Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 27-04-2017
Uruchomiony przez tada4 (administrator)  LAPTOP-5EA777QL (27-04-2017 21:38:37)
Uruchomiony z D:\D\Internet
Załadowane profile: tada4 (Dostępne profile: tada4)
Platform: Windows 10 Home Wersja 1703 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\SecurityHealthService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
() D:\A\Programy\HTC Home 3\Clock.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKU\S-1-5-21-2662483725-3314199631-1332502659-1001\...\Run: [Clock Widget (HTC Home)] => D:\A\Programy\HTC Home 3\Clock.exe [2281984 2015-05-23] ()
HKU\S-1-5-21-2662483725-3314199631-1332502659-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

AutoConfigURL: [S-1-5-21-2662483725-3314199631-1332502659-1001] => hxxp://web-access.biz/wpad.dat?06534bf7c4d8ab84747f590310f6313629718877
Tcpip\Parameters: [DhcpNameServer] 89.231.1.206 217.172.224.160
Tcpip\..\Interfaces\{b24d5103-6676-4c9d-ab70-ed784fad50c4}: [DhcpNameServer] 89.231.1.206 217.172.224.160
ManualProxies: 0hxxp://web-access.biz/wpad.dat?06534bf7c4d8ab84747f590310f6313629718877

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2662483725-3314199631-1332502659-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://onet.pl/

FireFox:
========
FF DefaultProfile: 31petmp1.default
FF ProfilePath: C:\Users\tada4\AppData\Roaming\Mozilla\Firefox\Profiles\31petmp1.default [2017-04-27]
FF Homepage: Mozilla\Firefox\Profiles\31petmp1.default -> hxxp://www.gazeta.pl/0,0.html
FF Extension: (S3.Google Translator) - C:\Users\tada4\AppData\Roaming\Mozilla\Firefox\Profiles\31petmp1.default\Extensions\s3google@translator.xpi [2017-04-02]
FF Extension: (uBlock Origin) - C:\Users\tada4\AppData\Roaming\Mozilla\Firefox\Profiles\31petmp1.default\Extensions\uBlock0@raymondhill.net.xpi [2017-04-16]
FF Extension: (Password Exporter) - C:\Users\tada4\AppData\Roaming\Mozilla\Firefox\Profiles\31petmp1.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2017-03-12]
FF SearchPlugin: C:\Users\tada4\AppData\Roaming\Mozilla\Firefox\Profiles\31petmp1.default\searchplugins\yqs-quicksearch-yandex.xml [2017-02-09]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_148.dll [2017-04-21] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll [2017-04-21] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 ETDService; C:\Program Files\Elantech\ETDService.exe [134872 2017-03-19] (ELAN Microelectronics Corp.)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373736 2016-07-14] (Intel Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2017-01-16] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
S3 WiseBootAssistant; D:\A\Programy\Wise Care 365\Wise Care 365\BootTime.exe [646904 2016-10-13] (WiseCleaner.com)
S3 wlpasvc; C:\WINDOWS\System32\lpasvc.dll [1295360 2017-03-18] (Microsoft Corporation)
S2 SAService; Brak ImagePath

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [32336 2017-03-19] (ELAN Microelectronic Corp.)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18816 2016-11-25] (Huawei Technologies Co., Ltd.)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [223232 2016-11-25] (Huawei Technologies Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-04-21] (REALiX(tm))
S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [126592 2016-11-25] (Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
S3 iaLPSS2i_GPIO2_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [85504 2017-03-18] (Intel Corporation)
S3 iaLPSS2i_I2C_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [168448 2017-03-18] (Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [231168 2017-01-13] (Intel Corporation)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36568 2013-09-30] (IObit)
R3 NETwNb64; C:\WINDOWS\System32\drivers\Netwbw02.sys [3517200 2017-02-17] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_8ce2e93d564b086f\nvlddmkm.sys [14240184 2017-03-24] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [950784 2017-04-11] (Realtek                                            )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [419296 2017-03-19] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3146760 2017-03-01] (Realtek Semiconductor Corp.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [33448 2017-02-17] (Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [33960 2017-02-17] (Synaptics Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVCx32: TokenBroker -> C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation)

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-04-27 21:36 - 2017-04-27 21:38 - 00000000 ____D C:\FRST
2017-04-27 21:32 - 2017-04-27 21:32 - 00000013 _____ C:\Users\tada4\Desktop\wirus.txt
2017-04-27 21:20 - 2017-04-27 21:20 - 00000874 _____ C:\Users\tada4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PortableApps.com Platform.lnk
2017-04-27 21:16 - 2017-04-27 21:16 - 04178336 _____ (PortableApps.com) C:\Users\tada4\Downloads\PortableApps.com Platform 14.3 [1].exe
2017-04-27 20:55 - 2017-04-27 20:55 - 00001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-04-27 20:55 - 2017-04-27 20:55 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-04-27 20:55 - 2017-04-27 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-27 20:27 - 2017-04-27 20:30 - 00004226 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5FD348F2-EAE3-4D87-879C-5C79273F42DC}
