OTL logfile created on: 2017-12-05 19:30:01 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Toshiba\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.18837) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 5,48 Gb Total Physical Memory | 3,16 Gb Available Physical Memory | 57,67% Memory free 10,95 Gb Paging File | 8,58 Gb Available in Paging File | 78,39% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 297,71 Gb Total Space | 138,69 Gb Free Space | 46,59% Space Free | Partition Type: NTFS Drive D: | 298,08 Gb Total Space | 257,88 Gb Free Space | 86,52% Space Free | Partition Type: NTFS Computer Name: TOSHIBA-TOSH | User Name: Toshiba | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2017-11-30 18:22:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Toshiba\Desktop\OTL (2).exe PRC - [2017-11-16 19:18:20 | 009,238,192 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2017-11-11 17:35:18 | 000,281,416 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2015-12-15 20:49:25 | 001,007,384 | ---- | M] (http://www.tinydm.com/) -- C:\Users\Toshiba\AppData\Local\DM\TinyDM.exe PRC - [2014-10-08 17:18:56 | 000,211,104 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2014-10-08 17:18:50 | 000,534,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe PRC - [2014-03-07 10:04:28 | 000,047,104 | ---- | M] () -- C:\Program Files (x86)\SoundPLAN 7.3\SPUpdateService.exe PRC - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe PRC - [2007-04-04 15:34:52 | 000,180,224 | ---- | M] () -- C:\ProgramData\RbtProt\sgsrv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2017-11-11 17:35:23 | 000,244,584 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\tasks_core.dll MOD - [2017-11-11 17:35:22 | 000,237,808 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll MOD - [2017-11-11 17:35:19 | 000,167,096 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll MOD - [2017-11-11 17:35:18 | 000,059,040 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\module_lifetime.dll MOD - [2017-11-11 17:35:01 | 000,235,816 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll MOD - [2017-08-06 10:01:19 | 067,109,376 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2017-11-11 17:35:18 | 000,281,416 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2017-11-11 17:35:06 | 007,549,928 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe -- (aswbIDSAgent) SRV:[b]64bit:[/b] - [2017-10-14 09:01:18 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2016-08-22 17:19:43 | 001,386,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\sysnative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2014-07-21 21:33:33 | 001,357,104 | ---- | M] (Flexera Software LLC) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2012-08-23 17:18:14 | 004,412,872 | ---- | M] (SafeNet Inc.) [On_Demand | Stopped] -- C:\Windows\sysnative\hasplms.exe -- (hasplms) SRV:[b]64bit:[/b] - [2011-11-10 22:59:52 | 000,204,288 | ---- | M] (AMD) [On_Demand | Stopped] -- C:\Windows\sysnative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2011-07-01 11:46:14 | 000,828,856 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv) SRV:[b]64bit:[/b] - [2011-04-07 13:59:32 | 000,294,328 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service) SRV:[b]64bit:[/b] - [2010-12-09 17:45:26 | 000,489,384 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV:[b]64bit:[/b] - [2010-12-08 15:42:54 | 000,137,632 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service) SRV:[b]64bit:[/b] - [2010-10-20 14:41:00 | 000,138,656 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Windows\sysnative\TODDSrv.exe -- (TODDSrv) SRV:[b]64bit:[/b] - [2010-09-22 17:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2017-11-29 20:31:09 | 000,272,384 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2017-04-21 13:53:36 | 000,107,656 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2017-03-23 01:52:28 | 001,590,560 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2015-02-18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2014-10-08 17:18:56 | 000,211,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2014-10-08 17:18:50 | 000,534,184 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2014-03-22 21:09:22 | 002,183,992 | ---- | M] (AVG) [On_Demand | Stopped] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2014-03-07 10:04:28 | 000,047,104 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SoundPLAN 7.3\SPUpdateService.exe -- (SPUpdService) SRV - [2013-12-18 10:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-02-10 08:25:36 | 000,112,080 | ---- | M] (Toshiba Europe GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService) SRV - [2010-11-29 14:58:30 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo) SRV - [2010-04-12 10:45:00 | 000,196,976 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2010-01-28 16:44:40 | 000,249,200 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service) SRV - [2007-04-04 15:34:52 | 000,180,224 | ---- | M] () [Auto | Running] -- C:\ProgramData\RbtProt\sgsrv.exe -- (SG_Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys -- (SBUpdd) DRV:[b]64bit:[/b] - [2017-11-16 19:18:22 | 000,455,376 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\sysnative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2017-11-11 17:35:50 | 000,203,976 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\sysnative\drivers\aswStm.sys -- (aswStm) DRV:[b]64bit:[/b] - [2017-11-11 17:35:49 | 000,364,464 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\sysnative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2017-11-11 17:35:48 | 000,183,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\sysnative\drivers\aswArPot.sys -- (aswArPot) DRV:[b]64bit:[/b] - [2017-11-11 17:35:48 | 000,148,288 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\sysnative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2017-11-11 17:35:48 | 000,110,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\sysnative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2017-11-11 17:35:48 | 000,084,416 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\sysnative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2017-11-11 17:35:48 | 000,047,008 | ---- | M] (AVAST Software) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\aswHwid.sys -- (aswHwid) DRV:[b]64bit:[/b] - [2017-11-11 17:35:11 | 001,026,232 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\sysnative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2017-11-11 17:35:00 | 000,343,288 | ---- | M] (AVAST Software s.r.o.) [File_System | Boot | Running] -- C:\Windows\sysnative\drivers\aswbloga.sys -- (aswblog) DRV:[b]64bit:[/b] - [2017-11-11 17:35:00 | 000,198,968 | ---- | M] (AVAST Software s.r.o.) [File_System | Boot | Running] -- C:\Windows\sysnative\drivers\aswbidsha.sys -- (aswbidsh) DRV:[b]64bit:[/b] - [2017-11-11 17:35:00 | 000,057,728 | ---- | M] (AVAST Software s.r.o.) [File_System | Boot | Running] -- C:\Windows\sysnative\drivers\aswbuniva.sys -- (aswbuniv) DRV:[b]64bit:[/b] - [2017-11-11 17:34:59 | 000,321,032 | ---- | M] (AVAST Software s.r.o.) [File_System | System | Running] -- C:\Windows\sysnative\drivers\aswbidsdrivera.sys -- (aswbidsdriver) DRV:[b]64bit:[/b] - [2014-11-26 03:53:22 | 000,162,136 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\sysnative\drivers\aksfridge.sys -- (aksfridge) DRV:[b]64bit:[/b] - [2014-10-08 17:18:54 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2014-10-08 17:18:54 | 000,029,352 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\sysnative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2014-10-08 17:18:54 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2014-10-08 17:18:50 | 000,766,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-11-11 01:23:50 | 010,496,512 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-11-10 22:20:44 | 000,326,656 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\sysnative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-02-23 11:03:42 | 000,291,120 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosrfbd.sys -- (tosrfbd) DRV:[b]64bit:[/b] - [2011-02-09 11:29:10 | 000,077,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2011-02-08 19:07:00 | 000,038,096 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\PGEffect.sys -- (PGEffect) DRV:[b]64bit:[/b] - [2011-02-03 19:59:06 | 001,413,680 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2011-01-27 15:27:04 | 000,067,384 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosrfusb.sys -- (Tosrfusb) DRV:[b]64bit:[/b] - [2011-01-27 12:34:12 | 001,577,088 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2010-12-17 19:46:46 | 002,675,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2010-12-01 16:12:06 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2010-11-30 14:40:04 | 000,307,304 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\rtsuvstor.sys -- (RSUSBVSTOR) DRV:[b]64bit:[/b] - [2010-11-29 11:47:00 | 000,082,224 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\sysnative\drivers\tosrfcom.sys -- (Tosrfcom) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-11-11 10:27:00 | 000,050,864 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosrfbnp.sys -- (tosrfbnp) DRV:[b]64bit:[/b] - [2010-10-18 14:14:02 | 000,042,096 | R--- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\btfilter.sys -- (BtFilter) DRV:[b]64bit:[/b] - [2010-09-24 07:46:32 | 000,116,752 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2010-08-30 10:48:00 | 000,094,528 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\Tosrfhid.sys -- (Tosrfhid) DRV:[b]64bit:[/b] - [2010-06-18 16:45:00 | 000,018,872 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosrfec.sys -- (tosrfec) DRV:[b]64bit:[/b] - [2010-04-26 11:48:00 | 000,063,488 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\TosRfSnd.sys -- (TosRfSnd) DRV:[b]64bit:[/b] - [2010-02-08 07:32:00 | 000,014,992 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\CVirtA64.sys -- (CVirtA) DRV:[b]64bit:[/b] - [2009-09-21 00:43:52 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\ss_mdm.sys -- (ss_mdm) DRV:[b]64bit:[/b] - [2009-09-21 00:43:52 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\ss_bus.sys -- (ss_bus) DRV:[b]64bit:[/b] - [2009-09-21 00:43:52 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\ss_mdfl.sys -- (ss_mdfl) DRV:[b]64bit:[/b] - [2009-07-30 20:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tdcmdpst.sys -- (tdcmdpst) DRV:[b]64bit:[/b] - [2009-07-24 11:33:00 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosrfnds.sys -- (tosrfnds) DRV:[b]64bit:[/b] - [2009-07-14 15:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\sysnative\drivers\TVALZ_O.SYS -- (TVALZ) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-19 19:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\sysnative\drivers\TVALZFL.sys -- (TVALZFL) DRV:[b]64bit:[/b] - [2009-06-17 12:01:00 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\tosporte.sys -- (tosporte) DRV:[b]64bit:[/b] - [2009-06-15 12:58:50 | 000,012,800 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\sysnative\drivers\QIOMem.sys -- (QIOMem) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\sysnative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008-11-16 17:39:44 | 000,157,968 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\sysnative\drivers\dne64x.sys -- (DNE) DRV - [2014-02-10 11:06:30 | 000,014,112 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {7F4EFF06-7032-458e-AE16-1C1D8255C28A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?pc=UE12&ocid=UE12DHP IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D6 50 DA EF 8D 51 D3 01 [binary data] IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 24 E0 C1 10 74 76 D2 01 [binary data] IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error. IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE11 IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TEUA_plPL503 IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [color=#E56717]========== FireFox ==========[/color] FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_44.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Toshiba\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Toshiba\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) [2013-08-22 10:25:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiicmmpkicnndkhlnnloilpgncbpkbjj\9.2_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.13.4_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmbhnokcfchfkdgechgkhcfekdfpdjld\1.4.3_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck\12.0.381_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\12.0.296_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\10.2.0.9950_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.3_0\ CHR - Extension: No name found = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6217.911.0.5_0\ O1 HOSTS File: ([2017-08-06 09:59:04 | 000,001,023 | ---- | M]) - C:\Windows\sysnative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 systweak.com O1 - Hosts: 127.0.0.1 www.systweak.com O1 - Hosts: 127.0.0.1 www.systweak.com/asov2 O1 - Hosts: 127.0.0.1 http://www.systweak.com O1 - Hosts: 127.0.0.1 http://www.systweak.com/asov2 O1 - Hosts: 74.125.43.104 www.youporn.com O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvLaunch.exe (AVAST Software) O4 - HKU\.DEFAULT..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-18..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA) O4 - HKU\S-1-5-21-2066538801-3335496502-2382231228-1000..\Run: [Tiny download manager] C:\Users\Toshiba\AppData\Local\DM\TinyDM.exe (http://www.tinydm.com/) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.10.10.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B013F3C1-E963-4EE7-8277-488DB7BB3430}: DhcpNameServer = 10.10.10.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\sysnative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2014-11-23 15:38:03 | 000,000,000 | -H-D | M] - C:\Autodesk -- [ NTFS ] O33 - MountPoints2\{09a6562f-80fb-11e4-ac67-047d7b6a529d}\Shell - "" = AutoRun O33 - MountPoints2\{09a6562f-80fb-11e4-ac67-047d7b6a529d}\Shell\AutoRun\command - "" = G:\LG_PC_Programs.exe O33 - MountPoints2\{91122636-707f-11e4-8b56-047d7b6a529d}\Shell - "" = AutoRun O33 - MountPoints2\{91122636-707f-11e4-8b56-047d7b6a529d}\Shell\AutoRun\command - "" = F:\SETUP.EXE O33 - MountPoints2\{91122636-707f-11e4-8b56-047d7b6a529d}\Shell\configure\command - "" = F:\SETUP.EXE O33 - MountPoints2\{91122636-707f-11e4-8b56-047d7b6a529d}\Shell\install\command - "" = F:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 360 Days ==========[/color] [2017-11-30 18:40:25 | 000,000,000 | ---D | C] -- C:\Nowy folder [2017-11-30 18:40:25 | 000,000,000 | ---D | C] -- \Nowy folder [2017-11-30 18:28:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack [2017-11-30 18:22:08 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Toshiba\Desktop\OTL (2).exe [2017-11-22 09:52:42 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\AVAST Software [2017-11-17 19:41:54 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Grupa Ĺ»ywiec Szczyrk 03.11.2017 [2017-11-15 20:47:15 | 005,979,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2017-11-15 20:47:11 | 014,635,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2017-11-15 20:47:09 | 011,410,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2017-11-15 20:47:09 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2017-11-15 20:47:09 | 000,662,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2017-11-15 20:47:07 | 001,549,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll [2017-11-15 20:47:07 | 000,995,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll [2017-11-15 20:47:07 | 000,922,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll [2017-11-15 20:47:06 | 002,319,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll [2017-11-15 20:47:05 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2017-11-15 20:47:05 | 002,058,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2017-11-15 20:47:05 | 002,058,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll [2017-11-15 20:47:05 | 000,807,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2017-11-15 20:47:05 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2017-11-15 20:47:05 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexcl40.dll [2017-11-15 20:47:04 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2017-11-15 20:47:04 | 000,382,696 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2017-11-15 20:47:04 | 000,308,456 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2017-11-15 20:47:04 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2017-11-15 20:47:04 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2017-11-15 20:47:04 | 000,066,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll [2017-11-15 20:47:04 | 000,063,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll [2017-11-15 20:47:04 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll [2017-11-15 20:47:04 | 000,020,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll [2017-11-15 20:47:04 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll [2017-11-15 20:47:04 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll [2017-11-15 20:47:04 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll [2017-11-15 20:47:04 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll [2017-11-15 20:47:04 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll [2017-11-15 20:47:04 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll [2017-11-15 20:47:04 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll [2017-11-15 20:47:04 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll [2017-11-15 20:47:04 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll [2017-11-15 20:47:04 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll [2017-11-15 20:47:04 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll [2017-11-15 20:47:04 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-2-0.dll [2017-11-15 20:47:04 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-2-0.dll [2017-11-15 20:47:04 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll [2017-11-15 20:47:04 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-2-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-2-0.dll [2017-11-15 20:47:04 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-1.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l2-1-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l2-1-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-timezone-l1-1-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l2-1-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l2-1-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-2-0.dll [2017-11-15 20:47:04 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-2-0.dll [2017-11-15 20:47:03 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2017-11-15 20:47:03 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2017-11-15 20:47:03 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2017-11-15 20:47:03 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2017-11-15 20:47:03 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll [2017-11-15 20:47:03 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll [2017-11-15 20:47:03 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll [2017-11-15 20:47:03 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll [2017-11-15 20:47:03 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-1.dll [2017-11-15 20:47:03 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-timezone-l1-1-0.dll [2017-11-15 20:47:02 | 002,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll [2017-11-15 20:47:02 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2017-11-15 20:47:02 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2017-11-15 20:47:02 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2017-11-15 20:47:01 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2017-11-15 20:47:01 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll [2017-11-15 20:47:00 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll [2017-11-15 20:47:00 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2017-11-15 20:47:00 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2017-11-15 20:47:00 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2017-11-15 20:46:57 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll [2017-11-15 20:46:57 