Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-06-2017 Ran by Adrian (administrator) on ADRIAN-PC (01-06-2017 22:07:32) Running from C:\Users\Adrian\Downloads Loaded Profiles: Adrian (Available Profiles: Adrian) Platform: Windows 10 Home Version 1703 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Valve Corporation) E:\steam\steam\Steam.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Valve Corporation) E:\steam\steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\WinStore.App.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Valve Corporation) E:\steam\steam\bin\cef\cef.win7\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8725248 2015-11-13] (Realtek Semiconductor) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-18] (AVAST Software) HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" HKU\S-1-5-21-1329872462-3473978185-2887145185-1000\...\Run: [Steam] => E:\steam\steam\steam.exe [3019552 2017-04-26] (Valve Corporation) HKU\S-1-5-21-1329872462-3473978185-2887145185-1000\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun HKU\S-1-5-21-1329872462-3473978185-2887145185-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-18] (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{fb2c62dd-a220-4b9c-bf7c-6a6a98925b0f}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-05-31] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-31] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-05-31] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-31] (Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-05-31] (Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-31] (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default [2017-06-01] CHR Extension: (Prezentacje Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-04-23] CHR Extension: (Dokumenty Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-04-23] CHR Extension: (Dysk Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-23] CHR Extension: (YouTube) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-23] CHR Extension: (Szukaj w Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2017-04-23] CHR Extension: (Arkusze Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-23] CHR Extension: (Dokumenty Google offline) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-23] CHR Extension: (AdBlock) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-23] CHR Extension: (Avast Online Security) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-05-19] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-23] CHR Extension: (Gmail) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-23] CHR Extension: (Chrome Media Router) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [File not signed] R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-18] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-18] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [310496 2017-05-18] (AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1517576 2017-05-08] () R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3971264 2017-05-14] (Microsoft Corporation) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [372512 2017-04-24] (EasyAntiCheat Ltd) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2017-03-25] (Microsoft Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation) S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [7987104 2017-04-10] (INCA Internet Co., Ltd.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492480 2017-03-28] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492480 2017-03-28] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-03-28] (NVIDIA Corporation) S3 Visual Studio Analyzer RPC bridge; E:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe [34036 1998-06-06] (Microsoft Corporation) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-09-09] () R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-18] (AVAST Software s.r.o.) R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-18] (AVAST Software s.r.o.) R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-18] (AVAST Software s.r.o.) R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-18] (AVAST Software s.r.o.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-18] (AVAST Software) R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-05-18] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-18] (AVAST Software) R1 aswNetSec; C:\WINDOWS\system32\drivers\aswNetSec.sys [507928 2017-05-18] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-18] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-18] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-18] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-18] (AVAST Software) R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-18] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-18] (AVAST Software) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys [14456912 2017-05-19] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-03-28] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [66608 2017-04-01] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-03-28] (NVIDIA Corporation) S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] () S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) U1 aswbdisk; no ImagePath U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-06-01 22:05 - 2017-06-01 22:07 - 00000000 ____D C:\FRST 2017-06-01 22:05 - 2017-06-01 22:05 - 02433536 _____ (Farbar) C:\Users\Adrian\Downloads\FRST64.exe 2017-06-01 22:00 - 2017-06-01 22:07 - 