2017-04-27 20:09 - 2017-04-27 20:09 - 00218768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-04-27 12:38 - 2017-04-27 20:48 - 00000000 ____D C:\WINDOWS\Minidump
2017-04-26 13:00 - 2017-04-26 13:00 - 00000000 ____D C:\Users\tada4\AppData\Roaming\NVIDIA
2017-04-26 13:00 - 2017-04-26 13:00 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Bandicam Company
2017-04-26 12:58 - 2017-04-26 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-04-26 12:57 - 2017-04-26 12:57 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-04-26 12:34 - 2017-04-27 20:51 - 00000000 ____D C:\ProgramData\RFA_Backups
2017-04-26 12:33 - 2017-04-26 12:33 - 00000000 ____D C:\ProgramData\Registry First Aid
2017-04-26 12:33 - 2017-04-26 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry First Aid 11
2017-04-26 09:52 - 2017-04-19 09:14 - 08321440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-04-26 09:52 - 2017-04-19 09:06 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-04-26 09:52 - 2017-04-19 09:06 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-04-26 09:52 - 2017-04-19 09:06 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-04-26 09:52 - 2017-04-19 09:04 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-04-26 09:52 - 2017-04-19 09:03 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-04-26 09:52 - 2017-04-19 09:02 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-04-26 09:52 - 2017-04-19 09:02 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-04-26 09:52 - 2017-04-19 08:59 - 00387416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-04-26 09:52 - 2017-04-19 08:34 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-04-26 09:52 - 2017-04-19 08:22 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-04-26 09:52 - 2017-04-19 08:19 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-04-26 09:52 - 2017-04-19 08:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-04-26 09:52 - 2017-04-19 08:18 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-04-26 09:52 - 2017-04-19 08:17 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-04-26 09:52 - 2017-04-19 08:16 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-04-26 09:52 - 2017-04-19 08:14 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-04-26 09:52 - 2017-04-19 08:14 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-04-26 09:52 - 2017-04-19 08:14 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-04-26 09:52 - 2017-04-19 08:13 - 00980992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-04-26 09:52 - 2017-04-19 08:13 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-04-26 09:52 - 2017-04-19 08:12 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-04-26 09:52 - 2017-04-19 08:12 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-04-26 09:52 - 2017-04-19 08:12 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-04-26 09:52 - 2017-04-19 08:11 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-04-26 09:52 - 2017-04-19 08:11 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-04-26 09:52 - 2017-04-19 08:11 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-04-26 09:52 - 2017-04-19 08:10 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-04-26 09:52 - 2017-04-19 08:10 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-04-26 09:52 - 2017-04-19 08:10 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-04-26 09:52 - 2017-04-19 08:10 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-04-26 09:52 - 2017-04-19 08:09 - 08246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-04-26 09:52 - 2017-04-19 08:08 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-04-26 09:52 - 2017-04-19 08:07 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-04-26 09:52 - 2017-04-19 08:07 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-04-26 09:52 - 2017-04-19 08:07 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-04-26 09:52 - 2017-04-19 08:07 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-04-26 09:52 - 2017-04-19 08:06 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-04-26 09:52 - 2017-04-19 08:05 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-04-26 09:52 - 2017-04-19 08:05 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-04-26 09:52 - 2017-04-19 08:04 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-04-26 09:52 - 2017-04-19 08:04 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-04-26 09:52 - 2017-04-19 08:02 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-04-26 09:52 - 2017-04-19 08:02 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-04-26 09:52 - 2017-04-19 08:01 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-04-26 09:52 - 2017-04-19 07:59 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-04-26 09:52 - 2017-04-19 07:58 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-04-26 09:52 - 2017-04-19 07:58 - 06761048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-26 09:52 - 2017-04-19 07:44 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-04-26 09:52 - 2017-04-19 07:41 - 20506112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-04-26 09:52 - 2017-04-19 07:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-04-26 09:52 - 2017-04-19 07:37 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-04-26 09:52 - 2017-04-19 07:37 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-04-26 