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2017-11-15 20:46:57 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2017-11-15 20:46:57 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2017-11-15 20:46:57 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2017-11-15 20:46:57 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2017-11-15 20:46:57 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2017-11-15 20:46:56 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll [2017-11-15 20:46:56 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2017-11-15 20:46:56 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll [2017-11-15 20:46:56 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll [2017-11-15 20:46:56 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe [2017-11-15 20:46:56 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2017-11-15 20:46:56 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2017-11-15 20:46:56 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2017-11-15 20:46:56 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2017-11-15 20:46:56 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2017-11-15 20:46:56 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssitlb.dll [2017-11-15 20:46:56 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe [2017-11-15 20:46:56 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2017-11-15 20:46:56 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssitlb.dll [2017-11-15 20:46:56 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2017-11-15 20:46:56 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll [2017-11-15 20:46:56 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2017-11-15 20:46:56 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2017-11-15 20:46:56 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2017-11-15 20:46:56 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2017-11-15 20:46:56 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2017-11-15 20:46:56 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll [2017-11-15 20:46:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2017-11-15 20:46:56 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2017-11-15 20:46:56 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2017-11-15 20:46:56 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2017-11-15 20:46:56 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2017-11-15 20:46:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2017-11-15 20:46:56 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2017-11-15 20:46:56 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll [2017-11-15 20:46:56 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2017-11-15 20:46:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2017-11-15 20:46:56 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll [2017-11-15 20:46:56 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll [2017-11-15 20:46:56 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll [2017-11-15 20:46:56 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll [2017-11-15 20:46:56 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2017-11-15 20:46:56 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2017-11-15 20:46:55 | 012,574,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2017-11-15 20:46:55 | 012,574,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2017-11-15 20:46:55 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll [2017-11-15 20:46:55 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2017-11-15 20:46:55 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2017-11-15 20:46:55 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll [2017-11-15 20:46:55 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2017-11-15 20:46:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx [2017-11-15 20:46:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll [2017-11-15 20:46:54 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2017-11-15 20:44:32 | 002,023,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe [2017-11-15 20:44:32 | 001,570,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll [2017-11-15 20:44:32 | 000,605,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2017-11-15 20:44:32 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll [2017-11-15 20:44:32 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll [2017-11-15 20:44:32 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll [2017-11-15 20:44:32 | 000,134,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe [2017-11-15 20:44:31 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll [2017-11-15 20:44:31 | 000,407,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\centel.dll [2017-11-15 20:44:31 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll [2017-11-11 17:36:38 | 000,183,584 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswArPot.sys [2017-11-11 17:36:07 | 000,365,168 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2017-11-05 09:17:23 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Ślub Sylwii [2017-10-24 14:31:02 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\{2834F6D9-A907-4B36-8439-5FB0CC8435E4} [2017-10-15 11:05:47 | 127,017,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MRT-KB890830.exe [2017-10-14 12:37:13 | 005,547,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2017-10-14 12:37:11 | 004,121,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2017-10-14 12:37:11 | 001,032,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2017-10-14 12:37:11 | 000,827,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2017-10-14 12:37:09 | 004,001,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2017-10-14 12:37:09 | 003,945,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2017-10-14 12:37:07 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2017-10-14 12:37:07 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll [2017-10-14 12:37:06 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswstr10.dll [2017-10-14 12:37:06 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll [2017-10-14 12:37:06 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2017-10-14 12:37:06 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlansec.dll [2017-10-14 12:37:06 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2017-10-14 12:37:05 | 002,851,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll [2017-10-14 12:37:05 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll [2017-10-14 12:37:05 | 001,732,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2017-10-14 12:37:05 | 000,706,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2017-10-14 12:37:05 | 000,631,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2017-10-14 12:37:05 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll [2017-10-14 12:37:04 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll [2017-10-14 12:37:04 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll [2017-10-14 12:37:04 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll [2017-10-14 12:37:04 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll [2017-10-14 12:37:04 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll [2017-10-14 12:37:03 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll [2017-10-14 12:37:03 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll [2017-10-14 12:37:03 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icaapi.dll [2017-10-14 12:37:03 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint40.dll [2017-10-14 12:37:01 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll [2017-10-14 12:37:00 | 001,212,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2017-10-14 12:37:00 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2017-10-14 12:37:00 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe [2017-10-14 12:36:58 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2017-10-14 12:36:58 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe [2017-10-14 12:36:58 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe [2017-10-14 12:36:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe [2017-10-14 12:36:56 | 000,880,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll [2017-10-14 12:36:54 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2017-10-14 12:36:52 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2017-10-14 12:36:52 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2017-10-14 12:36:51 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2017-10-14 12:36:51 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2017-10-14 12:36:51 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2017-10-14 12:36:51 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2017-10-14 12:36:51 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2017-10-14 12:36:49 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2017-10-14 12:36:49 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll [2017-10-14 12:36:48 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll [2017-10-14 12:36:45 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll [2017-10-14 12:36:43 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll [2017-10-14 12:36:42 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll [2017-10-14 12:36:42 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2017-10-14 12:36:41 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe [2017-10-14 12:36:41 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe [2017-10-14 12:36:41 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll [2017-10-14 12:36:41 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll [2017-10-14 12:36:41 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll [2017-10-14 12:36:41 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2017-10-14 12:36:41 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2017-10-14 12:36:41 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2017-10-14 12:36:40 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe [2017-10-14 12:36:40 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll [2017-10-14 12:36:40 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2017-10-14 12:36:39 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll [2017-10-14 12:36:39 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll [2017-10-14 12:36:39 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll [2017-10-14 12:36:39 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll [2017-10-14 12:36:39 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe [2017-10-14 12:36:39 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2017-10-14 12:36:39 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe [2017-10-14 12:36:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2017-10-14 12:36:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll [2017-10-14 12:36:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll [2017-10-14 12:36:39 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2017-10-14 12:36:39 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2017-10-14 12:36:39 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2017-10-14 12:36:39 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2017-10-14 12:36:39 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2017-10-14 12:36:39 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2017-10-14 12:36:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2017-10-14 12:36:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2017-10-14 12:36:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2017-10-14 12:36:38 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll [2017-10-14 12:36:38 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll [2017-10-14 12:36:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll [2017-10-14 12:36:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll [2017-10-13 03:58:49 | 000,000,000 | -HSD | C] -- C:\found.000 [2017-10-13 03:58:49 | 000,000,000 | -HSD | C] -- \found.000 [2017-09-20 20:13:57 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast [2017-09-20 20:13:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SopCast [2017-09-13 18:10:55 | 001,143,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll [2017-09-13 18:10:54 | 000,973,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll [2017-09-13 18:10:53 | 003,203,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll [2017-09-13 18:10:53 | 002,144,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmc.exe [2017-09-13 18:10:49 | 002,150,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll [2017-09-13 18:10:49 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmc.exe [2017-09-13 18:10:49 | 000,971,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2017-09-13 18:10:49 | 000,757,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2017-09-13 18:10:48 | 000,806,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll [2017-09-13 18:10:48 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2017-09-13 18:10:48 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll [2017-09-13 18:10:47 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcbase.dll [2017-09-13 18:10:47 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll [2017-09-13 18:10:47 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll [2017-09-13 18:10:47 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cic.dll [2017-09-13 18:10:47 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcshext.dll [2017-09-13 18:10:45 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcbase.dll [2017-09-13 18:10:45 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2017-09-13 18:10:45 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cic.dll [2017-09-13 18:10:45 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcshext.dll [2017-09-13 18:10:43 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winnsi.dll [2017-09-13 18:10:43 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nsi.dll [2017-09-13 18:10:42 | 002,065,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2017-09-13 18:10:35 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.exe [2017-09-13 18:10:34 | 001,867,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2017-09-13 18:10:34 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll [2017-09-13 18:10:34 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.exe [2017-09-13 18:10:34 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netbtugc.exe [2017-09-13 18:10:31 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe [2017-09-13 18:10:29 | 001,499,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2017-09-13 18:10:29 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnpinst.exe [2017-09-13 18:10:29 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetppui.dll [2017-09-13 18:10:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comcat.dll [2017-09-13 18:10:29 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comcat.dll [2017-09-13 18:10:28 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleres.dll [2017-09-13 18:10:28 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleres.dll [2017-08-09 10:35:36 | 000,616,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl40.dll [2017-08-09 10:35:36 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd3x40.dll [2017-08-09 10:35:36 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x40.dll [2017-08-09 10:35:36 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll [2017-08-09 10:35:35 | 001,311,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet40.dll [2017-08-09 10:35:33 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswdat10.dll [2017-08-09 10:35:33 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll [2017-08-09 10:35:33 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxbde40.dll [2017-08-09 10:35:33 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspbde40.dll [2017-08-09 10:35:33 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msltus40.dll [2017-08-09 10:35:33 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter40.dll [2017-08-09 10:35:31 | 000,382,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll [2017-08-09 10:35:27 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe [2017-08-09 10:35:27 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe [2017-08-09 10:35:27 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll [2017-08-09 10:35:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werdiagcontroller.dll [2017-08-09 10:35:02 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexch40.dll [2017-08-09 10:35:02 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll [2017-07-31 11:00:09 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Nowy folder [2017-07-25 16:58:35 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\MAZIA I PAJKA [2017-07-25 16:56:25 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\PROGRAMY [2017-07-25 16:49:55 | 000,000,000 | R--D | C] -- C:\Users\Toshiba\Desktop\CV [2017-07-25 16:11:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Booking [2017-07-25 16:00:45 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\{99F30F6A-F890-4DF1-AF57-C40D1C3E6CC1} [2017-07-25 15:47:49 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Przelewy [2017-07-12 10:29:34 | 000,377,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys [2017-07-12 10:29:33 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll [2017-07-12 10:29:33 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx [2017-07-12 10:29:33 | 000,379,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe [2017-07-12 10:29:32 | 001,227,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll [2017-07-12 10:29:32 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll [2017-07-12 10:29:32 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll [2017-07-12 10:29:32 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx [2017-07-12 10:29:32 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe [2017-07-12 10:29:32 | 000,287,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2017-07-12 10:29:32 | 000,265,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2017-07-12 10:29:32 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe [2017-07-12 10:29:32 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe [2017-07-12 10:29:32 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdhui.dll [2017-07-12 10:29:32 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll [2017-07-12 10:29:31 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resmon.exe [2017-07-12 10:29:31 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resmon.exe [2017-07-12 10:29:21 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2017-06-14 10:26:24 | 004,296,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_47.dll [2017-06-14 10:26:24 | 003,550,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_47.dll [2017-06-14 10:26:08 | 000,733,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\HelpPane.exe [2017-06-14 10:26:06 | 000,091,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MigAutoPlay.exe [2017-06-14 10:26:06 | 000,091,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MigAutoPlay.exe [2017-06-14 10:26:04 | 001,648,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2017-06-14 10:26:04 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rundll32.exe [2017-06-14 10:26:02 | 003,165,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2017-06-14 10:26:02 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2017-06-14 10:25:59 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2017-06-14 10:25:59 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2017-06-14 10:25:55 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2017-06-14 10:25:55 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2017-06-14 10:25:55 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2017-06-14 10:25:55 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2017-06-14 10:25:55 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll [2017-06-14 10:25:55 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2017-06-14 10:25:55 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2017-06-14 10:25:55 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2017-06-14 10:25:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2017-06-14 10:25:55 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2017-06-14 10:25:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll [2017-06-14 10:25:55 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmmsp.dll [2017-05-13 14:02:08 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\{15BE8F5B-D6B8-4A4F-9419-A16B8AD027F8} [2017-05-11 20:51:12 | 001,483,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2017-05-11 20:51:12 | 000,876,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2017-05-11 20:51:08 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll [2017-05-11 20:51:06 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll [2017-05-11 20:50:57 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\plasrv.exe [2017-05-11 20:50:55 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll [2017-05-11 20:50:54 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2017-05-11 20:50:54 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2017-05-11 20:50:53 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll [2017-04-21 13:53:36 | 000,029,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aspnet_counters.