Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 06.06.2018 01 Uruchomiony przez Szymon (administrator) KOMPUTER (10-06-2018 19:27:02) Uruchomiony z C:\Users\Szymon\Downloads Załadowane profile: Szymon (Dostępne profile: Szymon) Platform: Windows 10 Pro Wersja 1709 16299.431 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Hi-Rez Studios) D:\Hi-Rez Studios\HiPatchService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\NisSrv.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.428_none_1704c21831ffb4a8\TiWorker.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-06-29] (Realtek Semiconductor) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKU\S-1-5-21-3666143414-1259609894-3126919332-1000\...\MountPoints2: {a98ef6e9-6ebb-11e7-b430-806e6f6e6963} - "E:\Overwatch Setup.exe" HKU\S-1-5-21-3666143414-1259609894-3126919332-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [36864 2017-09-29] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2017-07-22] ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe () Startup: C:\Users\Szymon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ClickMonitorDDC.lnk [2018-06-03] GroupPolicy: Ograniczenia ? <==== UWAGA GroupPolicy\User: Ograniczenia ? <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{E2C61A78-C65E-49EB-B7A5-5F29F63959EB}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{F0D23F0D-5E44-4D67-A6E9-12E5CE6C54A9}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope - brak wartości SearchScopes: HKU\S-1-5-21-3666143414-1259609894-3126919332-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04 SearchScopes: HKU\S-1-5-21-3666143414-1259609894-3126919332-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04 SearchScopes: HKU\S-1-5-21-3666143414-1259609894-3126919332-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = BHO-x32: Search@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\Szymon\AppData\Local\Mail.Ru\Sputnik\ie_addon_dll.dll => Brak pliku Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL Brak pliku Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL Brak pliku Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL Brak pliku Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL Brak pliku FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [Brak pliku] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll [2011-08-30] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [Brak pliku] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) Chrome: ======= CHR HomePage: Default -> inline.go.mail.ru CHR StartupUrls: Default -> "hxxp://www.google.com/webhp?source=search_app" CHR DefaultSearchURL: Default -> hxxps://inline.go.mail.ru/search?inline_comp=dse&q={searchTerms}&fr=chxtn12.0.23 CHR DefaultSearchKeyword: Default -> inline.go.mail.ru CHR DefaultSuggestURL: Default -> hxxp://suggests.go.mail.ru/chrome?q={searchTerms} CHR Profile: C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default [2018-06-10] CHR Extension: (Prezentacje) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-06] CHR Extension: (Dokumenty) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-06] CHR Extension: (Dysk Google) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-06] CHR Extension: (YouTube) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-06] CHR Extension: (Adblock Plus) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-05-16] CHR Extension: (Video Downloader professional) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2018-04-09] CHR Extension: (Arkusze) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-06] CHR Extension: (Dokumenty Google offline) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-06] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03] CHR Extension: (Gmail) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-06] CHR Extension: (Chrome Media Router) - C:\Users\Szymon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-09] CHR HKLM-x32\...\Chrome\Extension: [bhjhnafpiilpffhglajcaepjbnbjemci] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [dloebpogmbloiggbbkganacecpobmlde] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [hcadgijmedbfgciegjomfpjcdchlhnif] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-05-06] () S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526888 2017-10-06] (EasyAntiCheat Ltd) U2 HiPatchService; D:\Hi-Rez Studios\HiPatchService.exe [9728 2018-05-30] (Hi-Rez Studios) [Brak podpisu cyfrowego] S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [7496568 2018-02-25] (INCA Internet Co., Ltd.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-01-22] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-01-22] (NVIDIA Corporation) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-12-14] (Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-06-05] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-06-05] (Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r S3 Steam Client Service; "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [90560 2017-02-24] (Alcorlink Corp.