09:52 - 2017-04-19 07:37 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-04-26 09:52 - 2017-04-19 07:36 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-04-26 09:52 - 2017-04-19 07:36 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-04-26 09:52 - 2017-04-19 07:35 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-04-26 09:52 - 2017-04-19 07:34 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-04-26 09:52 - 2017-04-19 07:34 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-04-26 09:52 - 2017-04-19 07:34 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-04-26 09:52 - 2017-04-19 07:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-04-26 09:52 - 2017-04-19 07:33 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-04-26 09:52 - 2017-04-19 07:33 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-04-26 09:52 - 2017-04-19 07:32 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-04-26 09:52 - 2017-04-19 07:32 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-04-26 09:52 - 2017-04-19 07:30 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-04-26 09:52 - 2017-04-19 07:30 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-04-26 09:52 - 2017-04-19 07:30 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-04-26 09:52 - 2017-04-19 07:30 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-04-26 09:52 - 2017-04-19 07:29 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-04-26 09:52 - 2017-04-19 07:29 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-04-26 09:52 - 2017-04-19 07:28 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-04-26 09:52 - 2017-04-19 07:28 - 01627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-04-26 09:52 - 2017-04-19 07:24 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-04-26 09:52 - 2017-04-14 02:39 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-04-26 09:52 - 2017-04-14 02:37 - 00206232 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-04-26 09:52 - 2017-04-14 02:35 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-04-26 09:52 - 2017-04-14 02:35 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-04-26 09:52 - 2017-04-14 02:32 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-04-26 09:52 - 2017-04-14 02:32 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-04-26 09:52 - 2017-04-14 02:30 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-04-26 09:52 - 2017-04-14 01:43 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-04-26 09:52 - 2017-04-14 01:43 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-04-26 09:52 - 2017-04-14 01:41 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-04-26 09:52 - 2017-04-14 01:40 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-04-26 09:52 - 2017-04-14 01:39 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-04-26 09:52 - 2017-04-14 01:39 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-04-26 09:52 - 2017-04-14 01:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-04-26 09:52 - 2017-04-14 01:39 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-04-26 09:52 - 2017-04-14 01:39 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-04-26 09:52 - 2017-04-14 01:38 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-04-26 09:52 - 2017-04-14 01:38 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-04-26 09:52 - 2017-04-14 01:37 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-04-26 09:52 - 2017-04-14 01:37 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-04-26 09:52 - 2017-04-14 01:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-04-26 09:52 - 2017-04-14 01:36 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-04-26 09:52 - 2017-04-14 01:35 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-04-26 09:52 - 2017-04-14 01:35 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-04-26 09:52 - 2017-04-14 01:35 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-04-26 09:52 - 2017-04-14 01:35 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-04-26 09:52 - 2017-04-14 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-04-26 09:52 - 2017-04-14 01:34 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-04-26 09:52 - 2017-04-14 01:33 - 01885696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-04-26 09:52 - 2017-04-14 01:33 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-04-26 09:52 - 2017-04-14 01:33 - 01074688 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-04-26 09:52 - 2017-04-14 01:32 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-04-26 09:52 - 2017-04-14 01:31 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-04-26 09:52 - 2017-04-14 01:31 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-04-26 09:52 - 2017-04-14 01:31 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-04-26 09:52 - 2017-04-14 01:30 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-04-26 09:52 - 2017-04-14 01:29 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-04-26 09:52 - 2017-04-14 01:29 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-04-26 09:52 - 2017-04-14 01:29 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-04-26 09:52 - 2017-04-14 01:28 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-04-26 09:52 - 2017-04-14 01:26 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-04-26 09:52 - 2017-04-14 01:25 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-04-26 