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr110_clr0400.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr100_clr0400.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp110_clr0400.dll [2017-04-21 13:50:56 | 000,030,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aspnet_counters.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr110_clr0400.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr100_clr0400.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp110_clr0400.dll [2017-04-20 19:09:20 | 000,993,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120_clr0400.dll [2017-04-20 19:09:20 | 000,987,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr120_clr0400.dll [2017-04-20 19:09:20 | 000,690,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120_clr0400.dll [2017-04-20 19:09:20 | 000,485,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp120_clr0400.dll [2017-04-12 18:02:35 | 001,574,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2017-04-12 18:02:35 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll [2017-04-12 18:02:33 | 001,329,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2017-04-12 18:02:28 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll [2017-04-12 18:02:26 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll [2017-04-12 18:02:25 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll [2017-03-15 15:19:05 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll [2017-03-15 15:19:05 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icm32.dll [2017-03-15 15:19:04 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\INETRES.dll [2017-03-15 15:19:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2017-03-15 15:19:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2017-02-13 17:52:19 | 000,057,728 | ---- | C] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbuniva.sys [2017-02-13 17:52:18 | 000,343,288 | ---- | C] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbloga.sys [2017-02-13 17:52:18 | 000,198,968 | ---- | C] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbidsha.sys [2017-02-13 17:52:17 | 000,321,032 | ---- | C] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys [2017-01-25 18:49:52 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\MP3 [2016-12-14 17:20:58 | 003,244,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll [2016-12-14 17:20:58 | 000,633,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2016-12-14 17:20:57 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll [2016-12-14 17:20:57 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe [2016-12-14 17:20:57 | 000,114,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2016-12-14 17:20:55 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hlink.dll [2016-12-14 17:20:54 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll [2016-12-14 17:20:54 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll [2016-12-14 17:20:50 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2016-12-14 17:20:48 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll [2016-12-14 17:20:46 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2016-12-14 17:20:46 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll [2016-12-14 17:20:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msimsg.dll [2016-12-14 17:20:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimsg.dll [9 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 360 Days ==========[/color] [2017-12-05 19:10:01 | 000,025,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2017-12-05 19:10:01 | 000,025,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2017-12-04 17:23:47 | 001,241,464 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2017-12-04 17:23:47 | 000,842,348 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2017-12-04 17:23:47 | 000,334,094 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2017-12-04 17:23:47 | 000,292,042 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2017-12-04 17:23:47 | 000,006,548 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2017-12-03 08:56:27 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\PC-Mechanic Subscription.job [2017-12-03 08:56:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2017-12-03 08:55:58 | 114,450,431 | -HS- | M] () -- C:\hiberfil.sys [2017-11-30 18:34:29 | 000,445,376 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2017-11-30 18:23:58 | 001,587,096 | ---- | M] ( ) -- C:\Users\Toshiba\Desktop\KLite-Codec-Pack-13137-AsystentPobierania.exe [2017-11-30 18:22:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Toshiba\Desktop\OTL (2).exe [2017-11-29 20:31:09 | 000,803,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2017-11-29 20:31:09 | 000,144,896 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2017-11-21 11:21:39 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2017-11-21 11:09:55 | 000,000,017 | ---- | M] () -- C:\Windows\launcher.ini [2017-11-21 11:03:52 | 000,001,594 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF [2017-11-19 11:29:33 | 127,017,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MRT-KB890830.exe [2017-11-16 19:18:22 | 000,455,376 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2017-11-11 17:35:50 | 000,203,976 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys [2017-11-11 17:35:49 | 000,364,464 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys [2017-11-11 17:35:48 | 000,365,168 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2017-11-11 17:35:48 | 000,183,584 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswArPot.sys [2017-11-11 17:35:48 | 000,148,288 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2017-11-11 17:35:48 | 000,110,376 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys [2017-11-11 17:35:48 | 000,084,416 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys [2017-11-11 17:35:48 | 000,047,008 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys [2017-11-11 17:35:11 | 001,026,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys [2017-11-11 17:35:00 | 000,343,288 | ---- | M] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbloga.sys [2017-11-11 17:35:00 | 000,198,968 | ---- | M] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbidsha.sys [2017-11-11 17:35:00 | 000,057,728 | ---- | M] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbuniva.sys [2017-11-11 17:34:59 | 000,321,032 | ---- | M] (AVAST Software s.r.o.) -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys [2017-10-18 04:25:08 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\usbhub.sys.mui [2017-10-18 04:24:00 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\usbehci.sys.mui [2017-10-18 04:20:52 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\usbport.sys.mui [2017-10-18 03:34:39 | 000,134,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe [2017-10-18 03:30:08 | 000,605,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2017-10-18 03:06:40 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2017-10-18 03:06:35 | 000,007,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2017-10-17 08:03:20 | 000,001,335 | ---- | M] () -- C:\Users\Toshiba\Desktop\CCleaner — skrót.lnk [2017-10-16 22:55:15 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msexcl40.dll [2017-10-15 23:04:32 | 000,407,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\centel.dll [2017-10-14 09:23:37 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2017-10-14 09:12:05 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2017-10-14 09:11:31 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2017-10-14 09:11:27 | 000,576,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2017-10-14 09:11:27 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2017-10-14 09:11:00 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2017-10-14 09:09:27 | 005,979,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2017-10-14 09:04:32 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2017-10-14 09:02:26 | 000,615,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2017-10-14 09:01:18 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2017-10-14 09:01:17 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2017-10-14 09:01:02 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2017-10-14 09:00:59 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2017-10-14 08:55:55 | 000,968,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2017-10-14 08:53:06 | 000,489,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2017-10-14 08:47:21 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2017-10-14 08:47:00 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2017-10-14 08:46:15 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2017-10-14 08:43:56 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2017-10-14 08:43:29 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2017-10-14 08:41:43 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2017-10-14 08:40:20 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2017-10-14 08:30:00 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2017-10-14 08:29:35 | 000,807,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2017-10-14 08:28:00 | 001,359,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2017-10-14 08:27:51 | 002,134,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2017-10-14 