Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19.08.2018 02
Ran by SYSTEM on MININT-SP23B9N (19-08-2018 19:56:09)
Running from G:\
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.[/b]

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-08-06] (Synaptics Incorporated)
HKLM-x32\...\Run: [RAVCORE BLIZZARD Gaming Mouse] => C:\Program Files (x86)\RAVCORE BLIZZARD Gaming Mouse\hid.exe [716800 2016-08-03] ()
HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2018-08-01] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SW-BOO~1\ASSIST~2.DLL => No File
Lsa: [Authentication Packages] msv1_0 wvauth

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-07-05] (Apple Inc.)
S2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [348160 2009-09-22] (AVerMedia)
S2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [389120 2009-10-08] ()
S2 AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [169984 2009-09-30] (AVerMedia TECHNOLOGIES, Inc.)
S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-02] (Malwarebytes)
S2 Mobile Broadband HL Service; C:\Program Files (x86)\MobileBrServ\mbbservice.exe [242264 2016-03-23] ()
S2 MSSQL$OPTIMA; C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.OPTIMA\MSSQL\Binn\sqlservr.exe [163008 2017-08-15] (Microsoft Corporation)
S2 MSSQL$RESET2; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe [131144 2015-03-05] (Symantec Corporation)
S2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.15.0.88\NortonSecurity.exe [328648 2018-08-05] (Symantec Corporation)
S2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [632792 2010-04-08] (PC Tools)
S3 PDF Architect 5; C:\Program Files\PDF Architect 5\ws.exe [2709176 2017-07-05] (pdfforge GmbH)
S3 PDF Architect 5 CrashHandler; C:\Program Files\PDF Architect 5\crash-handler-ws.exe [1051312 2017-07-05] (pdfforge GmbH)
S2 PDF Architect 5 Creator; C:\Program Files\PDF Architect 5\creator-ws.exe [859312 2017-07-05] (pdfforge GmbH)
S2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.)
S2 SnugTV Service; C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe [464384 2009-11-26] (AVerMedia Technologies, Inc.)
S4 SQLAgent$OPTIMA; C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.OPTIMA\MSSQL\Binn\SQLAGENT.EXE [448704 2017-08-15] (Microsoft Corporation)
S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1273856 2008-11-12] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare)
S2 WsDrvInst; C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe [120096 2018-01-16] (Wondershare)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AVerPola; C:\Windows\System32\DRIVERS\AVerPola.sys [364800 2009-08-04] (AVerMedia TECHNOLOGIES, Inc.)
S3 AVPolCIR; C:\Windows\System32\DRIVERS\AVPolCIR.sys [50688 2010-10-06] (AVerMedia TECHNOLOGIES, Inc.)
S1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.14.2.13\Definitions\BASHDefs\20180813.001\BHDrvx64.sys [1919568 2018-07-24] (Symantec Corporation)
S1 ccSet_NGC; C:\Windows\system32\drivers\NGCx64\160F000.058\ccSetx64.sys [187464 2018-08-05] (Symantec Corporation)
S1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DE070B0.02A\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [507984 2018-04-26] (Symantec Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [24056 2016-01-14] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [21496 2016-01-14] ()
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153168 2018-08-04] (Symantec Corporation)
S1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [76200 2018-01-17] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2016-07-11] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2016-07-11] ()
S3 EyeOne; C:\Windows\System32\Drivers\i1_x64.sys [51600 2015-07-06] (Thesycon GmbH, Germany)
S0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2017-03-08] (Acronis International GmbH)
S1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.14.2.13\Definitions\IPSDefs\20180814.061\IDSvia64.sys [1306592 2018-08-13] (Symantec Corporation)
S2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193248 2018-03-27] (Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [109800 2018-03-27] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [92280 2018-03-27] (Malwarebytes)
S3 Spyder5; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2015-07-06] (Datacolor)
S3 SRTSP; C:\Windows\System32\Drivers\NGCx64\160F000.058\SRTSP64.SYS [846928 2018-08-05] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NGCx64\160F000.058\SRTSPX64.SYS [49744 2018-08-05] (Symantec Corporation)
S3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [45928 2017-06-29] (SteelSeries ApS)
S0 SymEFASI; C:\Windows\System32\drivers\NGCx64\160F000.058\SYMEFASI64.SYS [1968720 2018-08-05] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [99920 2018-07-31] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NGCx64\160F000.058\Ironx64.SYS [307792 2018-08-05] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\NGCx64\160F000.058\SYMNETS.SYS [566912 2018-08-05] (Symantec Corporation)
S2 tib; C:\Windows\System32\DRIVERS\tib.sys [1058632 2017-03-08] (Acronis International GmbH)
S2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [248648 2017-03-08] (Acronis International GmbH)
S3 tifm21; C:\Windows\System32\drivers\tifm21.sys [319488 2009-06-19] (Texas Instruments)