09:52 - 2017-04-14 01:24 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-04-26 09:52 - 2017-04-14 01:21 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-04-26 09:52 - 2017-04-14 01:21 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-04-26 09:52 - 2017-04-14 01:18 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-04-26 09:52 - 2017-04-14 01:18 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-04-26 09:52 - 2017-04-14 01:15 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-04-26 09:52 - 2017-04-14 01:15 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-04-26 09:52 - 2017-04-14 01:15 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-04-26 09:52 - 2017-04-14 01:13 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-04-26 09:52 - 2017-04-14 01:13 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-04-26 09:52 - 2017-04-14 01:13 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-04-26 09:52 - 2017-04-14 01:13 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-04-26 09:52 - 2017-04-14 01:12 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-04-26 09:52 - 2017-04-14 01:11 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-04-26 09:52 - 2017-04-14 01:09 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-04-26 09:52 - 2017-04-14 01:08 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-04-26 09:52 - 2017-04-14 01:06 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-04-26 09:52 - 2017-04-14 01:04 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-04-26 09:52 - 2017-04-14 01:01 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-04-26 09:51 - 2017-04-19 09:07 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-04-26 09:51 - 2017-04-19 08:16 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-04-26 09:51 - 2017-04-19 08:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-04-26 09:51 - 2017-04-19 08:13 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-04-26 09:51 - 2017-04-19 08:11 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-04-26 09:51 - 2017-04-19 08:11 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-04-26 09:51 - 2017-04-19 08:08 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-04-26 09:51 - 2017-04-19 08:07 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-04-26 09:51 - 2017-04-19 07:59 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-04-26 09:51 - 2017-04-14 02:35 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-04-26 09:51 - 2017-04-14 02:33 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-04-26 09:51 - 2017-04-14 01:41 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-04-26 09:51 - 2017-04-14 01:38 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-04-26 09:51 - 2017-04-14 01:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-04-26 09:51 - 2017-04-14 01:37 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-04-26 09:51 - 2017-04-14 01:37 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-04-26 09:51 - 2017-04-14 01:36 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-04-26 09:51 - 2017-04-14 01:36 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-04-26 09:51 - 2017-04-14 01:34 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-04-26 09:51 - 2017-04-14 01:33 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-04-26 09:51 - 2017-04-14 01:32 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-04-26 09:51 - 2017-04-14 01:29 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-04-26 09:51 - 2017-04-14 01:29 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-04-24 21:32 - 2017-04-24 21:32 - 00000000 ____D C:\Users\tada4\AppData\Roaming\QMPlay2
2017-04-24 15:30 - 2017-04-24 15:30 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-24 15:30 - 2017-04-24 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-24 15:29 - 2017-04-24 15:30 - 00000000 ____D C:\Program Files\WinRAR
2017-04-22 21:52 - 2017-04-22 21:52 - 00000000 ____D C:\Users\tada4\AppData\Roaming\GHISLER
2017-04-22 21:52 - 2017-04-22 21:52 - 00000000 ____D C:\Users\tada4\AppData\Local\GHISLER
2017-04-22 21:47 - 2017-04-27 19:28 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Wise Care 365
2017-04-22 11:46 - 2017-04-24 17:11 - 00000000 ____D C:\Users\tada4\AppData\Local\Google
2017-04-21 23:10 - 2017-04-21 23:10 - 00223569 _____ C:\WINDOWS\diagerr.xml
2017-04-21 23:10 - 2017-04-21 23:10 - 00002598 _____ C:\WINDOWS\diagwrn.xml
2017-04-21 22:57 - 2017-04-26 23:13 - 00000000 ____D C:\Users\tada4\AppData\Local\CrashDumps
2017-04-21 22:57 - 2017-04-21 22:57 - 00000000 ____D C:\Users\tada4\AppData\Local\DBG
2017-04-21 21:47 - 2017-04-27 18:55 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Kodi
2017-04-21 21:46 - 2017-04-21 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodi
2017-04-21 21:19 - 2017-04-21 21:19 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2017-04-21 21:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2017-04-21 21:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2017-04-21 21:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2017-04-21 21:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2017-04-21 21:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2017-04-21 21:19 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2017-04-21 21:19 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2017-04-21 21:16 - 2017-04-21 21:24 - 00000000 ____D C:\ProgramData\Package Cache