00018071 _____ C:\Users\Adrian\Downloads\FRST.txt 2017-05-31 23:34 - 2017-05-31 23:34 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2017-05-31 23:32 - 2017-05-01 21:14 - 00134592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-05-31 23:32 - 2017-03-10 22:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-05-31 23:32 - 2017-03-10 22:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-05-31 23:32 - 2017-03-10 22:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-05-31 23:32 - 2017-03-10 22:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-05-31 23:31 - 2017-05-31 23:33 - 00000000 ____D C:\WINDOWS\LastGood 2017-05-22 23:25 - 2017-05-22 23:25 - 15520461 _____ C:\Users\Adrian\Downloads\NiggerMenu v6.23.zip 2017-05-21 23:40 - 2017-05-21 23:40 - 00000000 ____D C:\Users\Adrian\Documents\Mount&Blade Warband Savegames 2017-05-21 23:39 - 2017-05-21 23:42 - 00000000 ____D C:\Users\Adrian\Documents\Mount&Blade Warband 2017-05-21 23:39 - 2017-05-21 23:42 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Mount&Blade Warband 2017-05-21 02:18 - 2017-05-21 02:18 - 06204375 _____ C:\Users\Adrian\Downloads\mount_and_blade_wallpapers.zip 2017-05-20 18:44 - 2017-05-20 18:44 - 00270196 _____ C:\Users\Adrian\Downloads\Unit-22-Developing-Computer-Games (1).pdf 2017-05-20 17:57 - 2017-05-20 17:57 - 00001273 _____ C:\WINDOWS\VB.INI 2017-05-20 17:57 - 2017-05-20 17:57 - 00000535 _____ C:\WINDOWS\ODBCINST.INI 2017-05-20 17:57 - 2017-05-20 17:57 - 00000288 _____ C:\WINDOWS\ODBC.INI 2017-05-20 17:57 - 2017-05-20 17:57 - 00000093 _____ C:\WINDOWS\vbaddin.ini 2017-05-20 17:57 - 2017-05-20 17:57 - 00000000 ____D C:\WINDOWS\msapps 2017-05-20 17:57 - 2017-05-20 17:57 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Web Publishing 2017-05-20 17:57 - 2017-05-20 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 6.0 2017-05-20 17:57 - 2017-05-20 17:57 - 00000000 ____D C:\Program Files (x86)\Web Publish 2017-05-20 17:57 - 2017-05-20 17:57 - 00000000 _____ C:\WINDOWS\wplog.txt 2017-05-20 17:56 - 2017-05-20 17:56 - 00143300 _____ C:\WINDOWS\vssetup.ttf 2017-05-20 17:56 - 2017-05-20 17:56 - 00001409 _____ C:\WINDOWS\vssetup.for 2017-05-20 17:55 - 2017-05-20 17:55 - 00000000 ____D C:\WINDOWS\Java 2017-05-20 17:55 - 1998-06-02 14:46 - 00361744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\javart.dll 2017-05-20 17:55 - 1998-06-02 14:46 - 00155920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msawt.dll 2017-05-20 17:55 - 1998-06-02 14:45 - 00843024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjava.dll 2017-05-20 17:55 - 1998-06-02 14:45 - 00140048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jit.dll 2017-05-20 17:55 - 1998-06-02 13:10 - 00209168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\javacypt.dll 2017-05-20 17:55 - 1998-06-02 13:10 - 00032528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\javaprxy.dll 2017-05-20 17:55 - 1998-06-02 12:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\clspack.exe 2017-05-20 17:55 - 1998-06-02 12:43 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vmhelper.dll 2017-05-20 17:55 - 1998-06-02 12:41 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\setdebug.exe 2017-05-20 17:55 - 1998-06-02 12:29 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\jview.exe 2017-05-20 17:55 - 1998-06-02 12:29 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\wjview.exe 2017-05-20 17:55 - 1998-06-02 12:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\javaee.dll 2017-05-20 17:55 - 1998-06-02 12:29 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jdbgmgr.exe 2017-05-20 17:55 - 1998-06-02 12:28 - 00007356 _____ C:\WINDOWS\SysWOW64\javasup.vxd 2017-05-20 17:55 - 1998-06-02 12:05 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\extrac32.exe 2017-05-20 17:55 - 1998-06-02 12:05 - 00000113 _____ C:\WINDOWS\SysWOW64\zonedon.reg 2017-05-20 17:55 - 1998-06-02 12:05 - 00000113 _____ C:\WINDOWS\SysWOW64\zonedoff.reg 2017-05-20 17:55 - 1998-06-02 11:57 - 00006550 _____ C:\WINDOWS\jautoexp.dat 2017-05-20 17:55 - 1998-06-02 11:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dx3j.dll 2017-05-20 17:55 - 1998-06-02 11:56 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjdbc10.dll 2017-05-20 17:55 - 1998-06-02 11:46 - 00021444 _____ C:\WINDOWS\SysWOW64\javasec.hlp 2017-05-20 17:55 - 1998-06-02 11:46 - 00011403 _____ C:\WINDOWS\SysWOW64\javaperm.hlp 2017-05-20 17:48 - 2017-05-20 17:51 - 00000000 ____D C:\Users\Adrian\Desktop\VB6 2017-05-20 17:42 - 2017-05-20 17:42 - 00000000 ____D C:\Users\Adrian\AppData\Local\MicrosoftEdge 2017-05-20 17:28 - 2015-07-10 20:04 - 00520128 _____ (Microsoft Corporation) C:\WINDOWS\system\MAPI.DLL 2017-05-20 17:28 - 2015-05-09 22:46 - 00024604 _____ C:\WINDOWS\system\ole2.reg 2017-05-20 17:28 - 2015-05-09 22:44 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system\storage.dll 2017-05-20 17:28 - 2014-06-30 15:54 - 01355776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvbvm50.dll 2017-05-20 17:28 - 2014-06-30 15:54 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\Vb40016.dll 2017-05-20 17:28 - 2014-06-30 15:54 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb40032.dll 2017-05-20 17:28 - 2012-06-05 23:56 - 00209200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDBLIB3.DLL 2017-05-20 17:28 - 2012-06-05 23:56 - 00209200 _____ (Microsoft Corporation) C:\WINDOWS\system\W3DBLIB.DLL 2017-05-20 17:28 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CAPICOM.DLL 2017-05-20 17:28 - 2004-02-17 05:24 - 00074810 