S3 wpCtrlDrv_NGC; C:\Windows\System32\Drivers\NGCx64\160F000.058\wpCtrlDrv.sys [1002840 2018-08-05] (Symantec Corporation)
S3 MBAMProtection; system32\DRIVERS\mbam.sys [X]
S3 MBAMSwissArmy; \SystemRoot\System32\Drivers\mbamswissarmy.sys [X]
S3 Ser2pl; system32\DRIVERS\ser2pl64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error(1) reading file: "C:\Windows\System32\Tasks\Program aktualizacji online firmy Adobe."
2018-08-19 19:56 - 2018-08-19 19:56 - 000000000 ____D C:\FRST
2018-08-16 07:21 - 2018-08-16 07:21 - 000079680 _____ C:\Users\User\Desktop\rach 21_2018.pdf
2018-08-16 05:51 - 2018-08-16 05:51 - 000000000 ____D C:\Windows\System32\Tasks\Remediation
2018-08-16 05:29 - 2018-08-16 05:29 - 000512037 ____H C:\Windows\MEMORY.DMP
2018-08-15 04:05 - 2018-08-03 07:55 - 000109568 _____ (Microsoft Corporation) C:\Windows\System32\hlink.dll
2018-08-15 04:05 - 2018-08-03 07:39 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-08-15 04:05 - 2018-08-01 19:20 - 000708272 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2018-08-15 04:05 - 2018-08-01 19:18 - 000096864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2018-08-15 04:05 - 2018-08-01 19:07 - 000263776 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll
2018-08-15 04:05 - 2018-08-01 19:06 - 000156256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2018-08-15 04:05 - 2018-08-01 19:05 - 005553760 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2018-08-15 04:05 - 2018-08-01 19:02 - 001665320 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2018-08-15 04:05 - 2018-08-01 19:00 - 000633080 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2018-08-15 04:05 - 2018-08-01 18:59 - 001211904 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000361984 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000345600 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000316928 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000312320 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000215552 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000210432 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000190464 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000094208 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000063488 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2018-08-15 04:05 - 2018-08-01 18:59 - 000013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000463872 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000044032 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000043520 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2018-08-15 04:05 - 2018-08-01 18:58 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\System32\bcrypt.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000007168 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:45 - 004054192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-08-15 04:05 - 2018-08-01 18:45 - 003959984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-08-15 04:05 - 2018-08-01 18:43 - 001315512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-08-15 04:05 - 2018-08-01 18:42 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-08-15 04:05 - 2018-08-01 18:41 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:26 - 000148480 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe
2018-08-15 04:05 - 2018-08-01 18:26 - 000062464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys
2018-08-15 04:05 - 2018-08-01 18:26 - 000017920 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe
2018-08-15 04:05 - 2018-08-01 18:25 - 000064512 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2018-08-15 04:05 - 2018-08-01 18:22 - 000338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2018-08-15 04:05 - 2018-08-01 18:21 - 000296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2018-08-15 04:05 - 2018-08-01 18:21 - 000129536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\videoprt.sys
2018-08-15 04:05 - 2018-08-01 18:17 - 000291328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2018-08-15 04:05 - 2018-08-01 18:17 - 000160256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2018-08-15 04:05 - 2018-08-01 18:17 - 000129536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2018-08-15 04:05 - 2018-08-01 18:16 - 000112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2018-08-15 04:05 - 2018-08-01 18:16 - 000064512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdk8.sys
2018-08-15 04:05 - 2018-08-01 18:16 - 000062464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelppm.sys
2018-08-15 04:05 - 2018-08-01 18:16 - 000060928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\processr.sys
2018-08-15 04:05 - 2018-08-01 18:16 - 000060928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdppm.sys