2017-04-21 21:03 - 2017-04-21 21:03 - 00027552 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2017-04-21 21:03 - 2017-04-21 21:03 - 00000000 ____D C:\WINDOWS\IObit
2017-04-21 21:03 - 2017-04-21 21:03 - 00000000 ____D C:\Users\tada4\AppData\Roaming\IObit
2017-04-21 21:03 - 2017-04-21 21:03 - 00000000 ____D C:\ProgramData\ProductData
2017-04-21 21:03 - 2017-04-21 21:02 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-04-21 21:02 - 2017-04-27 15:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-04-21 21:02 - 2017-04-27 14:57 - 148601744 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-04-21 21:01 - 2017-04-21 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-04-21 21:01 - 2017-04-21 21:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-04-21 21:01 - 2017-04-21 21:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-04-21 21:00 - 2017-04-21 21:00 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Macromedia
2017-04-21 20:59 - 2017-04-21 21:00 - 00000000 ____D C:\Users\tada4\AppData\Local\Adobe
2017-04-21 20:57 - 2017-04-21 20:57 - 00000000 ____D C:\WINDOWS\InfusedApps
2017-04-21 20:56 - 2017-04-21 20:56 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-04-21 20:56 - 2017-04-21 19:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-04-21 20:55 - 2017-04-21 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-04-21 20:55 - 2017-04-21 20:55 - 00000000 ____D C:\Program Files\Synaptics
2017-04-21 20:55 - 2017-04-21 19:58 - 00000000 ____D C:\Program Files\Elantech
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\Setup
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\OCR
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\Program Files\MSBuild
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-04-21 20:52 - 2017-04-27 21:19 - 01372976 _____ C:\WINDOWS\system32\perfh015.dat
2017-04-21 20:52 - 2017-04-27 21:19 - 00321972 _____ C:\WINDOWS\system32\perfc015.dat
2017-04-21 20:52 - 2017-04-21 20:52 - 00343212 _____ C:\WINDOWS\system32\perfi015.dat
2017-04-21 20:52 - 2017-04-21 20:52 - 00041370 _____ C:\WINDOWS\system32\perfd015.dat
2017-04-21 20:52 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\pl
2017-04-21 20:52 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\pl
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-04-21 20:51 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-04-21 20:51 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-04-21 20:51 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2017-04-21 20:51 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\system32\0409
2017-04-21 20:51 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\DigitalLocker
2017-04-21 20:50 - 2017-04-03 18:56 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-21 20:50 - 2017-04-03 18:56 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-21 20:48 - 2017-04-21 20:56 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-04-21 20:48 - 2017-04-21 20:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-04-21 20:48 - 2017-04-21 20:46 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-04-21 20:48 - 2017-04-21 20:46 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2017-04-21 20:48 - 2017-04-21 20:46 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-04-21 20:48 - 2017-04-21 20:46 - 00017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-04-21 20:48 - 2017-04-21 20:46 - 00015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-04-21 20:48 - 2017-04-21 20:46 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-04-21 20:48 - 2017-04-21 20:46 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-04-21 20:48 - 2017-04-21 20:46 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-04-21 20:48 - 2017-04-21 20:46 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-04-21 20:48 - 2017-04-21 20:46 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-04-21 20:48 - 2017-04-21 20:46 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-04-21 20:48 - 2017-04-21 20:46 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-04-21 20:47 - 2017-04-27 11:38 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-21 20:47 - 2017-04-27 11:38 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-21 20:47 - 2017-04-26 11:57 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\WINDOWS\Provisioning
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-21 20:47 - 2017-04-26 09:55 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-21 20:47 - 2017-04-22 21:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-04-21 20:47 - 2017-04-22 10:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-04-21 20:47 - 2017-04-21 21:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-04-21 20:47 - 2017-04-21 20:59 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-04-21 20:47 - 2017-04-21 20:59 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-04-21 20:47 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-04-21 20:47 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\SystemApps
2017-04-21 20:47 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-04-21 20:47 - 2017-04-21 20:53 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ___RD C:\Program Files\Windows Defender
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\system32\Com
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\IME