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7a39871618b19f06\nvlddmkm.sys [17493824 2018-01-22] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [58816 2018-05-07] (NVIDIA Corporation) S3 RTL8192cu; C:\WINDOWS\System32\DRIVERS\RTL8192cu.sys [926824 2014-04-08] (Realtek Semiconductor Corporation ) S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [3821064 2016-10-01] (Realtek Semiconductor Corporation ) S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [151552 2017-09-30] (Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-06-05] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [313384 2018-06-05] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-06-05] (Microsoft Corporation) S3 xhunter1; C:\WINDOWS\xhunter1.sys [48656 2018-05-09] (Wellbia.com Co., Ltd.) R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2018-02-06] (Zemana Ltd.) S3 dump_wmimmc; \??\d:\elswordpl\data\GameGuard\dump_wmimmc.sys [X] U3 idsvc; Brak ImagePath S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X] U3 wpcsvc; Brak ImagePath S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-06-10 19:27 - 2018-06-10 19:28 - 000013884 _____ C:\Users\Szymon\Downloads\FRST.txt 2018-06-05 19:51 - 2018-06-05 19:51 - 048041212 _____ C:\Users\Szymon\Downloads\Championify-WIN-2.1.5.zip 2018-06-05 10:22 - 2018-06-10 19:26 - 000000000 ____D C:\Users\Szymon\Downloads\FRST-OlderVersion 2018-06-05 09:54 - 2018-06-05 09:54 - 000000000 ____D C:\UWT 2018-06-05 08:35 - 2018-06-05 08:35 - 000106816 _____ C:\Users\Szymon\Downloads\FixWin10.zip 2018-06-02 18:41 - 2018-06-09 21:46 - 000000000 ____D C:\Users\Szymon\Documents\Overwatch 2018-06-02 18:41 - 2018-05-17 06:59 - 000002307 _____ C:\Users\Szymon\Desktop\Google Chrome.lnk 2018-06-02 18:40 - 2018-06-02 18:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch 2018-06-02 10:06 - 2018-06-02 10:06 - 000000000 ____D C:\ProgramData\Blizzard Entertainment 2018-06-02 10:05 - 2018-06-02 19:09 - 000000000 ____D C:\Users\Szymon\AppData\Local\Blizzard Entertainment 2018-06-02 10:03 - 2018-06-10 15:30 - 000000000 ____D C:\Users\Szymon\AppData\Local\Battle.net 2018-06-02 10:03 - 2018-06-02 18:42 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\Battle.net 2018-06-02 10:03 - 2017-05-08 10:26 - 097245696 _____ (SQUARE ENIX CO., LTD.) C:\Users\Szymon\Desktop\NieRAutomata.exe 2018-06-02 10:02 - 2018-06-02 10:02 - 000000489 _____ C:\Users\Public\Desktop\Battle.net.lnk 2018-06-02 10:02 - 2018-06-02 10:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2018-06-02 10:02 - 2018-02-07 10:13 - 023680208 _____ (Firaxis Games) C:\Users\Szymon\Desktop\CivilizationVI.exe 2018-06-02 10:01 - 2018-02-22 13:46 - 028478976 _____ (Electronic Arts Inc.) C:\Users\Szymon\Desktop\The Sims 4.exe 2018-06-02 10:00 - 2016-08-27 11:06 - 046531664 _____ (CD Projekt Red) C:\Users\Szymon\Desktop\Witcher 3 Wild Hunt.exe 2018-06-02 09:55 - 2018-06-02 09:55 - 000000000 ____D C:\Users\Szymon\AppData\Local\Blizzard 2018-06-02 09:52 - 2018-06-02 09:53 - 000000000 ____D C:\ProgramData\Battle.net 2018-06-02 09:47 - 2018-06-02 09:48 - 004528112 _____ (Blizzard Entertainment) C:\Users\Szymon\Downloads\Battle.net-Setup.exe 2018-05-27 10:16 - 2018-05-27 10:16 - 000000000 ____D C:\Program Files (x86)\VIA 2018-05-27 10:11 - 2018-05-27 10:13 - 145957149 _____ C:\Users\Szymon\Downloads\ViaHDAudioDriver-10.1200A.zip 2018-05-27 09:59 - 2018-05-27 09:59 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2018-05-27 09:59 - 2018-05-27 09:59 - 000000000 ____D C:\Program Files\Realtek 2018-05-27 09:58 - 2018-05-27 09:58 - 000000000 ____D C:\Program Files (x86)\Realtek 2018-05-27 09:58 - 2017-06-29 18:55 - 015202032 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE3.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 013122576 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 012988336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 006410088 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV3apo.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 005938904 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 005593608 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003509256 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003507688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003299816 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 003092336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 002190976 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 001382232 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 001337640 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000965024 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000923736 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000873456 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000852128 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000677664 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000604792 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000568256 _____ (Intel Corporation) C:\WINDOWS\system32\tbb_waves.