Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 08-09-2019 Uruchomiony przez HP (administrator) HP-KOMPUTER (Hewlett-Packard HP 550) (12-09-2019 05:59:49) Uruchomiony z C:\Users\HP\Downloads Załadowane profile: HP (Dostępne profile: HP) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) () [Brak podpisu cyfrowego] C:\Program Files (x86)\PLAY INTERNET\PLAY INTERNET.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (Huawei Technologies Co., Ltd. -> ) C:\ProgramData\DatacardService\HWDeviceService64.exe (Huawei Technologies Co., Ltd. -> ) C:\ProgramData\PLAY INTERNET\OnlineUpdate\ouc.exe (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\osk.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera.exe (Opera Software AS -> Opera Software) C:\Users\62.0.3331.88\opera_crashreporter.exe (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCUpdate.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601928 2018-12-15] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22714912 2019-08-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\Run: [Flvto Youtube Downloader] => "C:\Users\HP\AppData\Local\Flvto YouTube Downloader\FlvtoYoutubeDownloader.Redesign.exe" /minimize HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: E - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: G - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {05f34097-94c7-11e9-9915-002186c2611b} - F:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29cea-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29cf3-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29cfd-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29d06-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29d10-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29d19-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {25e29d23-2197-11e9-8998-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {328efaf2-bcd3-11e8-a5c7-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e08e6-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e08ef-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e08f8-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0902-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e090b-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e091e-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0927-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0930-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0939-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0943-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e094c-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e095d-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0967-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0979-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0983-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e098c-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0995-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e099e-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09a8-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09b2-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09ba-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09c4-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09cd-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09d6-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09e0-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09e9-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09f2-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e09fb-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a05-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a0f-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a17-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a21-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a2a-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a33-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a3d-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a46-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a4f-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a59-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a61-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a6b-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a76-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a7f-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a88-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a91-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0a9a-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0aa4-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0aad-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0ab6-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0abf-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0ac8-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0ad2-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0adb-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0ae4-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0aed-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0af7-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0aff-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b09-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b13-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b1b-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b25-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b2e-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b36-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b3f-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b49-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b52-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b5c-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b64-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b6d-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b80-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b88-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b92-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {4e9e0b9b-eac0-11e8-9d81-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {5563bd97-5663-11bd-8fa6-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {588d480f-5f6d-11e8-922e-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {59740716-b422-11e8-ac41-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dedc-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dee5-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429deee-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429def7-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df01-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df0a-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df14-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df1c-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df26-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df2f-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df39-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df42-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df4c-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df54-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df5d-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df67-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df70-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df79-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df83-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df8c-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df95-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429df9f-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfa8-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfb2-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfba-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfc3-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfcc-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfd6-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfde-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dfe8-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dff2-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429dffb-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e004-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e00d-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e016-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e020-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e029-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e032-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e03b-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e045-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e04e-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e057-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e061-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e06a-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e073-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e07c-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e086-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e08f-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e098-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0a1-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0aa-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0b3-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0bc-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0c5-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {6429e0d8-e597-11e8-94db-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {646c4c09-0c3d-11e9-b0c7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {742e50d9-2786-11e9-bf10-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {7816cafe-9e83-11e8-b5fa-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {7c42bb99-5459-11e7-8f4a-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d1f-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d27-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d31-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d3a-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d43-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d4d-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d56-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d5f-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d69-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d72-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d7c-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d85-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d8e-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78d98-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78da1-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78daa-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78db3-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dbc-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dc5-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dce-