OTL logfile created on: 2018-07-03 17:39:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Maciej\Downloads 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.18978) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,91 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 63,23% Memory free 15,91 Gb Paging File | 12,63 Gb Available in Paging File | 79,38% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 119,53 Gb Total Space | 11,40 Gb Free Space | 9,54% Space Free | Partition Type: NTFS Computer Name: MACIEJ-LAPTOP | User Name: Maciej | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2018-07-03 17:38:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Maciej\Downloads\OTL.exe PRC - [2018-06-19 22:17:04 | 001,806,344 | ---- | M] (f.lux Software LLC) -- C:\Users\Maciej\AppData\Local\FluxSoftware\Flux\flux.exe PRC - [2018-06-09 09:14:36 | 012,006,104 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2018-05-09 08:54:44 | 001,388,920 | ---- | M] (Autodesk Inc.) -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe PRC - [2018-05-09 08:03:49 | 000,708,904 | ---- | M] (Autodesk, Inc.) -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe PRC - [2018-04-17 13:35:34 | 004,586,456 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Maciej\AppData\Local\Akamai\netsession_win.exe PRC - [2018-03-26 18:13:20 | 000,023,880 | ---- | M] () -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe PRC - [2018-03-26 08:52:16 | 000,335,896 | ---- | M] (AVAST Software) -- C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe PRC - [2018-02-09 19:02:50 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2018-01-10 16:33:22 | 000,461,616 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe PRC - [2017-09-05 10:09:42 | 000,537,400 | ---- | M] (Autodesk) -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe PRC - [2016-10-25 22:19:32 | 000,419,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe PRC - [2016-10-25 22:19:30 | 015,532,992 | ---- | M] (Node.js) -- C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe PRC - [2016-10-25 22:19:09 | 001,411,520 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe PRC - [2016-06-08 21:13:40 | 002,089,472 | ---- | M] (Vero Software Limited) -- C:\Program Files (x86)\Common Files\Vero Software\2016.10\CLS\cls.exe PRC - [2014-03-26 10:22:20 | 000,287,592 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2014-03-26 10:22:20 | 000,016,232 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2014-02-25 20:38:48 | 000,105,448 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe PRC - [2013-09-16 13:18:28 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2013-09-16 13:17:42 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2013-09-16 13:17:42 | 000,131,544 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe PRC - [2008-10-01 17:28:56 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2018-07-03 04:56:34 | 000,801,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\3199c8664f21bd7f86148da9f9b0b13f\System.ServiceModel.Internals.ni.dll MOD - [2018-07-03 04:56:33 | 000,118,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\c7c9a91ce7ff891dd3949fc8c36636af\SMDiagnostics.ni.dll MOD - [2018-05-18 06:50:45 | 000,482,520 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\streamback.dll MOD - [2018-05-18 06:50:40 | 000,293,592 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll MOD - [2018-05-09 08:04:18 | 000,050,984 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll MOD - [2018-05-09 08:04:16 | 000,060,712 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll MOD - [2018-05-09 08:04:15 | 000,202,024 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll MOD - [2018-05-09 08:04:14 | 000,789,288 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll MOD - [2018-05-08 07:05:01 | 007,589,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\e585a2ad1fab2b202e0c6b289546f0ed\System.Xml.ni.dll MOD - [2018-05-08 07:04:58 | 002,034,176 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\544a85595dd947e24c7ed9f7b7fb3892\System.Xaml.ni.dll MOD - [2018-05-08 07:04:56 | 013,659,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\2aecc88f903f5cb542f253d4ad399a79\System.Windows.Forms.ni.dll MOD - [2018-05-08 07:04:49 | 019,955,712 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\1c9e89158f1f6034b83cd6a6f3bc171d\System.ServiceModel.ni.dll MOD - [2018-05-08 07:04:33 | 002,844,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\13c2fc9793b91e8561bb5268bd0c5b86\System.Runtime.Serialization.ni.dll MOD - [2018-05-08 07:04:30 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\0d42a1409a817202866fc5eea824553f\System.Drawing.ni.dll MOD - [2018-05-08 07:04:25 | 001,016,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\847a79a9de247bda0ecaec386216714a\System.Configuration.ni.dll MOD - [2018-05-08 07:04:07 | 007,994,368 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\1d432538b7e0e3d52913aa4f5b36e8d8\System.Core.ni.dll MOD - [2018-05-08 07:04:03 | 010,498,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\3c3125abff791d75454612d56a7da162\System.ni.dll MOD - [2018-03-03 11:31:15 | 067,126,928 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2017-12-15 10:02:54 | 020,519,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\30bf1921503412fa2b0b70c448bd4ab8\mscorlib.ni.dll MOD - [2017-09-05 10:09:50 | 059,523,896 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll MOD - [2017-09-05 10:09:50 | 002,203,448 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll MOD - [2017-09-05 10:09:50 | 000,087,352 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll MOD - [2016-10-25 22:19:32 | 003,774,400 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll MOD - [2016-10-25 22:19:31 | 000,900,032 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll MOD - [2016-10-25 22:19:30 | 000,018,880 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll MOD - [2016-10-25 22:19:07 | 060,817,344 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll MOD - [2016-10-25 21:57:38 | 002,808,256 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node MOD - [2016-10-25 21:57:38 | 000,968,248 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node