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\Program Files\Common Files\System
2017-04-21 20:47 - 2017-04-21 20:52 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-04-21 20:47 - 2017-04-21 20:51 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-04-21 20:47 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2017-04-21 20:47 - 2017-04-21 20:51 - 00000000 ____D C:\WINDOWS\system32\setup
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 __RSD C:\WINDOWS\Media
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ___SD C:\WINDOWS\system32\Nui
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\icsxml
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\ias
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\downlevel
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\DDFs
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\Registration
2017-04-21 20:47 - 2017-04-21 20:48 - 00000000 ____D C:\WINDOWS\L2Schemas
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Web
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Vss
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\tracing
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\TAPI
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SystemResources
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\winevt
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\spool
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\ras
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\IME
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\Hydrogen
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\System
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SKB
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\security
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\schemas
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\SchCache
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Resources
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\PLA
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Performance
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\ModemLogs
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\InputMethod
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Globalization
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Cursors
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\Branding
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\addins
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files\Windows Security
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files\Windows Portable Devices
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files\Common Files\Services
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files (x86)\Windows NT
2017-04-21 20:47 - 2017-04-21 20:47 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-04-21 20:47 - 2017-04-21 20:46 - 00000219 _____ C:\WINDOWS\system.ini
2017-04-21 20:47 - 2017-04-21 20:46 - 00000092 _____ C:\WINDOWS\win.ini
2017-04-21 20:47 - 2017-04-21 20:07 - 00000000 ____D C:\ProgramData\USOPrivate
2017-04-21 20:47 - 2017-04-21 20:06 - 00000000 ____D C:\WINDOWS\rescache
2017-04-21 20:47 - 2017-04-21 20:05 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2017-04-21 20:47 - 2017-04-21 20:05 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-21 20:47 - 2017-04-21 20:05 - 00000000 ____D C:\Program Files\Windows NT
2017-04-21 20:47 - 2017-04-21 20:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-04-21 20:47 - 2017-04-21 20:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-04-21 20:47 - 2017-04-21 20:02 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-04-21 20:47 - 2017-04-21 20:01 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-04-21 20:47 - 2017-04-21 20:01 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-04-21 20:47 - 2017-04-21 20:01 - 00000000 ____D C:\WINDOWS\HoloShell
2017-04-21 20:47 - 2017-04-21 19:58 - 00000000 ____D C:\WINDOWS\Help
2017-04-21 20:46 - 2017-04-27 12:38 - 00000000 ____D C:\WINDOWS\INF
2017-04-21 20:44 - 2017-04-22 17:22 - 00000000 ____D C:\Program Files\CCleaner
2017-04-21 20:44 - 2017-04-21 20:44 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-04-21 20:44 - 2017-04-21 20:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-04-21 20:43 - 2017-04-27 21:14 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-04-21 20:43 - 2017-04-26 09:53 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-04-21 20:43 - 2017-04-21 20:52 - 00000000 ____D C:\WINDOWS\servicing
2017-04-21 20:43 - 2017-04-21 20:47 - 00000000 ____D C:\WINDOWS\system32\SMI
2017-04-21 20:43 - 2017-04-21 20:43 - 00000000 ____D C:\Users\tada4\AppData\Local\VS Revo Group
2017-04-21 20:43 - 2017-04-21 20:43 - 00000000 ____D C:\ProgramData\VS Revo Group
2017-04-21 20:43 - 2017-04-21 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-04-21 20:43 - 2017-04-21 20:43 - 00000000 ____D C:\Program Files\VS Revo Group
2017-04-21 20:43 - 2017-04-21 20:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-04-21 20:43 - 2016-12-21 14:52 - 00040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-04-21 20:41 - 2017-04-21 21:03 - 00000000 ____D C:\ProgramData\IObit
2017-04-21 20:41 - 2017-04-21 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker
2017-04-21 20:41 - 2017-04-21 20:41 - 00000000 ____D C:\Program Files (x86)\IObit