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlu.dll 2017-05-20 17:28 - 2004-02-17 05:23 - 00090169 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atla.dll 2017-05-20 17:28 - 2004-01-23 04:01 - 00130816 _____ (Microsoft Corporation) C:\WINDOWS\system\PENWIN.DLL 2017-05-20 17:28 - 2004-01-19 12:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system\ole2prox.dll 2017-05-20 17:28 - 2001-10-20 11:00 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system\typelib.dll 2017-05-20 17:28 - 2001-10-20 11:00 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system\ole2nls.dll 2017-05-20 17:28 - 2001-10-20 11:00 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system\ole2.dll 2017-05-20 17:28 - 2001-05-08 19:00 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb 2017-05-20 17:28 - 1998-08-14 12:00 - 00051392 _____ C:\WINDOWS\system\wbtrcall.dll 2017-05-20 17:28 - 1997-02-19 17:29 - 00263440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OLEMSG32.DLL 2017-05-20 17:28 - 1997-02-19 17:11 - 00231264 _____ (Microsoft Corporation) C:\WINDOWS\system\OLEMSG.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00543584 _____ (Microsoft Corporation) C:\WINDOWS\system\DAO2516.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00534144 _____ (Microsoft Corporation) C:\WINDOWS\system\OC25.dll 2017-05-20 17:28 - 1995-07-26 00:00 - 00203824 _____ (Microsoft Corporation) C:\WINDOWS\system\SQLSRVR.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00137788 _____ C:\WINDOWS\system\INSTCAT.SQL 2017-05-20 17:28 - 1995-07-26 00:00 - 00136704 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\grdkrn32.dll 2017-05-20 17:28 - 1995-07-26 00:00 - 00092576 _____ (Microsoft Corporation) C:\WINDOWS\system\ODBCINST.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00088896 _____ (Microsoft Corporation) C:\WINDOWS\system\ODBCCURS.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00086848 _____ (Microsoft Corporation) C:\WINDOWS\system\Vbdb16.dll 2017-05-20 17:28 - 1995-07-26 00:00 - 00056240 _____ (Microsoft Corporation) C:\WINDOWS\system\ODBC.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00035200 _____ (Microsoft Corporation) C:\WINDOWS\system\VAEN21.OLB 2017-05-20 17:28 - 1995-07-26 00:00 - 00026992 _____ (Microsoft Corporation) C:\WINDOWS\system\ctl3dv2.dll 2017-05-20 17:28 - 1995-07-26 00:00 - 00012976 _____ (Microsoft Corporation) C:\WINDOWS\system\SCP.DLL 2017-05-20 17:28 - 1995-07-26 00:00 - 00010944 _____ (Microsoft Corporation) C:\WINDOWS\system\dbnmp3.dll 2017-05-20 17:28 - 1995-07-26 00:00 - 00006464 _____ (Microsoft Corporation) C:\WINDOWS\system\ODBCADM.EXE 2017-05-20 17:28 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\Vbrun300.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00151296 _____ (Microsoft Corporation) C:\WINDOWS\system\msolevbx.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00089088 _____ C:\WINDOWS\system\compobj.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system\ddeml.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00031744 _____ (Microsoft Corp.) C:\WINDOWS\system\msafinx.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00014480 _____ (Microsoft Corporation) C:\WINDOWS\system\ctl3d.dll 2017-05-20 17:28 - 1993-04-28 00:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system\VBOA300.dll 2017-05-20 17:28 - 1993-04-07 00:00 - 00010512 _____ (Microsoft Corporation) C:\WINDOWS\system\MSCPXLT.DLL 2017-05-20 17:28 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\Vbrun200.dll 2017-05-20 17:28 - 1992-10-21 00:00 - 00038366 _____ C:\WINDOWS\system\Vbodbca.dll 2017-05-20 17:28 - 1992-10-02 00:00 - 00011024 _____ C:\WINDOWS\system\SQLSETUP.DLL 2017-05-20 17:28 - 1991-05-10 00:00 - 00271264 _____ C:\WINDOWS\system\Vbrun100.dll 2017-05-20 17:21 - 2017-05-20 17:21 - 00270196 _____ C:\Users\Adrian\Downloads\Unit-22-Developing-Computer-Games.pdf 2017-05-19 18:05 - 2017-05-19 18:05 - 35397528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 28632152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00969624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00920664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00507984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01996696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01598360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00999832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00829848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00659864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00054680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 40210512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 35290192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 03800984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 03256408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 11161992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 10648512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 09102480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 08891160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00791792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00703880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00626384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00591672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 11129704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 09335520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 01298696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 