MOD - [2016-10-25 21:57:38 | 000,512,960 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvBackendAPINode.node MOD - [2016-10-25 21:57:38 | 000,506,424 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node MOD - [2016-10-25 21:57:38 | 000,440,888 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameStreamAPINode.node MOD - [2016-10-25 21:57:38 | 000,436,792 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node MOD - [2016-10-25 21:57:38 | 000,357,944 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvUtil.node MOD - [2016-10-25 21:57:38 | 000,338,488 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node MOD - [2016-10-25 21:57:38 | 000,255,936 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node MOD - [2016-10-25 21:57:38 | 000,246,840 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node MOD - [2016-06-08 21:00:32 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\Vero Software\2016.10\CLS\dpwin32v.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2018-07-02 19:38:37 | 003,460,072 | ---- | M] (Flexera Software LLC) [Auto | Running] -- C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe -- (FlexNet Licensing Service 64) SRV:[b]64bit:[/b] - [2018-05-18 06:50:43 | 000,317,280 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2018-05-18 06:50:41 | 007,620,096 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe -- (aswbIDSAgent) SRV:[b]64bit:[/b] - [2018-03-15 14:34:18 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\inetsrv\w3logsvc.dll -- (w3logsvc) SRV:[b]64bit:[/b] - [2018-01-02 07:17:04 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2017-12-13 07:39:43 | 000,093,008 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter) SRV:[b]64bit:[/b] - [2017-01-12 18:51:17 | 000,361,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:[b]64bit:[/b] - [2017-01-12 18:51:17 | 000,119,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2017-01-10 23:06:07 | 000,840,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2016-12-25 01:39:34 | 000,133,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2016-11-29 15:50:04 | 001,471,168 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe -- (Disc Soft Lite Bus Service) SRV:[b]64bit:[/b] - [2016-10-25 22:19:33 | 000,456,640 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService) SRV:[b]64bit:[/b] - [2016-10-25 22:19:33 | 000,456,640 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem) SRV:[b]64bit:[/b] - [2016-10-25 22:19:29 | 001,163,712 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe -- (NVIDIA Wireless Controller Service) SRV:[b]64bit:[/b] - [2016-10-25 22:13:09 | 000,458,176 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem) SRV:[b]64bit:[/b] - [2016-08-22 15:34:40 | 001,628,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2016-06-07 22:32:07 | 002,988,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2016-04-26 13:32:42 | 000,030,720 | ---- | M] (Vero Software) [Auto | Running] -- C:\Program Files\Vero Software\Edgecam Live Job Reports 2016 R2\JobReports.WindowService.exe -- (Edgecam Live Job Reports 2016 R2) SRV:[b]64bit:[/b] - [2016-02-08 18:53:04 | 001,348,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2016-02-03 17:11:56 | 001,673,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2015-07-16 20:58:34 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2015-05-30 21:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2015-05-12 15:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2015-05-07 17:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2015-02-21 01:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2014-12-04 20:21:54 | 000,980,224 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2014-11-21 17:54:18 | 000,328,296 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0) SRV:[b]64bit:[/b] - [2014-10-29 05:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2014-10-29 04:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2014-10-29 04:42:03 | 000,041,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2014-10-29 04:34:51 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2014-10-29 04:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2014-10-29 04:30:35 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2014-10-29 04:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2014-10-29 03:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv) SRV:[b]64bit:[/b] - [2014-10-29 03:48:20 | 000,166,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2014-10-29 03:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2014-10-29 03:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2014-10-29 03:22:40 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2014-10-29 03:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2014-10-29 03:19:20 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2014-10-29 03:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2014-10-29 03:13:24 | 000,374,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2014-10-29 03:13:02 | 000,260,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2014-10-29 03:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2014-10-29 03:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2014-10-29 03:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2014-10-29 03:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2014-10-29 02:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2014-07-17 11:19:58 | 000,087,384 | ---- | M] (Alps Electric Co., Ltd.) [Auto | Running] -- C:\Program Files\Apoint2K\HidMonitorSvc.exe -- (ApHidMonitorService) SRV:[b]64bit:[/b] - [2014-03-26 10:22:20 | 000,016,232 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV:[b]64bit:[/b] - [2013-11-14 14:29:54 | 002,251,992 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Windows\SysNative\BtwRSupportService.exe -- (BcmBtRSupport) SRV:[b]64bit:[/b] - [2013-08-27 15:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-27 15:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV - [2018-06-10 23:54:19 | 000,194,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2018-06-09 01:38:56 | 001,673,504 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2018-06-07 18:33:04 | 000,335,872 