07:58:53 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2017-10-14 07:53:05 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2017-10-14 07:52:38 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2017-10-14 07:52:31 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2017-10-14 07:51:50 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2017-10-14 07:47:32 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2017-10-14 07:46:30 | 000,476,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2017-10-14 07:45:22 | 000,662,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2017-10-14 07:45:19 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2017-10-14 07:45:05 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2017-10-14 07:35:28 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2017-10-14 07:35:07 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2017-10-14 07:34:46 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2017-10-14 07:33:10 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2017-10-14 07:32:02 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2017-10-14 07:30:26 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2017-10-14 07:23:38 | 002,058,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2017-10-14 07:23:25 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2017-10-14 07:04:35 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2017-10-12 01:58:25 | 000,382,696 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2017-10-12 01:55:50 | 012,574,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2017-10-12 01:55:49 | 014,635,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2017-10-12 01:55:48 | 002,319,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll [2017-10-12 01:55:48 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2017-10-12 01:55:47 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2017-10-12 01:55:47 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2017-10-12 01:55:45 | 002,058,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll [2017-10-12 01:55:44 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll [2017-10-12 01:55:42 | 002,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll [2017-10-12 01:55:42 | 000,778,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll [2017-10-12 01:55:42 | 000,491,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll [2017-10-12 01:55:42 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll [2017-10-12 01:55:42 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssitlb.dll [2017-10-12 01:55:42 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll [2017-10-12 01:55:42 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll [2017-10-12 01:55:42 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll [2017-10-12 01:55:40 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll [2017-10-12 01:55:39 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2017-10-12 01:55:38 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll [2017-10-12 01:55:36 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2017-10-12 01:40:31 | 000,308,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2017-10-12 01:38:44 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe [2017-10-12 01:38:15 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe [2017-10-12 01:37:33 | 012,574,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2017-10-12 01:37:33 | 011,410,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2017-10-12 01:37:31 | 001,549,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll [2017-10-12 01:37:31 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2017-10-12 01:37:22 | 001,400,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll [2017-10-12 01:37:22 | 000,666,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll [2017-10-12 01:37:22 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll [2017-10-12 01:37:22 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mssitlb.dll [2017-10-12 01:37:22 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll [2017-10-12 01:37:19 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2017-10-12 01:25:28 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll [2017-10-12 01:24:38 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx [2017-10-12 01:24:38 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll [2017-10-12 01:24:37 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll [2017-10-12 01:16:05 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2017-10-04 14:04:52 | 002,023,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe [2017-10-04 14:04:52 | 001,570,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll [2017-10-04 14:04:52 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll [2017-10-04 14:04:52 | 000,603,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll [2017-10-04 14:04:52 | 000,370,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll [2017-10-04 14:04:52 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll [2017-10-04 14:04:52 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll [2017-09-20 20:13:58 | 000,001,002 | ---- | M] () -- C:\Users\Toshiba\Desktop\SopCast.lnk [2017-09-13 16:33:50 | 000,631,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2017-09-13 16:32:36 | 000,706,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2017-09-13 16:32:35 | 005,547,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2017-09-13 16:31:56 | 001,732,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2017-09-13 16:28:12 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll [2017-09-13 16:28:12 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll [2017-09-13 16:28:12 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2017-09-13 16:28:12 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2017-09-13 16:28:12 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2017-09-13 16:28:12 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll [2017-09-13 16:28:12 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll [2017-09-13 16:28:12 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2017-09-13 16:28:10 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2017-09-13 16:28:10 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2017-09-13 16:28:10 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll [2017-09-13 16:28:10 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2017-09-13 16:28:09 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll [2017-09-13 16:28:08 | 001,212,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2017-09-13 16:28:08 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll [2017-09-13 16:28:08 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2017-09-13 16:28:05 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2017-09-13 16:28:02 | 000,312,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2017-09-13 16:28:01 | 001,068,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll [2017-09-13 16:28:01 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll [2017-09-13 16:28:01 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll [2017-09-13 16:27:59 | 001,460,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2017-09-13 16:27:59 | 001,163,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2017-09-13 16:27:59 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2017-09-13 16:27:56 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll [2017-09-13 16:27:56 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll [2017-09-13 16:27:55 | 000,880,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll [2017-09-13 16:27:55 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll [2017-09-13 16:27:55 | 000,463,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll [2017-09-13 16:27:55 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll [2017-09-13 16:27:55 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll [2017-09-13 16:27:55 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll [2017-09-13 16:27:55 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2017-09-13 16:27:55 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2017-09-13 16:27:55 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2017-09-13 16:27:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2017-09-13 16:13:35 | 004,001,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2017-09-13 16:13:35 | 003,945,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2017-09-13 16:09:10 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2017-09-13 16:09:09 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll [2017-09-13 16:09:09 | 000,392,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wlansec.dll [2017-09-13 16:09:09 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll [2017-09-13 16:09:09 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll [2017-09-13 16:09:06 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll [2017-09-13 16:09:01 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll [2017-09-13 16:09:01 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll [2017-09-13 16:08:54 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll [2017-09-13 16:08:51 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll [2017-09-13 16:08:51 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll [2017-09-13 16:08:51 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll [2017-09-13 16:08:51 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2017-09-13 16:08:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2017-09-13 16:08:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2017-09-13 16:00:54 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe [2017-09-13 16:00:50 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe [2017-09-13 16:00:10 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe [2017-09-13 15:57:12 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2017-09-13 15:56:20 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe [2017-09-13 15:52:20 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe [2017-09-13 15:50:26 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe [2017-09-13 15:47:00 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2017-09-13 15:46:59 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2017-09-13 