2017-04-21 20:35 - 2017-04-21 20:35 - 00000000 ____D C:\Users\tada4\AppData\Roaming\WinRAR
2017-04-21 20:34 - 2017-04-21 20:34 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-04-21 20:32 - 2017-04-26 20:16 - 00000000 ____D C:\Users\tada4\AppData\Roaming\vlc
2017-04-21 20:32 - 2017-04-21 20:32 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-04-21 20:30 - 2017-04-21 23:10 - 00000000 ____D C:\WINDOWS\Panther
2017-04-21 20:10 - 2017-04-27 20:55 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Mozilla
2017-04-21 20:10 - 2017-04-27 20:55 - 00000000 ____D C:\Users\tada4\AppData\Local\Mozilla
2017-04-21 20:08 - 2017-04-27 21:19 - 02920904 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-21 20:08 - 2017-04-25 15:57 - 00000000 ____D C:\Users\tada4\AppData\Local\Comms
2017-04-21 20:08 - 2017-04-21 20:08 - 00002418 _____ C:\Users\tada4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-21 20:08 - 2017-04-21 20:08 - 00000000 ____D C:\Users\tada4\AppData\Local\MicrosoftEdge
2017-04-21 20:07 - 2017-04-21 20:07 - 00000000 ____D C:\ProgramData\USOShared
2017-04-21 20:07 - 2017-04-21 20:07 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-04-21 20:06 - 2017-04-22 17:40 - 00000000 ____D C:\Users\tada4\AppData\Local\Packages
2017-04-21 20:06 - 2017-04-21 20:06 - 00000000 ____D C:\Users\tada4\AppData\Roaming\Adobe
2017-04-21 20:06 - 2017-04-21 20:06 - 00000000 ____D C:\Users\tada4\AppData\Local\VirtualStore
2017-04-21 20:06 - 2017-04-21 20:06 - 00000000 ____D C:\Users\tada4\AppData\Local\TileDataLayer
2017-04-21 20:06 - 2017-04-21 20:06 - 00000000 ____D C:\Users\tada4\AppData\Local\Publishers
2017-04-21 20:05 - 2017-04-22 21:38 - 00000000 ____D C:\Users\tada4\AppData\Local\ConnectedDevicesPlatform
2017-04-21 20:05 - 2017-04-21 20:05 - 00000020 ___SH C:\Users\tada4\ntuser.ini
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\Default User
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\Users\All Users
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Szablony
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Pulpit
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Menu Start
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-04-21 20:05 - 2017-04-21 20:05 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2017-04-21 20:04 - 2017-04-27 21:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-21 20:02 - 2017-04-27 20:45 - 00000000 ____D C:\Users\tada4
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\Ustawienia lokalne
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\Szablony
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\Moje dokumenty
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\Menu Start
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\Dane aplikacji
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\AppData\Local\Historia
2017-04-21 20:02 - 2017-04-21 20:02 - 00000000 _SHDL C:\Users\tada4\AppData\Local\Dane aplikacji
2017-04-21 20:00 - 2017-04-27 21:14 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-04-21 20:00 - 2017-04-21 20:00 - 00000568 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2017-04-21 20:00 - 2017-04-21 20:00 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-04-21 20:00 - 2017-04-21 20:00 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ETDSMBus_01011.Wdf
2017-04-21 20:00 - 2017-04-21 20:00 - 00000000 ____D C:\WINDOWS\Cnxt
2017-04-21 20:00 - 2017-04-21 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant
2017-04-21 20:00 - 2017-04-21 20:00 - 00000000 ____D C:\Program Files\Intel
2017-04-21 20:00 - 2017-04-21 20:00 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-04-21 20:00 - 2016-07-14 05:34 - 00103960 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2017-04-21 20:00 - 2016-07-14 05:34 - 00099864 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-04-21 19:59 - 2017-04-21 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2017-04-21 19:59 - 2017-04-21 19:59 - 00000000 ____D C:\Program Files\Dolby Digital Plus
2017-04-21 19:59 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-04-21 19:59 - 2014-12-09 20:11 - 00423128 _____ (Conexant Systems, Inc.) C:\WINDOWS\SysWOW64\SASrv.exe
2017-04-21 19:59 - 2014-10-20 14:54 - 00207576 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe
2017-04-21 19:59 - 2013-10-15 14:49 - 00002440 _____ C:\WINDOWS\system32\Drivers\SamSfPa.dat
2017-04-21 19:58 - 2017-04-27 21:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-21 19:58 - 2017-04-21 21:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-04-21 19:58 - 2017-04-21 19:59 - 00000000 ____D C:\ProgramData\Conexant
2017-04-21 19:58 - 2017-04-21 19:59 - 00000000 ____D C:\Program Files\CONEXANT
2017-04-21 19:58 - 2017-04-21 19:58 - 01701376 _____ (TODO: <Company name>) C:\WINDOWS\SysWOW64\RebootPrompt.exe