2018-08-15 04:05 - 2018-08-01 18:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-08-15 04:05 - 2018-08-01 18:16 - 000030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2018-08-15 04:05 - 2018-08-01 18:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-08-15 04:05 - 2018-08-01 18:11 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-08-15 04:05 - 2018-08-01 18:11 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-08-15 04:05 - 2018-08-01 18:11 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-08-15 04:05 - 2018-08-01 18:10 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-08-15 04:05 - 2018-08-01 18:10 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:10 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-08-15 04:05 - 2018-08-01 18:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-08-15 04:05 - 2018-07-19 15:53 - 000396936 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2018-08-15 04:05 - 2018-07-19 14:58 - 000350272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-08-15 04:05 - 2018-07-18 22:15 - 025745408 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2018-08-15 04:05 - 2018-07-18 20:48 - 002724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2018-08-15 04:05 - 2018-07-18 20:47 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2018-08-15 04:05 - 2018-07-18 20:35 - 002902016 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2018-08-15 04:05 - 2018-07-18 20:34 - 000066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2018-08-15 04:05 - 2018-07-18 20:33 - 000576512 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2018-08-15 04:05 - 2018-07-18 20:33 - 000417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2018-08-15 04:05 - 2018-07-18 20:33 - 000048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2018-08-15 04:05 - 2018-07-18 20:32 - 000088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2018-08-15 04:05 - 2018-07-18 20:30 - 005778432 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2018-08-15 04:05 - 2018-07-18 20:26 - 000054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2018-08-15 04:05 - 2018-07-18 20:25 - 000034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2018-08-15 04:05 - 2018-07-18 20:23 - 000615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2018-08-15 04:05 - 2018-07-18 20:22 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-08-15 04:05 - 2018-07-18 20:22 - 000794624 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2018-08-15 04:05 - 2018-07-18 20:22 - 000144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2018-08-15 04:05 - 2018-07-18 20:22 - 000116224 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2018-08-15 04:05 - 2018-07-18 20:21 - 000814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2018-08-15 04:05 - 2018-07-18 20:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-08-15 04:05 - 2018-07-18 20:14 - 000969216 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2018-08-15 04:05 - 2018-07-18 20:11 - 000489984 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2018-08-15 04:05 - 2018-07-18 20:05 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-08-15 04:05 - 2018-07-18 20:05 - 000077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2018-08-15 04:05 - 2018-07-18 20:04 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-08-15 04:05 - 2018-07-18 20:04 - 000087552 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2018-08-15 04:05 - 2018-07-18 20:04 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-08-15 04:05 - 2018-07-18 20:04 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-08-15 04:05 - 2018-07-18 20:03 - 000107520 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2018-08-15 04:05 - 2018-07-18 20:03 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-08-15 04:05 - 2018-07-18 20:01 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-08-15 04:05 - 2018-07-18 20:00 - 000199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2018-08-15 04:05 - 2018-07-18 20:00 - 000092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2018-08-15 04:05 - 2018-07-18 19:58 - 000315392 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2018-08-15 04:05 - 2018-07-18 19:58 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-08-15 04:05 - 2018-07-18 19:57 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-08-15 04:05 - 2018-07-18 19:56 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-08-15 04:05 - 2018-07-18 19:56 - 000152064 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2018-08-15 04:05 - 2018-07-18 19:55 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-08-15 04:05 - 2018-07-18 19:55 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-08-15 04:05 - 2018-07-18 19:54 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-08-15 04:05 - 2018-07-18 19:47 - 000262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2018-08-15 04:05 - 2018-07-18 19:46 - 015283712 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2018-08-15 04:05 - 2018-07-18 19:46 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-08-15 04:05 - 2018-07-18 19:45 - 000809472 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2018-08-15 04:05 - 2018-07-18 19:45 - 000728064 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2018-08-15 04:05 - 2018-07-18 19:43 - 002136064 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2018-08-15 04:05 - 2018-07-18 19:43 - 001359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2018-08-15 04:05 - 2018-07-18 19:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-08-15 04:05 - 2018-07-18 19:41 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-08-15 04:05 - 2018-07-18 19:41 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-08-15 04:05 - 2018-07-18 19:39 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-08-15 04:05 - 2018-07-18 19:38 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-08-15 04:05 - 2018-07-18 19:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-08-15 04:05 - 2018-07-18 19:35 