01013344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-05-19 14:22 - 2017-05-19 14:22 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-05-19 14:22 - 2017-05-19 14:22 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-05-19 13:28 - 2017-05-18 21:36 - 00065542 _____ C:\data.dat 2017-05-19 00:23 - 2017-05-18 21:36 - 00005212 _____ C:\wait_1.msa 2017-05-19 00:23 - 2017-05-18 21:36 - 00005175 _____ C:\wait.msa 2017-05-19 00:03 - 2017-05-19 00:03 - 01036304 _____ (M2Bob-Team) C:\Users\Adrian\Downloads\M2Bob - Patcher (1).exe 2017-05-19 00:00 - 2017-05-19 00:00 - 00000000 ___HD C:\$AV_ASW 2017-05-18 22:52 - 2017-05-19 17:41 - 00000000 ____D C:\Program Files (x86)\1lvorjqlnmr 2017-05-18 22:41 - 2017-05-18 22:41 - 06919904 _____ (AVAST Software) C:\Users\Adrian\Downloads\avast_internet_security_setup_online (1).exe 2017-05-18 22:38 - 2017-05-18 22:38 - 00507928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys 2017-05-18 22:38 - 2017-05-18 22:38 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Internet Security.lnk 2017-05-18 22:38 - 2017-05-18 22:38 - 00001967 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk 2017-05-18 22:38 - 2017-05-18 22:32 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2017-05-18 22:37 - 2017-05-18 22:37 - 06919904 _____ (AVAST Software) C:\Users\Adrian\Downloads\avast_internet_security_setup_online.exe 2017-05-18 22:34 - 2017-05-31 23:30 - 00004010 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1495143254 2017-05-18 22:34 - 2017-05-31 23:30 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2017-05-18 22:34 - 2017-05-18 22:34 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2017-05-18 22:33 - 2017-05-18 22:33 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2017-05-18 22:33 - 2017-05-18 22:33 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\AVAST Software 2017-05-18 22:32 - 2017-05-18 22:38 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2017-05-18 22:32 - 2017-05-18 22:38 - 00158368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.149514351143702 2017-05-18 22:32 - 2017-05-18 22:38 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2017-05-18 22:32 - 2017-05-18 22:32 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-05-18 22:32 - 2017-05-18 22:32 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-05-18 22:31 - 2017-05-18 22:33 - 00000000 ____D C:\Program Files\AVAST Software 2017-05-18 22:30 - 2017-05-19 00:43 - 00000000 ____D C:\ProgramData\AVAST Software 2017-05-18 22:20 - 2017-05-18 22:20 - 06919904 _____ (AVAST Software) C:\Users\Adrian\Downloads\avast_free_antivirus_setup_online.exe 2017-05-18 21:36 - 2017-05-19 12:44 - 00000000 ____D C:\Users\Adrian\Downloads\Resources 2017-05-18 21:36 - 2017-05-18 21:36 - 01636352 _____ C:\Users\Adrian\Downloads\M2Bob_Dll.dll 2017-05-18 21:36 - 2017-05-18 21:36 - 00045056 _____ C:\Users\Adrian\Downloads\M2Bob.exe 2017-05-18 21:35 - 2017-05-18 21:36 - 01036304 _____ (M2Bob-Team) C:\Users\Adrian\Downloads\M2Bob - Patcher.exe 2017-05-18 20:35 - 2017-05-18 20:35 - 13362294 _____ C:\Users\Adrian\Downloads\M2Bob-Version 8.0.5 (1).zip 2017-05-18 20:22 - 2017-05-18 20:23 - 13362294 _____ C:\Users\Adrian\Downloads\M2Bob-Version 8.0.5.zip 2017-05-17 21:37 - 2017-05-17 21:37 - 03217288 _____ (Gameforge 4D GmbH ) C:\Users\Adrian\Downloads\metin2_installer (1).exe 2017-05-17 21:31 - 2017-05-17 21:34 - 10716618 _____ C:\Users\Adrian\Downloads\metin2mod_pl_16052017.exe 2017-05-17 20:52 - 2017-05-18 20:53 - 00000661 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2.lnk 2017-05-17 20:52 - 2017-05-17 20:52 - 00000661 _____ C:\Users\Public\Desktop\Metin2.lnk 2017-05-17 20:51 - 2017-05-17 20:51 - 03217288 _____ (Gameforge 4D GmbH ) C:\Users\Adrian\Downloads\metin2_installer.exe 2017-05-17 16:29 - 2017-05-17 16:29 - 140945511 _____ C:\Users\Adrian\Downloads\Rivalia_Patcher (1).rar 2017-05-14 20:47 - 2017-05-14 20:47 - 00089020 _____ C:\Users\Adrian\Downloads\Carpet_Sales_Figures for merit.xlsx 2017-05-09 18:32 - 2017-04-28 02:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-05-09 18:32 - 2017-04-28 02:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-05-09 18:32 - 2017-04-28 02:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-05-09 18:32 - 2017-04-28 02:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-05-09 18:32 - 2017-04-28 02:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2017-05-09 18:32 - 2017-04-28 02:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-05-09 18:32 - 2017-04-28 02:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-05-09 18:32 - 2017-04-28 02:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-05-09 18:32 - 2017-04-28 02:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-05-09 18:32 - 2017-04-28 02:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-05-09 18:32 - 2017-04-28 02:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-05-09 18:32 - 2017-04-28 02:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-05-09 18:32 - 2017-04-28 02:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-05-09 18:32 - 2017-04-28 02:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-05-09 18:32 - 2017-04-28 02:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-05-09 18:32 - 2017-04-28 02:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-05-09 18:32 - 2017-04-28 02:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2017-05-09 18:32 - 2017-04-28 02:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-05-09 18:32 - 2017-04-28 02:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-05-09 18:32 - 2017-04-28 02:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-05-09 18:32 - 2017-04-28 02:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-05-09 18:32 - 2017-04-28 01:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-05-09 18:32 - 2017-04-28 01:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-05-09 18:32 - 2017-04-28 01:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-05-09 18:32 - 2017-04-28 01:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-05-09 18:32 - 2017-04-28 01:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2017-05-09 18:32 - 2017-04-28 01:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-05-09 18:32 - 2017-04-28 01:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-05-09 18:32 - 2017-04-28 01:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-05-09 18:32 - 2017-04-28 01:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-05-09 18:32 - 2017-04-28 01:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-05-09 18:32 - 2017-04-28 01:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-05-09 18:32 - 2017-04-28 01:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-05-09 18:32 - 2017-04-28 01:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-05-09 18:32 - 2017-04-28 01:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-05-09 18:32 - 2017-04-28 01:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-05-09 18:32 - 2017-04-28 01:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-05-09 18:32 - 2017-04-28 01:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-05-09 18:32 - 2017-04-28 01:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-05-09 18:32 - 2017-04-28 01:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-05-09 18:32 - 2017-04-28 01:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-05-09 18:32 - 2017-04-28 01:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-05-09 18:32 - 2017-04-28 01:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-05-09 18:32 - 2017-04-28 01:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-05-09 18:32 - 2017-04-28 01:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-05-09 18:32 - 2017-04-28 01:42 - 04544000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe 2017-05-09 18:32 - 2017-04-28 01:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-05-09 18:32 - 2017-04-28 01:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-05-09 18:32 - 2017-04-28 01:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-05-09 18:32 - 2017-04-28 01:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-05-09 18:32 - 2017-04-28 01:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-05-09 18:32 - 2017-04-28 01:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-05-09 18:32 - 2017-04-28 01:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-05-09 18:32 - 2017-04-28 01:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-05-09 18:32 - 2017-04-28 01:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-05-09 18:32 - 2017-04-28 01:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-05-09 18:32 - 2017-04-28 01:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2017-05-09 18:32 - 2017-04-28 01:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-05-09 18:32 - 2017-04-28 01:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-05-09 18:32 - 2017-04-28 01:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-05-09 18:32 - 2017-04-28 01:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-05-09 18:32 - 2017-04-28 01:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-05-09 18:32 - 2017-04-28 01:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-05-09 18:32 - 2017-04-28 01:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-05-09 18:32 - 2017-04-28 01:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-05-09 18:32 - 2017-04-28 01:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-05-09 18:32 - 2017-04-28 01:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-05-09 18:32 - 2017-04-28 01:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-05-09 18:32 - 2017-04-28 01:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-05-09 18:32 - 2017-04-28 01:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-05-09 18:32 - 2017-04-28 01:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-05-09 18:32 - 2017-04-28 01:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-05-09 18:32 - 2017-04-28 01:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-05-09 18:32 - 2017-04-28 01:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-05-09 18:32 - 2017-04-28 01:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-05-09 18:32 - 2017-04-28 01:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-05-09 18:32 - 2017-04-28 01:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-05-09 18:32 - 2017-04-28 01:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-05-09 18:32 - 2017-04-28 01:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-05-09 18:32 - 2017-04-28 01:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-05-09 18:32 - 2017-04-28 01:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-05-09 18:32 - 2017-04-28 01:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-05-09 18:32 - 2017-04-28 01:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-05-09 18:32 - 2017-04-28 01:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-05-09 18:32 - 2017-04-28 01:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-05-09 18:32 - 2017-04-28 01:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-05-09 18:32 - 2017-04-28 01:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-05-09 18:32 - 2017-04-28 01:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-05-09 18:32 - 2017-04-28 01:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-05-09 18:32 - 2017-04-28 01:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2017-05-09 18:32 - 2017-04-28 01:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-05-09 18:32 - 2017-04-28 01:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-05-09 18:32 - 2017-04-28 01:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-05-09 18:32 - 2017-04-28 01:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2017-05-09 18:32 - 2017-04-28 01:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-05-09 18:32 - 2017-04-28 01:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-05-09 18:32 - 2017-04-28 01:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-05-09 18:32 - 2017-04-28 01:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-05-09 18:32 - 2017-04-28 01:00 - 05776384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe 2017-05-09 18:32 - 2017-04-28 00:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-05-09 18:32 - 2017-04-28 00:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-05-09 18:32 - 2017-04-28 00:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-05-09 18:32 - 2017-04-28 00:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-05-09 18:32 - 2017-04-28 00:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-05-09 18:32 - 2017-04-28 00:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-05-09 18:32 - 2017-04-28 00:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-05-09 18:32 - 2017-04-28 00:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-05-09 18:32 - 2017-04-28 00:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-05-09 18:32 - 2017-04-28 00:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-05-09 18:32 - 2017-04-28 00:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-05-09 18:32 - 2017-04-28 00:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-05-09 18:32 - 2017-04-28 00:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-05-09 18:32 - 2017-04-28 00:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-05-09 18:32 - 2017-04-28 00:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-05-09 18:32 - 2017-04-28 00:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-05-09 18:32 - 2017-04-19 08:07 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-05-09 18:32 - 2017-04-19 08:06 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-05-09 18:32 - 2017-04-19 08:04 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-05-09 18:32 - 2017-04-19 08:02 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-05-09 18:32 - 2017-04-19 07:19 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-05-09 18:32 - 2017-04-19 07:18 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-05-09 18:32 - 2017-04-19 07:16 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-05-09 18:32 - 2017-04-19 07:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-05-09 18:32 - 2017-04-19 07:14 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-05-09 18:32 - 2017-04-19 07:13 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-05-09 18:32 - 2017-04-19 07:13 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-05-09 18:32 - 2017-04-19 07:12 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-05-09 18:32 - 2017-04-19 07:12 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-05-09 18:32 - 2017-04-19 07:12 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-05-09 18:32 - 2017-04-19 07:11 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-05-09 18:32 - 2017-04-19 07:11 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-05-09 18:32 - 2017-04-19 07:10 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-05-09 18:32 - 2017-04-19 07:10 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-05-09 18:32 - 2017-04-19 07:10 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-05-09 18:32 - 2017-04-19 07:08 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-05-09 18:32 - 2017-04-19 07:08 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-05-09 18:32 - 2017-04-19 07:07 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll 2017-05-09 18:32 - 2017-04-19 07:07 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-05-09 18:32 - 2017-04-19 07:07 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-05-09 18:32 - 2017-04-19 07:06 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-05-09 18:32 - 2017-04-19 07:04 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-05-09 18:32 - 2017-04-19 07:04 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-05-09 18:32 - 2017-04-19 07:02 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-05-09 18:32 - 2017-04-19 07:01 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-05-09 18:32 - 2017-04-19 06:59 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-05-09 18:32 - 2017-04-19 06:59 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-05-09 18:32 - 2017-04-19 06:58 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-05-09 18:32 - 2017-04-19 06:37 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-05-09 18:32 - 2017-04-19 06:36 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-05-09 18:32 - 2017-04-19 06:35 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-05-09 18:32 - 2017-04-19 06:34 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-05-09 18:32 - 