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2018-05-09 08:54:44 | 001,388,920 | ---- | M] (Autodesk Inc.) [Auto | Running] -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe -- (AdAppMgrSvc) SRV - [2018-05-02 07:29:50 | 000,332,656 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService) SRV - [2018-03-26 18:13:20 | 000,023,880 | ---- | M] () [On_Demand | Running] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService) SRV - [2018-03-26 08:52:16 | 000,164,984 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe -- (avastm) SRV - [2018-03-26 08:52:16 | 000,164,984 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe -- (avast) SRV - [2018-03-15 14:34:18 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2018-03-15 14:34:18 | 000,501,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2018-03-15 14:34:17 | 000,066,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\w3logsvc.dll -- (w3logsvc) SRV - [2018-03-15 14:34:17 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2018-02-09 19:02:50 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2018-01-31 12:30:26 | 006,971,400 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService) SRV - [2018-01-10 16:33:22 | 000,461,616 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer) SRV - [2017-11-21 02:29:45 | 003,002,728 | ---- | M] (Electronic Arts) [Auto | Stopped] -- C:\Program Files (x86)\Origin\OriginWebHelperService.exe -- (Origin Web Helper Service) SRV - [2017-11-21 02:29:44 | 002,123,104 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service) SRV - [2016-09-26 05:02:32 | 000,967,664 | ---- | M] (Autodesk, Inc.) [Auto | Running] -- B:\inventor2019\Inventor 2019\Moldflow\bin\mitsijm.exe -- (mitsijm2018) SRV - [2016-06-07 22:32:07 | 002,988,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2015-05-07 17:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2014-11-21 17:54:18 | 000,279,144 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2014-10-29 03:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2014-10-29 03:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2014-02-25 20:38:48 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe -- (RzKLService) SRV - [2013-09-16 13:18:28 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2013-09-16 13:17:42 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2013-09-16 13:17:42 | 000,131,544 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2018-05-18 06:50:49 | 000,205,976 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,460,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,381,552 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,196,640 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswArPot.sys -- (aswArPot) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,159,120 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,111,360 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,085,968 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2018-05-18 06:50:48 | 000,046,968 | ---- | M] (AVAST Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid) DRV:[b]64bit:[/b] - [2018-05-18 06:50:42 | 001,027,720 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2018-05-18 06:50:40 | 000,234,560 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswHdsKe.sys -- (aswHdsKe) DRV:[b]64bit:[/b] - [2018-04-17 19:58:22 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2018-03-08 21:53:08 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp) DRV:[b]64bit:[/b] - [2018-03-03 11:31:03 | 000,343,752 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbloga.sys -- (aswblog) DRV:[b]64bit:[/b] - [2018-03-03 11:31:03 | 000,227,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswbidsdrivera.sys -- (aswbidsdriver) DRV:[b]64bit:[/b] - [2018-03-03 11:31:03 | 000,199,440 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbidsha.sys -- (aswbidsh) DRV:[b]64bit:[/b] - [2018-03-03 11:31:03 | 000,057,680 | ---- | M] (AVAST Software) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\aswbuniva.sys -- (aswbuniv) DRV:[b]64bit:[/b] - [2018-02-21 23:09:43 | 000,022,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr) DRV:[b]64bit:[/b] - [2018-02-15 21:09:06 | 009,317,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\FACEIT.sys -- (FACEIT) DRV:[b]64bit:[/b] - [2018-01-12 23:42:46 | 000,376,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2018-01-02 09:56:11 | 000,136,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2018-01-02 07:38:34 | 000,220,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2018-01-02 07:38:29 | 000,130,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr) DRV:[b]64bit:[/b] - [2017-11-08 17:55:00 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2017-10-01 14:43:18 | 010,364,120 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL63a.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2017-07-08 05:16:36 | 000,086,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2017-05-16 00:09:32 | 000,057,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2017-02-10 16:37:28 | 000,046,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2017-01-12 18:51:18 | 000,274,776 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2017-01-12 18:51:18 | 000,117,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2017-01-12 17:03:31 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp) DRV:[b]64bit:[/b] - [2017-01-11 19:28:42 | 000,422,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2016-12-17 13:22:38 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus) DRV:[b]64bit:[/b] - [2016-12-17 13:22:35 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus) DRV:[b]64bit:[/b] - [2016-11-10 12:18:20 | 000,035,576 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2016-10-25 22:19:37 | 000,046,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2016-10-25 22:19:14 | 000,027,584 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms) DRV:[b]64bit:[/b] - [2016-10-12 23:11:01 | 000,922,968 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2016-01-26 21:15:40 | 000,072,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2015-10-11 08:34:30 | 000,468,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2015-09-29 14:24:42 | 