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000525768 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000447712 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000231912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000221960 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000209528 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000158696 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000151784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000134200 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000110976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000090912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000088312 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000084608 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2018-05-27 09:58 - 2017-06-29 18:55 - 000075536 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 024608272 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioCapture64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 023863048 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 023764392 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRender64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 010536152 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 004059960 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 002291304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001780616 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001591056 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001422920 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001334376 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001213656 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 001166152 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000999848 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000727432 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000708312 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000680544 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000678176 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000618184 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000514520 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000500552 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000428224 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000406448 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000366120 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000360344 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000330552 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000203840 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll 2018-05-27 09:58 - 2017-06-29 18:54 - 000179592 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 005346992 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 002444680 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001965808 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001959600 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001616680 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001554600 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001529136 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64Proxy.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001508928 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001326424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 001170872 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000743960 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000609392 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\CAF64APO2.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000504304 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000445392 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000441264 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000362048 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000327448 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000310416 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000272712 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000253896 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000253864 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000252872 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2018-05-27 09:58 - 2017-06-29 18:53 - 000115120 _____ (Conexant System, Inc.) C:\WINDOWS\system32\Caf64api.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 005826560 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2018-05-27 09:58 - 2017-06-29 18:52 - 003677160 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2018-05-27 09:58 - 2017-06-29 18:52 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 002993720 _____ (Audyssey Labs) C:\WINDOWS\system32\AudysseyEfx.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 002110592 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 000574752 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 000258856 _____ (TODO: ) C:\WINDOWS\system32\slprp64.dll 2018-05-27 09:58 - 2017-06-29 18:52 - 000118592 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 072520712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2018-05-27 09:58 - 2017-06-29 18:51 - 014057248 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 007172912 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 007096184 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 006264632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 002210304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 002050176 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 001186832 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 001133064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 001003856 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 000931616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 000416504 _____ (Harman) C:\WINDOWS\system32\HMUI.