00045896 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys 2017-05-12 20:48 - 2017-05-12 20:48 - 00043888 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\ssbthid.sys ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-05-28 07:58 - 2017-02-22 14:12 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-05-27 10:12 - 2017-02-22 14:13 - 00000000 ___RD C:\Users\dom\OneDrive 2017-05-27 10:06 - 2017-03-14 23:51 - 00000000 ____D C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-05-27 09:54 ==================== Koniec FRST.txt ============================