000,155,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2015-04-16 08:17:07 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2015-03-20 03:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2015-03-13 06:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2015-03-09 04:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2014-11-21 17:54:12 | 004,763,064 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2014-11-21 17:54:02 | 000,455,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2014-11-17 21:05:36 | 000,042,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2014-11-17 21:05:36 | 000,030,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2014-11-10 11:37:22 | 000,209,152 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2014-10-29 05:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2014-10-29 05:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2014-10-29 04:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2014-10-29 04:46:09 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:[b]64bit:[/b] - [2014-10-29 04:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2014-10-29 04:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2014-10-29 04:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2014-10-21 08:41:22 | 000,230,656 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2014-10-21 08:41:18 | 000,038,656 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2014-10-13 04:43:17 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2014-10-07 08:54:45 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2014-08-15 02:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2014-08-09 06:46:22 | 000,185,600 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl) DRV:[b]64bit:[/b] - [2014-07-17 11:19:52 | 000,561,456 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) DRV:[b]64bit:[/b] - [2014-03-26 10:21:52 | 000,645,992 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2014-03-18 10:18:42 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb22.sys -- (xusb22) DRV:[b]64bit:[/b] - [2014-03-13 14:35:24 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2014-02-22 17:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2013-12-04 20:41:54 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum) DRV:[b]64bit:[/b] - [2013-11-14 14:29:40 | 000,170,712 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums) DRV:[b]64bit:[/b] - [2013-10-26 03:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2013-10-24 11:50:32 | 000,444,632 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER) DRV:[b]64bit:[/b] - [2013-09-16 13:17:42 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2013-09-14 16:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2013-08-23 01:14:26 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2013-08-22 14:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013-08-22 14:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2013-08-22 14:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2013-08-22 14:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2013-08-22 14:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2013-08-22 14:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2013-08-22 14:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2013-08-22 14:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2013-08-22 13:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2013-08-22 13:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2013-08-22 13:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2013-08-22 13:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2013-08-22 13:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2013-08-22 13:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013-08-22 13:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2013-08-22 13:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2013-08-22 13:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2013-08-22 13:38:17 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2013-08-22 13:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013-08-22 13:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013-08-22 13:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2013-08-22 10:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013-08-15 15:28:42 | 000,830,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2013-08-13 01:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2013-08-10 02:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:[b]64bit:[/b] - [2013-07-30 20:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2013-07-25 21:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2013-04-09 11:42:06 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t_mouse.sys -- (t_mouse.sys) DRV:[b]64bit:[/b] - [2012-07-27 11:18:24 | 000,040,248 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 69 5F 3B 37 C3 87 D3 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;*.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "PL" FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search Engine" FF - prefs.js..browser.search.region: "PL" FF - prefs.js..browser.search.selectedEngine: "Yahoo! Search Engine" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.search.widget.inNavBar: true FF - prefs.js..browser.startup.homepage: "https://pl.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10437__180325__yaff" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.151.2: C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2: C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 60.0.2\extensions\\Components: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 60.0.2\extensions\\Plugins: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS [2018-05-09 08:00:39 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 60.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 60.