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 000378384 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 000154360 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll 2018-05-27 09:58 - 2017-06-29 18:51 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2018-05-27 09:58 - 2017-06-29 18:50 - 000122320 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2018-05-27 09:58 - 2017-06-29 18:50 - 000118584 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll 2018-05-27 09:58 - 2017-06-29 18:50 - 000105304 _____ C:\WINDOWS\system32\audioLibVc.dll 2018-05-27 09:58 - 2017-06-29 03:05 - 012334923 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2018-05-27 09:58 - 2017-06-29 03:05 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat 2018-05-27 09:58 - 2017-06-29 03:05 - 001920870 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat 2018-05-27 09:58 - 2017-06-29 03:05 - 000005604 _____ C:\WINDOWS\system32\cxapo.lncs 2018-05-27 09:58 - 2017-06-29 03:05 - 000000864 _____ C:\WINDOWS\system32\cxapo.prop 2018-05-27 09:53 - 2018-05-27 09:56 - 432552507 _____ (Realtek Semiconductor Corp.) C:\Users\Szymon\Downloads\0008-Win7_Win8_Win81_Win10_R282.exe 2018-05-26 19:38 - 2018-05-26 19:38 - 000000000 ____D C:\$Windows.~BT 2018-05-26 19:37 - 2018-05-26 19:40 - 000000000 ___HD C:\$SysReset 2018-05-26 19:08 - 2018-06-10 19:27 - 000000000 ____D C:\FRST 2018-05-26 19:07 - 2018-06-10 19:26 - 002413056 _____ (Farbar) C:\Users\Szymon\Downloads\FRST64.exe 2018-05-20 14:41 - 2018-05-20 14:42 - 000000000 ____D C:\WINDOWS\LastGood 2018-05-19 20:34 - 2018-05-19 20:34 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2018-05-19 20:34 - 2018-01-22 18:00 - 000438768 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 040269808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 035180016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 019796336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 016449872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 013444552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 012843496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 011026080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 010900248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 004308976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 003894304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 003709424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001976120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439077.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001673616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439077.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001325384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001134768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001126888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001054704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 001043128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000988464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000939832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000885680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000795928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000740336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000635248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000616240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000599352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2018-05-19 20:31 - 2018-01-22 18:00 - 000506864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2018-05-19 20:06 - 2018-05-19 20:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2018-05-19 20:06 - 2018-05-19 20:06 - 000000000 ____D C:\Program Files (x86)\Microsoft XNA 2018-05-19 20:06 - 2018-05-19 20:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2018-05-19 20:05 - 2018-05-19 20:35 - 000466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2018-05-19 20:05 - 2018-05-19 20:35 - 000444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll 2018-05-19 20:05 - 2018-05-19 20:35 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll 2018-05-19 20:05 - 2018-05-19 20:35 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll 2018-05-19 20:05 - 2018-05-19 20:05 - 000000000 ____D C:\Program Files (x86)\OpenAL 2018-05-19 20:05 - 2018-05-19 20:05 - 000000000 ____D C:\Program Files (x86)\MSXML 4.0 2018-05-19 20:03 - 2018-05-19 20:03 - 000000000 ____D C:\Users\Public\Thunder Network 2018-05-19 20:03 - 2018-05-19 20:03 - 000000000 ____D C:\ProgramData\Thunder Network 2018-05-19 20:02 - 2018-05-19 20:20 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\DriverTalent 2018-05-19 20:02 - 2018-05-19 20:20 - 000000000 ____D C:\ProgramData\DriverTalent 2018-05-19 20:02 - 2018-05-19 20:02 - 000000027 _____ C:\ProgramData\serverclasscache.ini 2018-05-19 19:23 - 2018-05-23 08:25 - 000000000 ____D C:\Users\Szymon\Documents\The Witcher 3 2018-05-16 19:25 - 2012-06-08 10:18 - 