15:46:59 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2017-09-13 15:46:58 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2017-09-13 15:46:06 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2017-09-13 15:46:06 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2017-09-13 15:46:06 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2017-09-13 15:46:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2017-09-08 16:30:44 | 000,405,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2017-09-08 15:20:51 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mswstr10.dll [2017-09-08 15:20:51 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint40.dll [2017-09-07 16:31:13 | 002,851,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll [2017-09-07 16:12:09 | 002,755,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll [2017-09-07 14:05:27 | 000,995,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll [2017-09-07 14:05:27 | 000,063,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll [2017-09-07 14:05:27 | 000,020,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll [2017-09-07 14:05:27 | 000,019,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll [2017-09-07 14:05:27 | 000,017,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll [2017-09-07 14:05:27 | 000,017,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll [2017-09-07 14:05:27 | 000,016,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll [2017-09-07 14:05:27 | 000,015,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll [2017-09-07 14:05:27 | 000,014,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll [2017-09-07 14:05:27 | 000,014,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-2-0.dll [2017-09-07 14:05:27 | 000,013,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll [2017-09-07 14:05:27 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-2-0.dll [2017-09-07 14:05:27 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-1.dll [2017-09-07 14:05:27 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l2-1-0.dll [2017-09-07 14:05:27 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-timezone-l1-1-0.dll [2017-09-07 14:05:27 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l2-1-0.dll [2017-09-07 14:05:27 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-2-0.dll [2017-09-07 14:05:05 | 000,922,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll [2017-09-07 14:05:05 | 000,066,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll [2017-09-07 14:05:05 | 000,022,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll [2017-09-07 14:05:05 | 000,019,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll [2017-09-07 14:05:05 | 000,017,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll [2017-09-07 14:05:05 | 000,017,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll [2017-09-07 14:05:05 | 000,016,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll [2017-09-07 14:05:05 | 000,015,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll [2017-09-07 14:05:05 | 000,014,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll [2017-09-07 14:05:05 | 000,014,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-2-0.dll [2017-09-07 14:05:05 | 000,013,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll [2017-09-07 14:05:05 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-2-0.dll [2017-09-07 14:05:05 | 000,012,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-1.dll [2017-09-07 14:05:05 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l2-1-0.dll [2017-09-07 14:05:05 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-timezone-l1-1-0.dll [2017-09-07 14:05:05 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l2-1-0.dll [2017-09-07 14:05:05 | 000,011,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-2-0.dll [2017-09-02 09:55:42 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\last.dump [2017-08-19 16:28:46 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2017-08-19 16:28:37 | 004,121,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2017-08-19 16:28:37 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2017-08-19 16:28:37 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll [2017-08-19 16:10:44 | 003,209,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2017-08-19 16:10:44 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll [2017-08-19 16:10:44 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll [2017-08-19 16:08:33 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe [2017-08-19 16:08:25 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2017-08-19 15:57:38 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe [2017-08-19 15:57:33 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe [2017-08-16 16:29:31 | 000,806,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll [2017-08-15 16:29:34 | 001,867,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2017-08-15 16:10:42 | 001,499,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2017-08-14 18:35:18 | 000,827,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2017-08-14 18:35:10 | 002,150,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll [2017-08-14 18:35:10 | 000,303,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcbase.dll [2017-08-14 18:35:10 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcshext.dll [2017-08-14 18:35:08 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2017-08-14 18:35:06 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\cic.dll [2017-08-14 18:35:03 | 003,203,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll [2017-08-14 18:35:03 | 000,355,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mmcbase.dll [2017-08-14 18:35:03 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mmcshext.dll [2017-08-14 18:35:02 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icaapi.dll [2017-08-14 18:34:59 | 000,211,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cic.dll [2017-08-13 22:37:59 | 002,144,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mmc.exe [2017-08-13 22:30:41 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mmc.exe [2017-08-11 07:35:06 | 000,757,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2017-08-11 07:35:06 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll [2017-08-11 07:35:06 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winnsi.dll [2017-08-11 07:35:01 | 002,065,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2017-08-11 07:35:01 | 000,346,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll [2017-08-11 07:35:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\oleres.dll [2017-08-11 07:35:01 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\nsi.dll [2017-08-11 07:34:56 | 000,971,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2017-08-11 07:34:55 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll [2017-08-11 07:34:55 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetppui.dll [2017-08-11 07:34:52 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\comcat.dll [2017-08-11 07:20:32 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wpnpinst.exe [2017-08-11 07:20:29 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.exe [2017-08-11 07:19:44 | 000,497,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2017-08-11 07:19:39 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll [2017-08-11 07:19:39 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\oleres.dll [2017-08-11 07:12:12 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netbtugc.exe [2017-08-11 07:09:32 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.exe [2017-08-11 07:03:37 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe [2017-08-11 07:01:43 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\comcat.dll [2017-08-08 12:45:03 | 000,058,998 | ---- | M] () -- C:\Users\Toshiba\Desktop\594241b74cb4aab23db6f04c9b2d [2017-08-06 10:10:52 | 000,146,664 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswmonflt.sys.150201068581403 [2017-08-06 10:01:27 | 000,146,664 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswmonflt.sys.150201023949503 [2017-07-25 17:46:38 | 000,000,002 | ---- | M] () -- C:\Windows\SysWow64\stub.json [2017-07-21 15:26:31 | 000,282,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll [2017-07-21 15:26:30 | 000,518,144 | ---- | M] () -- C:\Windows\SysWow64\msjetoledb40.dll [2017-07-21 15:26:30 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msexch40.dll [2017-07-21 15:26:30 | 000,290,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll [2017-07-14 16:29:15 | 000,486,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll [2017-07-14 16:29:15 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll [2017-07-14 16:10:33 | 000,382,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll [2017-07-14 15:57:38 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe [2017-07-14 15:50:25 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe [2017-07-14 15:50:23 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\werdiagcontroller.dll [2017-07-07 16:29:31 | 001,143,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll [2017-07-07 16:10:49 | 000,973,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll [2017-07-01 14:05:16 | 001,311,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet40.dll [2017-07-01 14:05:16 | 000,866,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mswdat10.dll [2017-07-01 14:05:16 | 000,616,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl40.dll [2017-07-01 14:05:16 | 000,475,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxbde40.dll [2017-07-01 14:05:16 | 000,375,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mspbde40.dll [2017-07-01 14:05:16 | 000,343,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd3x40.dll [2017-07-01 14:05:16 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x40.dll [2017-07-01 14:05:16 | 000,240,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msltus40.dll [2017-07-01 14:05:16 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter40.dll [2017-06-25 08:02:09 | 001,726,774 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2017-06-12 23:49:25 | 000,594,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll [2017-06-12 23:49:24 | 