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2018-05-09 08:00:39 | 000,000,000 | ---D | M] [2016-11-10 12:41:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\Extensions [2017-11-29 01:18:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\SystemExtensionsDev [2018-01-24 19:07:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\fya289w0.default\browser-extension-data [2017-11-03 13:59:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\fya289w0.default\browser-extension-data\screenshots@mozilla.org [2018-07-03 05:08:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\fya289w0.default\browser-extension-data\wrc@avast.com [2018-06-06 18:36:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\fya289w0.default\extensions [2018-03-02 12:58:24 | 001,379,897 | ---- | M] () (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\extensions\foxyproxy@eric.h.jung.xpi [2018-06-06 18:36:55 | 002,433,438 | ---- | M] () (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\extensions\sp@avast.com.xpi [2018-05-29 21:21:32 | 000,789,048 | ---- | M] () (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\extensions\wrc@avast.com.xpi [2018-06-15 18:40:27 | 000,006,255 | ---- | M] () (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\features\{9f389666-b5c3-472e-a2b0-c9584d0efda4}\tls13-version-fallback-rollout-bug1462099@mozilla.org.xpi [2018-06-06 18:36:56 | 000,006,255 | ---- | M] () (No name found) -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\features\{cfcf97ce-a2b9-4686-99bc-e006400b79ab}\tls13-version-fallback-rollout-bug1462099@mozilla.org.xpi [2018-04-08 03:59:50 | 000,001,055 | ---- | M] () -- C:\Users\Maciej\AppData\Roaming\mozilla\firefox\profiles\fya289w0.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-06-10 23:54:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2017-09-12 12:08:50 | 000,043,424 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpjdbdbhiomamecfnjahemfimgjamhjd\1.6_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck\12.0.800_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\3.31.2_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\12.0.626_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\ CHR - Extension: No name found = C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6718.423.0.0_0\ O1 HOSTS File: ([2013-08-22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll (Oracle Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvLaunch.exe (AVAST Software) O4:[b]64bit:[/b] - HKLM..\Run: [Energy Manager] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Lenovo Utility] C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_LENOVO_MICPKEY] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Autodesk Desktop App] C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Autodesk, Inc.) O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Maciej\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) O4 - HKCU..\Run: [DAEMON Tools Lite Automount] C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd) O4 - HKCU..\Run: [f.lux] C:\Users\Maciej\AppData\Local\FluxSoftware\Flux\flux.exe (f.lux Software LLC) O4 - HKCU..\Run: [FACEIT] C:\Program Files\FACEIT\FACEIT.exe (FACEIT Ltd.) O4 - HKCU..\Run: [GalaxyClient] File not found O4 - HKCU..\Run: [Spotify] C:\Users\Maciej\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\Maciej\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [SteamServerBrowser] C:\Program Files (x86)\SteamServerBrowser\SteamServerBrowser.exe () O4 - Startup: C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\windows.vbs () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: = O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: localhost ([]* in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01CB9C24-D94F-46BB-B6E7-C8D8A0CFB25E}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01CB9C24-D94F-46BB-B6E7-C8D8A0CFB25E}: NameServer = 8.26.56.26,8.20.247.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{905BA7DA-918C-41F8-B268-4EDCD508E607}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{905BA7DA-918C-41F8-B268-4EDCD508E607}: NameServer = 8.26.56.26,8.20.247.20 O18 - Protocol\Handler\ms-help - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2018-07-02 20:08:21 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O33 - MountPoints2\{3e0a25b1-d123-11e6-8274-1c3947c23f0f}\Shell - "" = AutoRun O33 - MountPoints2\{3e0a25b1-d123-11e6-8274-1c3947c23f0f}\Shell\AutoRun\command - "" = "H:\HTC_Sync_Manager_PC.exe" O33 - MountPoints2\{3e0a25c4-d123-11e6-8274-1c3947c23f0f}\Shell - "" = AutoRun O33 - MountPoints2\{3e0a25c4-d123-11e6-8274-1c3947c23f0f}\Shell\AutoRun\command - "" = "H:\HTC_Sync_Manager_PC.exe" O33 - MountPoints2\{d3e46de9-c2a6-11e6-826f-1c3947c23f0f}\Shell - "" = AutoRun O33 - MountPoints2\{d3e46de9-c2a6-11e6-826f-1c3947c23f0f}\Shell\AutoRun\command - "" = "E:\setup.exe" O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2018-07-03 16:51:25 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2018-07-03 16:40:19 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Doctor Web [2018-07-03 16:40:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Doctor Web [2018-07-03 04:57:55 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Local\Tvsukernel [2018-07-03 04:44:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Lenovo [2018-07-03 04:44:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lenovo [2018-07-02 20:21:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DWG TrueView 2019 - English [2018-07-02 20:19:25 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\.forever [2018-07-02 20:16:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Inventor 2019 [2018-07-02 20:11:30 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2018-07-02 19:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Mechanical 2019 — Polski (Polish) [2018-07-02 19:38:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared [2018-07-02 19:37:45 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Documents\Inventor Server for AutoCAD 2019 [2018-07-02 19:34:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk [2018-07-02 19:34:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Autodesk Shared [2018-06-26 23:18:07 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\ZM [2018-06-20 18:42:42 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\PiUS zaliczenie [2018-06-18 00:01:57 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\K.Wojskowa [2018-06-17 23:33:32 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Roaming\Apple Computer [2018-06-17 23:33:32 