2017-04-19 06:34 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-05-09 18:32 - 2017-04-19 06:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-05-09 18:32 - 2017-04-19 06:32 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-05-09 18:32 - 2017-04-19 06:30 - 02102272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll 2017-05-09 18:32 - 2017-04-19 06:30 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-05-09 18:32 - 2017-04-19 06:29 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-05-09 18:32 - 2017-04-14 01:35 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-05-09 18:32 - 2017-04-14 01:35 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-05-09 18:32 - 2017-04-14 01:35 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-05-09 18:32 - 2017-04-14 01:33 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-05-09 18:32 - 2017-04-14 01:32 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-05-09 18:32 - 2017-04-14 01:30 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-05-09 18:32 - 2017-04-14 00:43 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-05-09 18:32 - 2017-04-14 00:43 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-05-09 18:32 - 2017-04-14 00:41 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-05-09 18:32 - 2017-04-14 00:41 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-05-09 18:32 - 2017-04-14 00:40 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-05-09 18:32 - 2017-04-14 00:39 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-05-09 18:32 - 2017-04-14 00:39 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-05-09 18:32 - 2017-04-14 00:39 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-05-09 18:32 - 2017-04-14 00:39 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-05-09 18:32 - 2017-04-14 00:39 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-05-09 18:32 - 2017-04-14 00:38 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-05-09 18:32 - 2017-04-14 00:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-05-09 18:32 - 2017-04-14 00:37 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-05-09 18:32 - 2017-04-14 00:37 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-05-09 18:32 - 2017-04-14 00:37 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-05-09 18:32 - 2017-04-14 00:37 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-05-09 18:32 - 2017-04-14 00:36 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-05-09 18:32 - 2017-04-14 00:36 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-05-09 18:32 - 2017-04-14 00:35 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-05-09 18:32 - 2017-04-14 00:35 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-05-09 18:32 - 2017-04-14 00:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-05-09 18:32 - 2017-04-14 00:34 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-05-09 18:32 - 2017-04-14 00:34 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-05-09 18:32 - 2017-04-14 00:33 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-05-09 18:32 - 2017-04-14 00:33 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-05-09 18:32 - 2017-04-14 00:31 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-05-09 18:32 - 2017-04-14 00:31 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-05-09 18:32 - 2017-04-14 00:29 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-05-09 18:32 - 2017-04-14 00:29 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-05-09 18:32 - 2017-04-14 00:29 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-05-09 18:32 - 2017-04-14 00:29 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-05-09 18:32 - 2017-04-14 00:29 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-05-09 18:32 - 2017-04-14 00:28 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-05-09 18:32 - 2017-04-14 00:26 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-05-09 18:32 - 2017-04-14 00:25 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-05-09 18:32 - 2017-04-14 00:24 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-05-09 18:32 - 2017-04-14 00:21 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-05-09 18:32 - 2017-04-14 00:21 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-05-09 18:32 - 2017-04-14 00:18 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-05-09 18:32 - 2017-04-14 00:18 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-05-09 18:32 - 2017-04-14 00:15 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-05-09 18:32 - 2017-04-14 00:15 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-05-09 18:32 - 2017-04-14 00:13 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-05-09 18:32 - 2017-04-14 00:13 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-05-09 18:32 - 2017-04-14 00:08 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-05-09 18:32 - 2017-04-14 00:06 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-05-09 18:32 - 2017-04-14 00:04 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-05-09 18:32 - 2017-04-14 00:01 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-05-08 20:02 - 2017-05-08 20:07 - 00000000 ____D C:\Users\Adrian\Documents\DayZ 2017-05-08 20:02 - 2017-05-08 20:07 - 00000000 ____D C:\Users\Adrian\AppData\Local\DayZ 2017-05-08 17:21 - 2017-05-08 17:22 - 1094877536 _____ C:\Users\Adrian\Downloads\ValantiaPL_Klient.rar 2017-05-08 17:13 - 2017-05-08 17:14 - 1114452234 _____ C:\Users\Adrian\Downloads\Tastria.pl.rar 2017-05-08 16:23 - 2017-05-08 16:23 - 00000000 ____D C:\Program