001,363,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll [2017-06-12 23:49:23 | 000,475,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx [2017-06-12 23:49:20 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pdhui.dll [2017-06-12 23:29:03 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll [2017-06-12 23:29:02 | 001,227,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll [2017-06-12 23:29:01 | 000,390,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx [2017-06-12 23:28:57 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll [2017-06-12 23:14:07 | 000,379,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe [2017-06-12 23:14:06 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe [2017-06-12 23:14:04 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\resmon.exe [2017-06-12 23:06:51 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe [2017-06-12 23:06:50 | 000,303,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe [2017-06-12 23:06:50 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\resmon.exe [2017-06-02 09:10:16 | 000,733,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe [2017-05-30 05:56:21 | 000,377,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys [2017-05-30 05:56:21 | 000,287,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2017-05-16 16:35:16 | 000,265,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2017-05-16 16:30:57 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2017-05-12 16:58:45 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2017-05-10 16:33:50 | 000,091,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MigAutoPlay.exe [2017-05-10 16:29:56 | 003,165,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2017-05-10 16:29:56 | 000,192,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2017-05-10 16:29:56 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2017-05-10 16:28:08 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll [2017-05-10 16:16:55 | 000,091,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MigAutoPlay.exe [2017-05-10 16:13:36 | 000,709,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2017-05-10 16:13:14 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2017-05-10 16:13:13 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2017-05-10 16:13:09 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2017-05-10 16:13:06 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2017-05-10 16:13:06 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll [2017-05-10 16:12:50 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2017-05-10 16:00:58 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2017-05-10 16:00:46 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2017-05-10 16:00:33 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2017-05-10 16:00:26 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2017-05-07 16:29:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmmsp.dll [2017-04-27 23:50:10 | 003,550,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_47.dll [2017-04-21 16:34:00 | 001,133,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll [2017-04-21 16:15:28 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll [2017-04-21 13:53:36 | 000,029,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\aspnet_counters.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr110_clr0400.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr100_clr0400.dll [2017-04-21 13:53:36 | 000,018,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp110_clr0400.dll [2017-04-21 13:50:56 | 000,030,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aspnet_counters.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr110_clr0400.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr100_clr0400.dll [2017-04-21 13:50:56 | 000,018,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp110_clr0400.dll [2017-04-20 19:09:20 | 000,993,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120_clr0400.dll [2017-04-20 19:09:20 | 000,987,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr120_clr0400.dll [2017-04-20 19:09:20 | 000,690,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120_clr0400.dll [2017-04-20 19:09:20 | 000,485,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp120_clr0400.dll [2017-04-17 16:37:29 | 000,876,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2017-04-12 16:32:24 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2017-04-12 16:32:10 | 001,483,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2017-04-12 16:32:10 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2017-04-12 14:05:53 | 004,296,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_47.dll [2017-03-30 16:03:43 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rundll32.exe [2017-03-10 17:32:03 | 000,300,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll [2017-03-10 17:20:20 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll [2017-03-10 16:57:19 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\plasrv.exe [2017-03-07 12:10:40 | 000,000,924 | ---- | M] () -- C:\Users\Toshiba\Desktop\Downloads.lnk [2017-03-07 10:38:37 | 000,000,015 | ---- | M] () -- C:\Windows\Robot Office Common.ini [2017-03-07 10:38:37 | 000,000,012 | ---- | M] () -- C:\Windows\RUNTEST.INI [2017-03-04 02:27:12 | 001,574,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2017-03-04 02:27:05 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll [2017-03-04 02:14:51 | 001,329,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2017-03-04 02:14:31 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll [2017-02-13 17:51:48 | 000,337,080 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswvmm.sys.148700476922204 [2017-02-09 17:32:03 | 000,769,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll [2017-02-09 17:32:03 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll [2017-02-09 17:31:58 | 000,625,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll [2017-02-09 17:31:54 | 000,250,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icm32.dll [2017-01-13 19:00:09 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\INETRES.dll [2017-01-11 19:01:03 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2017-01-11 18:43:20 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [9 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2017-11-30 18:23:58 | 001,587,096 | ---- | C] ( ) -- C:\Users\Toshiba\Desktop\KLite-Codec-Pack-13137-AsystentPobierania.exe [2017-10-17 08:03:20 | 000,001,335 | ---- | C] () -- C:\Users\Toshiba\Desktop\CCleaner — skrót.lnk [2017-09-20 20:13:58 | 000,001,002 | ---- | C] () -- C:\Users\Toshiba\Desktop\SopCast.lnk [2017-09-02 09:55:42 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\last.dump [2017-08-09 10:35:36 | 000,518,144 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2017-08-08 12:45:02 | 000,058,998 | ---- | C] () -- C:\Users\Toshiba\Desktop\594241b74cb4aab23db6f04c9b2d [2017-07-25 17:46:38 | 000,000,002 | ---- | C] () -- C:\Windows\SysWow64\stub.json [2017-03-07 10:38:37 | 000,000,015 | ---- | C] () -- C:\Windows\Robot Office Common.ini [2014-12-27 16:51:04 | 000,000,097 | -HS- | C] () -- \_sg3bklhxbsg [2012-11-11 14:17:10 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2012-02-29 03:02:21 | 114,450,431 | -HS- | C] () -- \hiberfil.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\sysnative\shell32.dll -- [2017-08-15 16:29:44 | 014,182,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2017-08-15 16:10:54 | 012,880,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\sysnative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\sysnative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2014-03-06 08:06:21 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I [2014-03-08 09:22:06 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\ASCON [2014-11-23 16:11:33 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Autodesk [2014-02-20 08:40:01 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\AVAST Software [2014-05-25 19:54:11 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\AVG [2015-06-10 17:22:38 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Canneverbe Limited [2015-01-04 10:33:51 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\DAEMON Tools Lite [2017-03-07 10:27:56 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\GHISLER [2013-04-02 18:18:56 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Grupa IMAGE [2014-10-05 14:05:55 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\INTERsoft [2017-10-27 18:04:07 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\ipla [2014-12-30 19:37:53 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\IsolatedStorage [2014-12-31 19:29:18 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Mathsoft [2014-09-18 20:50:02 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\ModelViews [2014-05-25 19:51:04 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\NapiProjekt [2014-02-19 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\OpenOffice [2014-01-20 22:39:13 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\OpenOffice.org [2014-12-01 19:13:58 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Opera Software [2015-10-30 20:59:33 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\PDF Architect 4 [2016-03-11 21:22:39 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Podatnik.info [2015-01-04 12:48:44 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Robobat [2017-03-07 11:31:17 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\SoftGrid Client [2014-03-06 08:10:09 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\SpeedBit [2014-08-11 17:23:02 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Sports Interactive [2012-11-24 16:24:20 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Toshiba [2013-03-28 11:47:45 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\TOSHIBA Online Product Information [2012-09-15 16:35:07 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\TP [2015-11-26 15:24:07 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Uniblue [2012-11-14 17:27:01 | 000,000,000 | ---D | M] -- C:\Users\Toshiba\AppData\Roaming\Windows Live Writer [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:56E2E879 < End of report >