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Local\Apple Computer [2018-06-17 23:33:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2018-06-17 23:33:10 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2018-06-17 23:32:49 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2018-06-17 23:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2018-06-17 23:32:23 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Local\Apple [2018-06-17 23:32:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2018-06-17 23:32:06 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2018-06-17 23:32:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2018-06-17 23:31:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2018-06-17 23:31:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2018-06-17 23:31:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2018-06-17 23:29:19 | 272,259,912 | ---- | C] (Apple Inc.) -- C:\Users\Maciej\Desktop\iTunes64Setup.exe [2018-06-15 18:02:29 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\spwako fydrych [2018-06-10 19:57:35 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\LINIE [2018-06-10 17:03:28 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\Projekt Hanka [2018-06-07 08:07:09 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\Zab_2018 [2018-06-06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Roaming\MTS [2018-06-06 20:10:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTS CNC-System 8.0 Demo [2018-06-06 20:07:06 | 000,000,000 | ---D | C] -- C:\MTS [2018-06-06 19:42:44 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\mts [2018-06-05 22:30:42 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\GifCam [2018-06-04 18:44:46 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\HANKA [2018-05-27 22:54:34 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\fydrych [2018-05-20 20:52:10 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\KOMANDOR [2018-05-18 06:50:54 | 000,376,536 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2018-05-14 17:23:05 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\laborki ekologia [2018-05-10 12:51:40 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\rob [2018-05-09 23:05:43 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\PrezentacjaGPEC10.05 [2018-05-09 23:03:27 | 000,000,000 | ---D | C] -- C:\Users\Maciej\AppData\Local\FluxSoftware [2018-05-07 21:32:21 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Documents\Niestandardowe szablony pakietu Office [2018-05-07 20:26:22 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2018-05-07 20:17:50 | 000,030,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aspnet_counters.dll [2018-05-07 20:17:48 | 000,019,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr100_clr0400.dll [2018-05-07 20:17:46 | 000,029,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aspnet_counters.dll [2018-05-07 20:17:44 | 000,019,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr100_clr0400.dll [2018-05-07 10:41:32 | 000,000,000 | ---D | C] -- C:\Users\Maciej\Desktop\GPEC 10.05 8)) [2018-05-07 10:04:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2018-05-07 09:51:48 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 [2018-05-07 09:51:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2018-05-07 09:51:17 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2018-05-07 09:48:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2018-05-07 09:48:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services [2018-05-07 09:48:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2018-05-07 09:48:11 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014-10-29 03:40:02 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Users\Maciej\AppData\Local\ManaQamwjuiX.exe [2014-10-29 03:40:02 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Users\Maciej\yYukFsGwNOUoa.exe [2014-10-29 03:40:02 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\gedEFEe.exe [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2018-07-03 17:35:00 | 000,000,524 | ---- | M] () -- C:\Windows\tasks\Chromium maned.job [2018-07-03 17:19:33 | 002,008,656 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2018-07-03 17:19:33 | 000,873,194 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2018-07-03 17:19:33 | 000,787,536 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2018-07-03 17:19:33 | 000,190,512 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2018-07-03 17:19:33 | 000,157,778 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2018-07-03 17:14:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2018-07-03 17:12:46 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys [2018-07-03 17:12:43 | 2503,389,183 | -HS- | M] () -- C:\hiberfil.sys [2018-07-03 17:09:46 | 000,635,336 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2018-07-02 20:27:08 | 000,002,319 | ---- | M] () -- C:\Users\Maciej\Desktop\Zainstaluj teraz dla programu Autodesk Inventor 2019.lnk [2018-07-02 20:21:45 | 000,002,221 | ---- | M] () -- C:\Users\Public\Desktop\DWG TrueView 2019 - English.lnk [2018-07-02 20:16:45 | 000,001,832 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Inventor Professional 2019.lnk [2018-07-02 19:40:35 | 000,002,418 | ---- | M] () -- C:\Users\Maciej\Desktop\Zainstaluj teraz dla programu Autodesk® AutoCAD® Mechanical 2019.lnk [2018-07-02 19:40:22 | 000,001,525 | ---- | M] () -- C:\Users\Public\Desktop\Aplikacja na pulpit firmy Autodesk.lnk [2018-07-02 19:39:32 | 000,001,839 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD Mechanical 2019 — Polski (Polish).lnk [2018-06-28 23:44:56 | 000,055,010 | ---- | M] () -- C:\Users\Maciej\Desktop\Dgnmbu8UwAAZbtH.jpg [2018-06-28 19:56:46 | 000,497,067 | ---- | M] () -- C:\Users\Maciej\Desktop\dude.png [2018-06-25 23:09:56 | 001,066,708 | ---- | M] () -- C:\Users\Maciej\Desktop\mojeopr2.pdf [2018-06-22 19:19:05 | 000,032,332 | ---- | M] () -- C:\Users\Maciej\Desktop\egzamin-2017-pius.pdf [2018-06-21 08:43:03 | 000,223,932 | ---- | M] () -- C:\Users\Maciej\Desktop\cc_20180621_084259.reg [2018-06-18 14:34:18 | 000,144,462 | ---- | M] () -- C:\Users\Maciej\Desktop\Kwestionariusz osobowy (pusty) (1).pdf [2018-06-17 23:33:12 | 000,001,759 