Files\Common Files\INCA Shared 2017-05-08 16:23 - 2017-04-10 14:52 - 07987104 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des 2017-05-08 16:23 - 2004-12-30 13:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys 2017-05-08 16:23 - 2003-07-15 22:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd 2017-05-07 00:03 - 2017-05-07 00:03 - 12985222 _____ C:\Users\Adrian\Downloads\NiggerMenu v6.22.zip 2017-05-02 18:24 - 2017-05-02 18:24 - 00000000 ____D C:\Users\Adrian\Documents\Custom Office Templates 2017-05-02 18:01 - 2017-06-01 21:25 - 00004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4418B695-83FB-4940-91A1-8FACEAC45C2A} ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-06-01 22:06 - 2017-04-23 17:03 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Skype 2017-06-01 21:29 - 2017-04-28 22:31 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\TS3Client 2017-06-01 19:51 - 2017-04-25 01:13 - 00000000 ____D C:\Users\Adrian 2017-06-01 19:07 - 2017-04-25 01:12 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-06-01 15:23 - 2017-04-25 01:13 - 01432106 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-01 15:08 - 2017-04-25 01:12 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-31 23:34 - 2017-03-18 22:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-05-31 23:34 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-05-31 23:34 - 2017-03-18 22:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-05-31 23:34 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-05-31 23:33 - 2017-04-27 14:41 - 00000000 ____D C:\Program Files\Microsoft Office 2017-05-31 23:33 - 2017-04-25 01:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-05-31 23:33 - 2017-04-23 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-05-31 23:33 - 2017-03-18 22:01 - 00000000 ____D C:\WINDOWS\INF 2017-05-31 23:32 - 2017-04-25 12:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-05-31 23:32 - 2017-04-23 15:15 - 00000000 ____D C:\Temp 2017-05-31 23:31 - 2017-04-25 01:12 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-05-23 12:19 - 2017-04-23 22:55 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-05-23 12:18 - 2017-04-23 22:55 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-05-22 20:55 - 2017-04-25 01:18 - 00000000 ____D C:\Users\Adrian\AppData\Local\Packages 2017-05-22 20:37 - 2017-05-01 16:01 - 00000000 ____D C:\Users\Adrian\AppData\Local\CrashDumps 2017-05-22 08:14 - 2017-04-25 01:15 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-05-22 01:53 - 2017-03-18 12:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-05-20 18:00 - 2017-04-23 15:10 - 00000000 ____D C:\Users\Adrian\AppData\Local\VirtualStore 2017-05-20 17:57 - 2017-03-18 22:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-05-20 17:57 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\System 2017-05-20 17:57 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\Help 2017-05-19 18:03 - 2017-04-23 16:15 - 01609232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-05-19 18:03 - 2017-04-23 16:15 - 00226712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-05-19 17:47 - 2017-01-04 15:02 - 03647864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-05-19 17:47 - 2016-08-27 00:26 - 04136736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-05-19 14:22 - 2016-08-02 23:52 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb 2017-05-18 23:37 - 2017-04-25 14:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-05-18 23:37 - 2017-04-23 17:03 - 00000000 ____D C:\ProgramData\Skype 2017-05-18 22:40 - 2017-04-25 01:15 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2017-05-18 22:40 - 2017-04-23 16:29 - 00000000 ____D C:\ProgramData\Norton 2017-05-18 22:40 - 2017-03-18 22:03 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2017-05-18 22:39 - 2010-11-21 04:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-05-18 22:32 - 2017-04-23 22:40 - 00000000 ____D C:\Program Files\Common Files\AV 2017-05-11 23:39 - 2017-04-23 15:14 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-05-11 23:39 - 2017-04-23 15:14 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-05-11 14:02 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\rescache 2017-05-10 18:57 - 2017-04-26 19:44 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Mirroring360 2017-05-10 15:40 - 2017-04-25 01:18 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-05-10 15:40 - 2017-04-25 01:12 - 00383720 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-05-10 01:08 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-05-10 01:08 - 2017-03-18 12:40 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-05-09 18:34 - 2017-03-18 21:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-05-08 20:01 - 2017-04-23 15:15 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-07 01:49 - 2017-04-30 16:41 - 00001749 _____ C:\Users\Public\Desktop\League of Legends.lnk 2017-05-07 00:44 - 2017-05-01 15:34 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\GTAV Nigger Menu 2017-05-06 19:11 - 2017-04-25 14:05 - 00634920 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys 2017-05-05 15:45 - 2017-04-23 17:22 - 00000000 ___RD C:\Users\Adrian\Desktop\Ważne 2017-05-03 17:43 - 2017-04-23 17:20 - 00000000 ___RD C:\Users\Adrian\Desktop\Gry ==================== Files in the root of some directories ======= 2017-04-25 01:12 - 2017-04-25 01:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-06-01 01:08 ==================== End of FRST.txt ============================