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-08-15 04:05 - 2018-07-18 19:32 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-08-15 04:05 - 2018-07-18 19:31 - 004510720 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2018-08-15 04:05 - 2018-07-18 19:30 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-08-15 04:05 - 2018-07-18 19:28 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-08-15 04:05 - 2018-07-18 19:28 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-08-15 04:05 - 2018-07-18 19:28 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-08-15 04:05 - 2018-07-18 19:27 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-08-15 04:05 - 2018-07-18 19:20 - 001554944 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2018-08-15 04:05 - 2018-07-18 19:09 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-08-15 04:05 - 2018-07-18 19:09 - 000800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2018-08-15 04:05 - 2018-07-18 19:06 - 001329152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-08-15 04:05 - 2018-07-18 19:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-08-15 04:05 - 2018-07-13 11:19 - 001894080 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2018-08-15 04:05 - 2018-07-13 11:19 - 000377024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2018-08-15 04:05 - 2018-07-13 11:19 - 000287936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2018-08-15 04:05 - 2018-07-08 08:08 - 000383680 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2018-08-15 04:05 - 2018-07-08 08:02 - 000152064 _____ (Microsoft Corporation) C:\Windows\System32\t2embed.dll
2018-08-15 04:05 - 2018-07-08 08:02 - 000100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2018-08-15 04:05 - 2018-07-08 08:02 - 000041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2018-08-15 04:05 - 2018-07-08 08:01 - 000046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2018-08-15 04:05 - 2018-07-08 08:01 - 000014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2018-08-15 04:05 - 2018-07-08 07:47 - 000309440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-08-15 04:05 - 2018-07-08 07:42 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-08-15 04:05 - 2018-07-08 07:42 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-08-15 04:05 - 2018-07-08 07:41 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-08-15 04:05 - 2018-07-08 07:41 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-08-15 04:05 - 2018-07-08 07:13 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-08-15 04:05 - 2018-07-07 07:24 - 003226112 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2018-08-15 04:05 - 2018-07-06 08:09 - 000947904 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2018-08-15 04:05 - 2018-07-06 08:03 - 000056832 _____ (Microsoft Corporation) C:\Windows\System32\mf3216.dll
2018-08-15 04:05 - 2018-07-06 08:03 - 000008192 _____ (Microsoft Corporation) C:\Windows\System32\msimg32.dll
2018-08-15 04:05 - 2018-07-06 07:48 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2018-08-15 04:05 - 2018-07-06 07:48 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2018-08-15 04:05 - 2018-06-29 07:55 - 000695808 _____ (Microsoft Corporation) C:\Windows\System32\cscsvc.dll
2018-08-15 04:05 - 2018-06-29 07:55 - 000137728 _____ (Microsoft Corporation) C:\Windows\System32\CscMig.dll
2018-08-15 04:05 - 2018-06-29 07:55 - 000045568 _____ (Microsoft Corporation) C:\Windows\System32\cscapi.dll
2018-08-15 04:05 - 2018-06-29 07:55 - 000030208 _____ (Microsoft Corporation) C:\Windows\System32\cscdll.dll
2018-08-15 04:05 - 2018-06-29 07:40 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
2018-08-15 04:05 - 2018-06-29 07:14 - 000516096 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\csc.sys
2018-08-15 04:05 - 2018-06-29 07:09 - 000034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
2018-08-15 04:05 - 2018-06-27 08:01 - 000114368 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2018-08-15 04:05 - 2018-06-27 07:55 - 003246592 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2018-08-15 04:05 - 2018-06-27 07:55 - 000504320 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2018-08-15 04:05 - 2018-06-27 07:55 - 000484864 _____ (Microsoft Corporation) C:\Windows\System32\StructuredQuery.dll
2018-08-15 04:05 - 2018-06-27 07:55 - 000025088 _____ (Microsoft Corporation) C:\Windows\System32\msimsg.dll
2018-08-15 04:05 - 2018-06-27 07:54 - 001942016 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2018-08-15 04:05 - 2018-06-27 07:54 - 000070144 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2018-08-15 04:05 - 2018-06-27 07:43 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-08-15 04:05 - 2018-06-27 07:42 - 002366464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-08-15 04:05 - 2018-06-27 07:42 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2018-08-15 04:05 - 2018-06-27 07:42 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2018-08-15 04:05 - 2018-06-27 07:41 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-08-15 04:05 - 2018-06-27 07:21 - 000128512 _____ (Microsoft Corporation) C:\Windows\System32\msiexec.exe
2018-08-15 04:05 - 2018-06-27 07:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-08-15 04:05 - 2018-06-20 19:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2018-08-15 04:05 - 2018-06-20 19:09 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-08-14 08:39 - 2018-08-14 08:39 - 003989028 _____ C:\Users\User\Desktop\510486020818_faktura.pdf