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2018-06-17 23:30:38 | 272,259,912 | ---- | M] (Apple Inc.) -- C:\Users\Maciej\Desktop\iTunes64Setup.exe [2018-06-16 09:19:40 | 000,144,462 | ---- | M] () -- C:\Users\Maciej\Desktop\Kwestionariusz osobowy (pusty).pdf [2018-06-15 15:24:27 | 009,098,454 | ---- | M] () -- C:\Users\Maciej\Desktop\PN-EN 1011-2 2002.pdf [2018-06-14 02:15:13 | 002,453,460 | ---- | M] () -- C:\Users\Maciej\Desktop\krzysiu-krzysiu.pdf [2018-06-11 23:47:07 | 001,825,472 | ---- | M] () -- C:\Users\Maciej\Desktop\broszura_maszynowa.pdf [2018-06-10 17:10:42 | 081,622,611 | ---- | M] () -- C:\Users\Maciej\Desktop\Dobór_Mech_2017.rar [2018-06-10 15:36:51 | 000,648,498 | ---- | M] () -- C:\Users\Maciej\Desktop\projekt-doboru-materiału.pdf [2018-06-08 00:06:10 | 000,699,988 | ---- | M] () -- C:\Users\Maciej\Desktop\Opracowanie-TOP.pdf [2018-06-07 20:57:52 | 001,189,335 | ---- | M] () -- C:\Users\Maciej\Desktop\WMG11079.jpg [2018-06-07 18:58:57 | 000,766,909 | ---- | M] () -- C:\Users\Maciej\Desktop\34772232_1722755257817090_5465070632590901248_n.jpg [2018-06-07 08:10:13 | 001,134,881 | ---- | M] () -- C:\Users\Maciej\Desktop\ACFrOgAyYl60Jcap1oJG-a5Zamp8D3Qb5kvZ1WawJu7hpaMDhlBKav41dYFEsbn2A-UrN1NHMquFNk31HamcnH-QvrQcgpo1WF1k_EnlLaTVc7o__zdU-Mn5qs7q9VUWzfSVQ0UZJ4WFLSrUBZdL.pdf [2018-06-07 08:07:00 | 000,659,076 | ---- | M] () -- C:\Users\Maciej\Desktop\Zab_2018.zip [2018-06-06 21:00:47 | 000,054,331 | ---- | M] () -- C:\Users\Maciej\Desktop\image.jpg [2018-06-06 20:10:11 | 000,000,832 | ---- | M] () -- C:\Users\Public\Desktop\TopStart Demo.lnk [2018-06-05 22:36:01 | 024,593,245 | ---- | M] () -- C:\Users\Maciej\Desktop\GIF2.gif [2018-06-05 22:33:08 | 043,713,946 | ---- | M] () -- C:\Users\Maciej\Desktop\heheszky.gif [2018-06-05 22:30:36 | 000,717,685 | ---- | M] () -- C:\Users\Maciej\Desktop\GifCam.zip [2018-06-04 16:49:33 | 001,949,343 | ---- | M] () -- C:\Users\Maciej\Desktop\kub2.jpg [2018-06-04 16:37:56 | 000,092,181 | ---- | M] () -- C:\Users\Maciej\Desktop\maciek.jpg [2018-06-03 17:10:49 | 000,584,118 | ---- | M] () -- C:\Users\Maciej\Desktop\kub.jpg [2018-05-20 21:31:25 | 001,024,392 | ---- | M] () -- C:\Users\Maciej\Desktop\32917356_1689337597843619_3200023902814208000_n.png [2018-05-20 21:05:46 | 000,354,958 | ---- | M] () -- C:\Users\Maciej\Desktop\11_chlodziarka1.pdf [2018-05-20 18:39:43 | 001,543,437 | ---- | M] () -- C:\Users\Maciej\Desktop\32679006_1007243742774251_3327952011986468864_n.jpg [2018-05-20 17:18:25 | 000,000,626 | ---- | M] () -- C:\Users\Maciej\Desktop\INŻ — skrót.lnk [2018-05-19 12:06:44 | 000,046,724 | ---- | M] () -- C:\Users\Maciej\Desktop\wZGk9xN9DmaOQU28.jpg [2018-05-18 06:50:49 | 000,205,976 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys [2018-05-18 06:50:48 | 000,460,520 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2018-05-18 06:50:48 | 000,381,552 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys [2018-05-18 06:50:48 | 000,376,536 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2018-05-18 06:50:48 | 000,196,640 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswArPot.sys [2018-05-18 06:50:48 | 000,159,120 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2018-05-18 06:50:48 | 000,111,360 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys [2018-05-18 06:50:48 | 000,085,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys [2018-05-18 06:50:48 | 000,046,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys [2018-05-18 06:50:42 | 001,027,720 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys [2018-05-18 06:50:40 | 000,234,560 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHdsKe.sys [2018-05-16 18:32:30 | 000,334,009 | ---- | M] () -- C:\Users\Maciej\Desktop\2015-06-09-Zalacznik-nr-3-Wniosek-o-przyzanie-miejsca-w-DS-na-rok-akademicki-1.pdf [2018-05-14 12:16:55 | 000,334,009 | ---- | M] () -- C:\Users\Maciej\Desktop\2015-06-09-Zalacznik nr 3 Wniosek o przyzanie miejsca w DS na rok akademicki.pdf [2018-05-10 13:02:20 | 000,092,026 | ---- | M] () -- C:\Users\Maciej\Desktop\32089887_1649855571802781_5743852067806511104_n.jpg [2018-05-09 23:03:23 | 000,770,384 | ---- | M] () -- C:\Users\Maciej\Desktop\flux-setup.exe [2018-05-09 12:17:54 | 000,000,631 | ---- | M] () -- C:\Users\Maciej\Desktop\2018 — skrót.lnk [2018-05-09 12:17:46 | 000,000,734 | ---- | M] () -- C:\Users\Maciej\Desktop\Praca Przejsciowa — skrót.lnk [2018-05-09 12:16:06 | 000,000,670 | ---- | M] () -- C:\Users\Maciej\Desktop\2016i2017 — skrót.lnk [2018-05-07 23:32:56 | 000,810,852 | ---- | M] () -- C:\Users\Maciej\Desktop\xddd.PNG [2018-05-07 17:23:45 | 009,651,941 | ---- | M] () -- C:\Users\Maciej\Desktop\SPAWALNOŚĆ mizps.pdf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2018-07-03 04:44:14 | 000,002,092 | ---- | C] () -- C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk [2018-07-02 20:27:08 | 000,002,319 | ---- | C] () -- C:\Users\Maciej\Desktop\Zainstaluj teraz dla programu Autodesk Inventor 2019.lnk [2018-07-02 20:21:45 | 000,002,221 | ---- | C] () -- C:\Users\Public\Desktop\DWG TrueView 2019 - English.lnk [2018-07-02 20:16:45 | 000,001,832 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Inventor Professional 2019.lnk [2018-07-02 19:40:35 | 000,002,418 | ---- | C] () -- C:\Users\Maciej\Desktop\Zainstaluj teraz dla programu Autodesk® AutoCAD® Mechanical 2019.lnk [2018-07-02 19:40:22 | 000,001,525 | ---- | C] () -- C:\Users\Public\Desktop\Aplikacja na pulpit firmy Autodesk.lnk [2018-07-02 19:39:32 | 000,001,839 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD Mechanical 2019 — Polski (Polish).lnk [2018-06-28 23:44:55 | 000,055,010 | ---- | C] () -- C:\Users\Maciej\Desktop\Dgnmbu8UwAAZbtH.jpg [2018-06-28 19:56:46 | 000,497,067 | ---- | C] () -- C:\Users\Maciej\Desktop\dude.png [2018-06-25 23:09:56 | 001,066,708 | ---- | C] () -- C:\Users\Maciej\Desktop\mojeopr2.pdf [2018-06-22 19:19:05 | 000,032,332 | ---- | C] () -- C:\Users\Maciej\Desktop\egzamin-2017-pius.pdf [2018-06-21 08:43:02 | 000,223,932 | ---- | C] () -- C:\Users\Maciej\Desktop\cc_20180621_084259.reg [2018-06-18 14:34:18 | 000,144,462 | ---- | C] () -- C:\Users\Maciej\Desktop\Kwestionariusz osobowy (pusty) (1).pdf [2018-06-17 23:33:12 | 000,001,759 