2017-04-21 19:58 - 2017-04-21 19:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-04-21 19:58 - 2017-04-21 19:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-04-21 19:58 - 2017-04-21 19:58 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-04-21 19:58 - 2017-01-16 01:55 - 06386232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-04-21 19:58 - 2017-01-16 01:55 - 02477624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-04-21 19:58 - 2017-01-16 01:55 - 00147000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2017-04-21 19:58 - 2017-01-16 01:54 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-04-21 19:58 - 2017-01-16 01:54 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-04-21 19:58 - 2017-01-16 01:54 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-04-21 19:58 - 2017-01-16 01:54 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-04-21 19:58 - 2017-01-16 01:54 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-04-21 19:58 - 2017-01-16 01:37 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-04-21 19:58 - 2017-01-13 12:25 - 07707057 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-04-21 19:57 - 2017-04-27 14:33 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-04-20 19:19 - 2017-04-20 18:00 - 00000820 _____ C:\Users\tada4\OneDrive\Dokumenty\indexfile.txt
2017-04-12 13:30 - 2017-04-01 03:05 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-04-12 13:30 - 2017-04-01 03:05 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-04-12 13:30 - 2017-04-01 03:04 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-04-12 13:30 - 2017-04-01 03:04 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-04-12 13:30 - 2017-04-01 03:04 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-04-12 13:30 - 2017-04-01 02:57 - 01411640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-04-12 13:30 - 2017-04-01 02:57 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-04-12 13:30 - 2017-04-01 02:57 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-04-12 13:30 - 2017-04-01 02:52 - 02444184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-04-12 13:30 - 2017-04-01 02:52 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-04-12 13:30 - 2017-04-01 02:51 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-04-12 13:30 - 2017-04-01 02:47 - 01323880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-04-12 13:30 - 2017-04-01 02:29 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-04-12 13:30 - 2017-04-01 02:28 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-04-12 13:30 - 2017-04-01 02:25 - 00986592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-04-12 13:30 - 2017-04-01 02:11 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-04-12 13:30 - 2017-04-01 02:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-04-12 13:30 - 2017-04-01 02:05 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-04-12 13:30 - 2017-04-01 02:04 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-04-12 13:30 - 2017-04-01 02:04 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-04-12 13:30 - 2017-04-01 02:03 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-04-12 13:30 - 2017-04-01 02:02 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-04-12 13:30 - 2017-04-01 02:01 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-04-12 13:30 - 2017-04-01 01:58 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-04-12 13:30 - 2017-04-01 01:58 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-04-12 13:30 - 2017-04-01 01:56 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-04-12 13:30 - 2017-04-01 01:55 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-04-12 13:30 - 2017-04-01 01:55 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-04-12 13:30 - 2017-04-01 01:52 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-04-12 13:30 - 2017-04-01 01:52 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-04-12 13:30 - 2017-04-01 01:50 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-04-12 13:30 - 2017-04-01 01:50 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-04-12 13:30 - 2017-04-01 01:45 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-04-12 13:30 - 2017-04-01 01:44 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-04-12 13:30 - 2017-03-31 23:00 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-04-12 13:30 - 2017-03-25 10:28 - 00543648 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-04-12 13:30 - 2017-03-25 09:58 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-04-11 12:45 - 2017-04-11 12:45 - 00950784 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-04-11 12:45 - 2017-04-11 12:45 - 00082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-04-07 20:41 - 2017-04-07 20:41 - 00000000 ____D C:\Users\tada4\Tracing
2017-03-28 16:27 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-03-28 16:27 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-03-28 16:27 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-03-28 16:27 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-03-28 16:27 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-03-28 16:27 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-04-27 21:34 - 2017-02-17 18:53 - 00000000 ____D C:\Users\tada4\AppData\LocalLow\Mozilla
2017-04-27 21:14 - 2017-02-17 16:37 - 00000000 __SHD C:\Users\tada4\IntelGraphicsProfiles
2017-04-27 21:12 - 2017-02-17 18:58 - 00000000 ___RD C:\Users\tada4\Desktop\Pliki mało używane
2017-04-26 09:56 - 2015-11-03 21:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-21 20:08 - 2017-02-17 16:39 - 00000000 ___RD C:\Users\tada4\OneDrive
2017-04-14 21:10 - 2017-02-17 22:15 - 00000000 ____D C:\Users\tada4\AppData\LocalLow\IObit

==================== Pliki w katalogu głównym wybranych folderów =======

2017-04-21 19:58 - 2017-04-21 19:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-04-21 19:57

==================== Koniec  FRST.txt ============================