2018-08-14 07:16 - 2018-08-14 07:16 - 000135137 _____ C:\Users\User\Desktop\O19_Faktura_zbiorowa_000-048-0422-6068_18_06_F006_U1806201091439357107.pdf
2018-08-13 10:54 - 2018-08-13 10:54 - 000000000 ____D C:\Windows\System32\Tasks\Norton AntiVirus
2018-08-13 10:49 - 2018-08-13 10:49 - 000003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2018-08-12 03:08 - 2018-08-16 07:35 - 000000000 ____D C:\Users\User\Desktop\ED
2018-08-10 05:52 - 2018-08-10 06:03 - 000000000 ____D C:\Users\User\Desktop\lata
2018-08-04 13:16 - 2018-08-04 13:16 - 000002166 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2018-08-01 08:10 - 2018-08-01 08:10 - 000067511 _____ C:\Users\User\Desktop\FS 357_07_2018.pdf
2018-07-31 12:41 - 2018-07-31 12:41 - 000099920 _____ (Symantec Corporation) C:\Windows\System32\Drivers\SYMEVENT64x86.SYS
2018-07-31 12:41 - 2018-07-31 12:41 - 000010396 _____ C:\Windows\System32\Drivers\SYMEVENT64x86.CAT
2018-07-31 12:40 - 2018-08-13 10:47 - 000002237 _____ C:\Users\Public\Desktop\Norton Security.lnk
2018-07-31 12:40 - 2018-08-10 15:35 - 000000000 ____D C:\Program Files\Norton Security
2018-07-31 12:39 - 2018-07-31 12:39 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2018-07-31 12:36 - 2018-07-31 12:36 - 000000000 ____D C:\ProgramData\PCSettings
2018-07-31 12:34 - 2018-07-31 12:34 - 013020688 _____ (Symantec Corporation) C:\Users\User\Desktop\NRnR.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-19 18:13 - 2017-10-27 09:31 - 000000000 ____D C:\ProgramData\Google
2018-08-19 18:13 - 2016-10-20 13:07 - 000000000 ____D C:\users\DefaultAppPool
2018-08-19 18:13 - 2011-06-12 05:54 - 000000000 ____D C:\Users\User\AppData\Local\Google
2018-08-19 18:13 - 2010-11-19 06:19 - 000000000 ____D C:\ProgramData\Norton
2018-08-19 18:13 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\registration
2018-08-19 18:13 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\inf
2018-08-19 07:35 - 2011-12-10 10:27 - 016178176 ___SH C:\Users\User\Desktop\Thumbs.db
2018-08-16 11:30 - 2011-12-08 10:02 - 000000000 ____D C:\ProgramData\TEMP
2018-08-16 09:32 - 2010-11-17 13:22 - 016199322 _____ C:\Windows\System32\perfh015.dat
2018-08-16 09:32 - 2010-11-17 13:22 - 005666656 _____ C:\Windows\System32\perfc015.dat
2018-08-16 09:32 - 2009-07-13 21:13 - 000007626 _____ C:\Windows\System32\PerfStringBackup.INI
2018-08-16 09:30 - 2017-05-22 10:33 - 000000000 ____D C:\Users\User\Desktop\Indie
2018-08-16 09:28 - 2016-11-18 10:26 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2018-08-16 07:59 - 2017-03-08 13:04 - 000000000 ____D C:\ProgramData\Acronis
2018-08-16 07:10 - 2016-05-31 07:08 - 000000000 ____D C:\Users\User\Documents\INSTRUKCJE OBSŁUGI
2018-08-16 05:34 - 2009-07-13 20:45 - 000025616 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-16 05:34 - 2009-07-13 20:45 - 000025616 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-16 05:23 - 2009-07-13 21:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-16 05:23 - 2009-07-13 20:45 - 004859328 _____ C:\Windows\System32\FNTCACHE.DAT
2018-08-15 12:33 - 2013-07-30 20:04 - 000000000 ____D C:\Windows\System32\MRT
2018-08-15 12:32 - 2010-11-19 10:29 - 137343192 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe
2018-08-15 03:06 - 2018-03-14 10:06 - 000004570 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-08-15 03:06 - 2012-03-30 05:43 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-08-15 03:06 - 2012-03-30 05:43 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-08-15 03:06 - 2011-11-26 11:48 - 000000000 ____D C:\Windows\System32\Macromed
2018-08-15 03:06 - 2011-06-16 05:08 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-08-15 03:06 - 2010-11-19 06:06 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-08-14 07:57 - 2018-02-10 04:30 - 000000000 ____D C:\RESET2
2018-08-14 07:24 - 2018-03-12 09:28 - 000000000 ____D C:\Users\User\Desktop\muzyka
2018-08-13 11:36 - 2015-06-09 07:23 - 000000000 ____D C:\Program Files\Common Files\AV
2018-08-13 10:49 - 2018-02-07 06:54 - 000000000 ____D C:\Windows\System32\Drivers\NGCx64
2018-08-12 03:57 - 2010-11-28 12:10 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2018-08-12 03:55 - 2018-04-03 12:29 - 000000000 ____D C:\Users\User\AppData\Roaming\MPC-HC
2018-08-12 00:58 - 2011-12-08 10:02 - 000000000 ____D C:\Program Files (x86)\Registry Mechanic
2018-08-12 00:22 - 2016-11-18 09:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-08-12 00:22 - 2012-05-14 12:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-08-10 15:35 - 2018-02-07 06:50 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2018-08-04 23:03 - 2018-01-26 10:28 - 000000000 ____D C:\Windows\rescache
2018-08-04 23:03 - 2014-07-19 12:25 - 000000000 ____D C:\ProgramData\54F3DE4E-B7BA-4EBD-8B3B-385D272CC583
2018-08-04 13:15 - 2011-06-12 05:54 - 000000000 ____D C:\Program Files (x86)\Google
2018-08-03 12:05 - 2012-12-07 12:59 - 000000000 ____D C:\Users\User\Documents\ebook
2018-08-03 12:03 - 2017-07-03 11:21 - 000000000 ____D C:\Users\User\Documents\My Kindle Content
2018-07-30 20:30 - 2016-12-09 07:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe
[2018-03-02 10:42] - [2017-12-31 17:50] - 000455680 _____ (Microsoft Corporation) 11D6A262B617130F7C16E308C12E0D41