003615888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll 2018-05-16 19:25 - 2012-04-03 12:42 - 001345368 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll 2018-05-16 19:25 - 2012-02-21 13:45 - 002605400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib.dll 2018-05-16 19:25 - 2012-02-13 18:05 - 008363864 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek.dll 2018-05-16 19:25 - 2011-12-18 11:58 - 002131288 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ.dll 2018-05-16 19:12 - 2017-10-30 18:00 - 002839488 ____N (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll 2018-05-16 18:50 - 2018-05-16 18:50 - 000000000 _____ C:\Users\Szymon\sfc.txt ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-06-10 19:28 - 2018-02-06 18:40 - 000084612 _____ C:\WINDOWS\ZAM_Guard.krnl.trace 2018-06-10 19:23 - 2017-07-27 14:45 - 000000000 ____D C:\Users\Szymon\AppData\Local\CrashDumps 2018-06-10 19:23 - 2017-07-22 12:06 - 000000000 ____D C:\ProgramData\NVIDIA 2018-06-10 14:57 - 2018-01-16 17:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-06-10 12:13 - 2018-01-16 18:05 - 000000000 ____D C:\Users\Szymon 2018-06-10 11:25 - 2018-04-27 06:30 - 000000000 ____D C:\WINDOWS\Minidump 2018-06-10 11:25 - 2018-01-16 18:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-06-10 11:25 - 2012-12-04 23:58 - 000383823 ____N C:\WINDOWS\Minidump\061018-50687-01.dmp 2018-06-09 15:13 - 2012-12-04 23:58 - 000349301 ____N C:\WINDOWS\Minidump\060918-38781-01.dmp 2018-06-08 19:24 - 2012-12-04 23:58 - 000349845 ____N C:\WINDOWS\Minidump\060818-36515-01.dmp 2018-06-08 07:35 - 2018-02-06 18:27 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-06-07 23:46 - 2012-12-04 23:58 - 000305213 ____N C:\WINDOWS\Minidump\060718-25703-01.dmp 2018-06-05 20:28 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-06-05 18:04 - 2018-02-28 19:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-06-05 10:13 - 2017-09-29 15:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-06-05 08:29 - 2018-01-16 18:22 - 000000000 ____D C:\Users\Szymon\AppData\Local\Packages 2018-06-04 18:19 - 2017-11-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2018-06-03 07:21 - 2018-03-18 21:37 - 000007588 ____H C:\Users\Szymon\Desktop\ClickMonitorDDC.xml 2018-06-02 10:37 - 2017-07-22 12:04 - 000000000 ____D C:\ProgramData\Package Cache 2018-06-02 08:48 - 2017-07-26 09:51 - 000000000 ____D C:\Users\Szymon\AppData\Local\ElevatedDiagnostics 2018-05-27 10:17 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-05-27 10:17 - 2017-07-22 12:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2018-05-27 10:00 - 2017-07-22 16:31 - 000000000 ___HD C:\Program Files (x86)\Temp 2018-05-27 09:59 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF 2018-05-27 09:59 - 2017-07-22 16:47 - 000000000 ____D C:\WINDOWS\system32\DAX3 2018-05-27 09:59 - 2017-07-22 16:47 - 000000000 ____D C:\WINDOWS\system32\DAX2 2018-05-27 09:59 - 2017-07-22 16:47 - 000000000 ____D C:\ProgramData\Audyssey Labs 2018-05-20 13:53 - 2017-08-07 08:53 - 000000000 ____D C:\Users\Szymon\AppData\Local\NVIDIA Corporation 2018-05-19 20:34 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\Help 2018-05-19 20:34 - 2017-08-07 09:10 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2018-05-19 20:34 - 2017-08-07 08:53 - 000000000 ____D C:\Users\Szymon\AppData\Local\NVIDIA 2018-05-19 20:34 - 2017-07-22 12:06 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2018-05-19 20:34 - 2017-07-22 11:58 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2018-05-19 19:31 - 2017-08-27 19:43 - 000000000 ____D C:\Users\Szymon\AppData\Local\Nox 2018-05-19 19:27 - 2018-01-16 18:58 - 000000000 ____D C:\Users\Szymon\ansel 2018-05-19 19:24 - 2018-01-16 15:57 - 000000000 ____D C:\Windows10Upgrade 2018-05-19 19:17 - 2018-02-11 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2018-05-19 11:44 - 2018-03-04 12:46 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\uTorrent 2018-05-18 15:53 - 2018-02-06 18:26 - 000003568 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2018-05-18 15:53 - 2018-02-06 18:26 - 000003444 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2018-05-16 18:53 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-05-15 20:35 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2018-05-15 12:04 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-09-29 15:42 - 2017-09-29 15:42 - 000059904 ____N (Microsoft Corporation) C:\Program Files (x86)\Common Files\sBDFeFlMc.exe 2017-09-29 15:42 - 2017-09-29 15:42 - 000059904 ____N (Microsoft Corporation) C:\Users\Szymon\AppData\Roaming\yOAi.exe 2017-08-31 07:12 - 2017-08-31 07:12 - 000000784 _____ () C:\Users\Szymon\AppData\Local\Nox_crash.log 2018-02-04 21:33 - 2018-02-04 21:33 - 000000002 _____ () C:\Users\Szymon\AppData\Local\WMI.ini Niektóre pliki w TEMP: ==================== 2018-06-04 18:18 - 2018-03-28 18:40 - 000037376 _____ (Microsoft) C:\Users\Szymon\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe 2018-06-04 18:18 - 2018-03-28 18:40 - 000020480 _____ (Microsoft) C:\Users\Szymon\AppData\Local\Temp\HiRezLauncherControls.dll ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2018-06-06 12:28 ==================== Koniec FRST.txt ============================