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2018-06-17 23:32:22 | 000,002,535 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2018-06-16 09:19:40 | 000,144,462 | ---- | C] () -- C:\Users\Maciej\Desktop\Kwestionariusz osobowy (pusty).pdf [2018-06-15 15:24:27 | 009,098,454 | ---- | C] () -- C:\Users\Maciej\Desktop\PN-EN 1011-2 2002.pdf [2018-06-14 02:15:13 | 002,453,460 | ---- | C] () -- C:\Users\Maciej\Desktop\krzysiu-krzysiu.pdf [2018-06-11 23:47:07 | 001,825,472 | ---- | C] () -- C:\Users\Maciej\Desktop\broszura_maszynowa.pdf [2018-06-10 17:10:34 | 081,622,611 | ---- | C] () -- C:\Users\Maciej\Desktop\Dobór_Mech_2017.rar [2018-06-10 15:36:50 | 000,648,498 | ---- | C] () -- C:\Users\Maciej\Desktop\projekt-doboru-materiału.pdf [2018-06-08 00:06:10 | 000,699,988 | ---- | C] () -- C:\Users\Maciej\Desktop\Opracowanie-TOP.pdf [2018-06-07 20:57:52 | 001,189,335 | ---- | C] () -- C:\Users\Maciej\Desktop\WMG11079.jpg [2018-06-07 18:58:57 | 000,766,909 | ---- | C] () -- C:\Users\Maciej\Desktop\34772232_1722755257817090_5465070632590901248_n.jpg [2018-06-07 08:10:13 | 001,134,881 | ---- | C] () -- C:\Users\Maciej\Desktop\ACFrOgAyYl60Jcap1oJG-a5Zamp8D3Qb5kvZ1WawJu7hpaMDhlBKav41dYFEsbn2A-UrN1NHMquFNk31HamcnH-QvrQcgpo1WF1k_EnlLaTVc7o__zdU-Mn5qs7q9VUWzfSVQ0UZJ4WFLSrUBZdL.pdf [2018-06-07 08:06:59 | 000,659,076 | ---- | C] () -- C:\Users\Maciej\Desktop\Zab_2018.zip [2018-06-06 21:00:47 | 000,054,331 | ---- | C] () -- C:\Users\Maciej\Desktop\image.jpg [2018-06-06 20:10:11 | 000,000,832 | ---- | C] () -- C:\Users\Public\Desktop\TopStart Demo.lnk [2018-06-05 22:35:47 | 024,593,245 | ---- | C] () -- C:\Users\Maciej\Desktop\GIF2.gif [2018-06-05 22:33:03 | 043,713,946 | ---- | C] () -- C:\Users\Maciej\Desktop\heheszky.gif [2018-06-05 22:30:35 | 000,717,685 | ---- | C] () -- C:\Users\Maciej\Desktop\GifCam.zip [2018-06-04 16:49:33 | 001,949,343 | ---- | C] () -- C:\Users\Maciej\Desktop\kub2.jpg [2018-06-04 16:37:56 | 000,092,181 | ---- | C] () -- C:\Users\Maciej\Desktop\maciek.jpg [2018-06-03 17:10:48 | 000,584,118 | ---- | C] () -- C:\Users\Maciej\Desktop\kub.jpg [2018-05-20 21:31:25 | 001,024,392 | ---- | C] () -- C:\Users\Maciej\Desktop\32917356_1689337597843619_3200023902814208000_n.png [2018-05-20 21:05:46 | 000,354,958 | ---- | C] () -- C:\Users\Maciej\Desktop\11_chlodziarka1.pdf [2018-05-20 17:45:20 | 001,543,437 | ---- | C] () -- C:\Users\Maciej\Desktop\32679006_1007243742774251_3327952011986468864_n.jpg [2018-05-20 17:18:25 | 000,000,626 | ---- | C] () -- C:\Users\Maciej\Desktop\INŻ — skrót.lnk [2018-05-19 12:06:44 | 000,046,724 | ---- | C] () -- C:\Users\Maciej\Desktop\wZGk9xN9DmaOQU28.jpg [2018-05-16 18:32:29 | 000,334,009 | ---- | C] () -- C:\Users\Maciej\Desktop\2015-06-09-Zalacznik-nr-3-Wniosek-o-przyzanie-miejsca-w-DS-na-rok-akademicki-1.pdf [2018-05-14 12:16:54 | 000,334,009 | ---- | C] () -- C:\Users\Maciej\Desktop\2015-06-09-Zalacznik nr 3 Wniosek o przyzanie miejsca w DS na rok akademicki.pdf [2018-05-10 13:02:20 | 000,092,026 | ---- | C] () -- C:\Users\Maciej\Desktop\32089887_1649855571802781_5743852067806511104_n.jpg [2018-05-09 23:03:30 | 000,002,096 | ---- | C] () -- C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk [2018-05-09 23:03:23 | 000,770,384 | ---- | C] () -- C:\Users\Maciej\Desktop\flux-setup.exe [2018-05-09 12:17:54 | 000,000,631 | ---- | C] () -- C:\Users\Maciej\Desktop\2018 — skrót.lnk [2018-05-09 12:17:46 | 000,000,734 | ---- | C] () -- C:\Users\Maciej\Desktop\Praca Przejsciowa — skrót.lnk [2018-05-09 12:16:06 | 000,000,670 | ---- | C] () -- C:\Users\Maciej\Desktop\2016i2017 — skrót.lnk [2018-05-07 23:32:56 | 000,810,852 | ---- | C] () -- C:\Users\Maciej\Desktop\xddd.PNG [2018-05-07 17:23:45 | 009,651,941 | ---- | C] () -- C:\Users\Maciej\Desktop\SPAWALNOŚĆ mizps.pdf [2018-04-15 23:35:45 | 000,010,892 | ---- | C] () -- C:\Users\Maciej\AppData\Local\recently-used.xbel [2018-04-10 13:33:23 | 000,000,078 | ---- | C] () -- C:\Users\Maciej\AppData\Roaming\IP.dat [2018-03-28 21:34:16 | 000,269,600 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1.dll [2018-03-28 21:34:16 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo.exe [2018-03-28 21:33:00 | 035,224,632 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll [2018-03-06 14:26:59 | 000,000,002 | ---- | C] () -- C:\Users\Maciej\AppData\Local\WMI.ini [2018-03-03 14:28:07 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2017-11-20 20:15:45 | 000,518,144 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2017-11-20 20:12:59 | 000,107,008 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2017-11-20 20:12:47 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2017-11-07 21:22:06 | 000,000,000 | ---- | C] () -- C:\Users\Maciej\choco [2017-04-20 01:25:22 | 000,007,646 | ---- | C] () -- C:\Users\Maciej\AppData\Local\Resmon.ResmonCfg [2017-01-03 17:17:29 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2016-12-18 21:05:15 | 000,008,192 | ---- | C] () -- C:\Windows\d3dx.dat [2016-11-15 21:34:06 | 000,000,992 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2016-11-14 02:12:11 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini [2016-11-10 12:28:25 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2016-11-10 12:26:21 | 001,762,308 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2016-11-10 12:21:47 | 000,187,392 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2016-11-10 12:21:46 | 016,698,848 | ---- | C] () -- C:\Windows\SysWow64\igd11dxva32.dll [2016-09-09 20:25:58 | 000,269,600 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1-1-0-26-0.dll [2016-09-09 20:25:28 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo-1-1-0-26-0.exe [color=#E56717]========== ZeroAccess Check ==========[/color] [2016-11-16 07:45:44 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2018-01-02 08:39:38 | 022,374,248 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2018-01-02 08:00:38 | 019,790,760 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2018-03-03 06:47:56 | 001,005,056 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2018-03-03 06:32:42 | 000,779,776 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014-10-29 03:16:01 | 000,512,512 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report >