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2018-07-10 09:14] - [2018-06-08 08:20] - 000512000 _____ (Microsoft Corporation) 43CCB07A71347064695B8852492DA126

C:\Windows\System32\dnsapi.dll
[2018-07-10 09:14] - [2018-06-08 08:19] - 000357888 _____ (Microsoft Corporation) 9B86DF86D1EFF32893BC3FB49BFAA993

C:\Windows\SysWOW64\dnsapi.dll
[2018-07-10 09:14] - [2018-06-08 07:54] - 000269824 _____ (Microsoft Corporation) 4A35D7B172AFF9C6B362D7297568836A

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points  =========================

Restore point date: 2018-08-16 11:30
Restore point date: 2018-08-19 07:43

==================== Memory info =========================== 

Percentage of memory in use: 6%
Total physical RAM: 32692.19 MB
Available physical RAM: 30531.58 MB
Total Virtual: 32690.34 MB
Available Virtual: 30536.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:488.95 GB) (Free:69.61 GB) NTFS
Drive d: () (Fixed) (Total:465.76 GB) (Free:245.85 GB) NTFS
Drive g: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from drive)]


==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 489 GB) (Disk ID: 8598F359)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=489 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 580D23CC)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 1.8 GB) (Disk ID: E327904B)
Partition 1: (Not Active) - (Size=965 MB) - (Type=0E)

LastRegBack: 2018-08-01 09:35

==================== End of FRST.txt ============================