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dd7-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78de0-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dea-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78df3-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78dfc-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e06-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e0f-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e19-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e22-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e2c-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e34-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e3e-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e47-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e51-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e5a-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e63-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e6c-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e76-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e7e-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e87-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e90-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78e99-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ea3-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ead-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78eb6-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ebf-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ec9-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ed2-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78edb-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ee4-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78eee-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78ef7-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f00-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f0a-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f14-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f1d-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f25-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f2f-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f38-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f40-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f4a-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f52-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f5c-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f65-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f6e-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {b0d78f77-b1d3-11e8-b4a9-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b699-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6a2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6ad-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6b6-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6df-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6e9-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6f2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b6fb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b704-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b70d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b717-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b720-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b729-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b73b-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b745-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b74e-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b758-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b760-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b76a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b773-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b77c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b78a-b404-11e9-95e7-002186c2611b} - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b78f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b798-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7a2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7ac-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7b4-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7be-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7c7-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7d1-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7d9-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7e3-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7eb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7f5-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b7fd-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b807-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b80f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b818-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b821-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b82b-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b834-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b83d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b846-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b851-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b859-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b863-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b86b-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b876-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b87f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b887-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b891-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b89a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8a3-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8ac-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8b5-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8bf-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8c8-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8d2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8db-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8e4-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8ee-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b8f7-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b900-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b909-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b912-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b91c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b925-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b92f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b938-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b941-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b94a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b953-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b95d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b967-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b96f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b979-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b981-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b98b-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b994-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b99d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9a7-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9b0-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9b9-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9c2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9cc-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9d6-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9de-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9e8-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9f1-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9b9fb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba04-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba0d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba18-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba21-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba2a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba33-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba3c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba46-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba4f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba59-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba62-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba6c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba74-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba7e-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba88-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba90-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9ba9a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9baa3-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9baad-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bab6-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9babf-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bac8-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bad2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9badb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bae4-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9baed-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9baf6-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb00-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb09-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb13-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb1c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb2a-b404-11e9-95e7-002186c2611b} - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb2e-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb39-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb46-b404-11e9-95e7-002186c2611b} - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb4a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb54-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb5d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb66-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb70-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb79-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb83-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb8c-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb95-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bb9f-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bba8-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbb2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbbb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbc4-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbce-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbd7-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbdf-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbe9-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbf2-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bbfb-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc05-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc18-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc21-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc2a-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc33-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc3d-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc4b-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc55-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {bde9bc89-b404-11e9-95e7-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {c5465583-cc28-11e9-8888-002186c2611b} - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {c54655d8-cc28-11e9-8888-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430d94-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430da9-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430db4-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430dbf-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430dd0-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430de6-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430df1-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430dfc-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e07-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e12-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e1d-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e30-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e3b-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e46-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e51-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e5c-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e67-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e73-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e7e-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e89-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430e94-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ea0-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430eab-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ec1-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ecc-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ed7-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ee2-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430eed-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430ef8-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430f03-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430f0e-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430f19-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d4430f32-8e76-11e9-bc3c-002264573928} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {d443119f-8e76-11e9-bc3c-002264573928} - G:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {e5f7a7ea-55dd-11bd-96f3-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {e5f7a802-55dd-11bd-96f3-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {f61eb5b2-9a57-11e8-8ee2-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-21-2437599226-3963384277-246942413-1001\...\MountPoints2: {f760f74c-84eb-11e8-856d-002186c2611b} - E:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-12-17] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-18\...\RunOnce: [osk.exe] => C:\Windows\system32\osk.exe [692736 2014-06-18] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2009-08-02] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Brak podpisu cyfrowego] HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems, Inc.) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {105C49F9-8C5E-4E22-9F90-41F47706F676} - System32\Tasks\Opera scheduled assistant Autoupdate 1547273749 => C:\Users\HP\AppData\Local\Programs\Opera\launcher.exe [1519640 2019-07-23] (Opera Software AS -> Opera Software) Task: {2463C0C1-7651-45DC-9C77-EC4A2B6CA17C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_Plugin.exe [1457720 2019-09-11] (Adobe Inc. -> Adobe) Task: {48A88DBF-435E-4E5B-95C5-6DB3F4CABC8A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2045832 2019-08-20] (AVAST Software s.r.o. -> AVAST Software) Task: {50D631D5-F2CB-48DB-8F8A-7071CDFD92A7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {5799CD51-5589-4B26-B1D8-86D40A66EF57} - System32\Tasks\Opera scheduled Autoupdate 1564263617 => C:\Users\HP\AppData\Local\Programs\Opera\launcher.exe [1519640 2019-07-23] (Opera Software AS -> Opera Software) Task: {60E90384-CFDB-4253-A18A-CB142A0342DB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3942792 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) Task: {7330FACD-C6B6-4989-B332-8F9F30D8A97E} - System32\Tasks\Opera scheduled Autoupdate 1534452653 => C:\Users\HP\AppData\Local\Programs\Opera\launcher.exe [1519640 2019-07-23] (Opera Software AS -> Opera Software) Task: {796DBECD-3B96-4B75-B359-DEC892A4AE51} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-08-15] (Piriform Software Ltd -> Piriform Software Ltd) Task: {AB297AA2-E70C-4B8A-939B-5E8DF68E3D95} - System32\Tasks\Opera scheduled Autoupdate 1564264676 => C:\Users\launcher.exe [1519640 2019-07-23] (Opera Software AS -> Opera Software) Task: {BD86F709-0DC0-4135-B9A7-5734033E01A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16585328 2019-08-15] (Piriform Software Ltd -> Piriform Ltd) Task: {F25A1121-7693-481C-AF9D-0F1283FDB798} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-11] (Adobe Inc. -> Adobe) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\..\Interfaces\{0C98B422-64F3-4786-A2ED-346293CCB7E0}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{17269126-20D3-4EC9-985C-528A2761C3A7}: [NameServer] 89.108.202.20 185.89.185.1 Tcpip\..\Interfaces\{40122081-6C59-449C-8B56-CBEFB6EE5223}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{52263B28-1046-45AC-AA04-ABE48019AF90}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{79E9C67C-C2C2-4C85-8081-BAEA26669BFA}: [NameServer] 185.89.185.1 89.108.195.20 Tcpip\..\Interfaces\{B0767F34-104B-4A6D-8D2C-8F9C71BC3B53}: [NameServer] 89.108.202.20 185.89.185.1 Tcpip\..\Interfaces\{B962D1D1-C7E3-4D0E-893A-616FC106E0B9}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{C0CE50FD-6633-47FB-A84D-5B47DCA7035B}: [NameServer] 89.108.202.20 185.89.185.1 Internet Explorer: ================== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-19] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-19] (Oracle America, Inc. -> Oracle Corporation) FireFox: ======== FF DefaultProfile: o5b6s9e5.default FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\o5b6s9e5.default [2019-09-12] FF Extension: (Saba Security Plugin) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\o5b6s9e5.default\Extensions\saba_security_plugin@sabaservice.pl.xpi [2018-03-09] FF Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\o5b6s9e5.default\Extensions\sp@avast.com.xpi [2019-04-13] FF Extension: (Avast Online Security) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\o5b6s9e5.default\Extensions\wrc@avast.com.xpi [2019-01-19] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> ) FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-19] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-19] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> ) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.) Chrome: ======= CHR StartupUrls: Default -> "hxxps://www.google.com/" CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-09-12] CHR Extension: (Prezentacje) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-08-01] CHR Extension: (YouTube) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-08-01] CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-08-05] CHR Extension: (Arkusze) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-08-01] CHR Extension: (Dokumenty Google offline) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-08-09] CHR Extension: (Avast Online Security) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-08-05] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-08-05] CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-05] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (Google Translate) - C:\Users\HP\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2019-08-29] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5975136 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [405072 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8577760 2019-04-16] (BattlEye Innovations e.K. -> ) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] (Huawei Technologies Co., Ltd. -> ) S2 PLAY INTERNET. RunOuc; C:\Program Files (x86)\PLAY INTERNET\UpdateDog\ouc.exe [651856 2013-10-26] (Huawei Technologies Co., Ltd. -> ) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AgereSoftModem; C:\Windows\System32\DRIVERS\agrsm64.sys [1146880 2009-06-10] (Microsoft Windows -> LSI Corp) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [209552 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [263008 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [205848 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [61472 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [282768 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [169408 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112312 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87944 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1030784 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [478096 2019-08-27] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [236024 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [387176 2019-08-25] (AVAST Software s.r.o. -> AVAST Software) S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) R3 ew_usbenumfilter; C:\Windows\System32\DRIVERS\ew_usbenumfilter.sys [14976 2012-12-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) R3 huawei_enumerator; C:\Windows\System32\DRIVERS\ew_jubusenum.sys [91648 2013-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) R3 hwusb_cdcacm; C:\Windows\System32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) R3 hwusb_wwanecm; C:\Windows\System32\DRIVERS\ew_wwanecm.sys [380672 2014-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) U1 aswbdisk; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-09-12 05:40 - 2019-09-12 05:55 - 000006522 _____ C:\Users\HP\Downloads\Fixlog.txt 2019-09-12 05:39 - 2019-09-12 05:40 - 000002029 _____ C:\Users\HP\Downloads\gazhaxqxgratbadqsa.txt 2019-09-12 05:37 - 2019-09-12 05:37 - 000000002 _____ C:\Users\HP\Downloads\ijknnynjquxqvbwx.txt 2019-09-11 17:24 - 2019-08-29 04:56 - 003966904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2019-09-11 17:24 - 2019-08-29 04:55 - 004061112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2019-09-11 17:24 - 2019-08-29 04:55 - 000627424 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2019-09-11 17:24 - 2019-08-29 04:54 - 001319496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2019-09-11 17:24 - 2019-08-29 04:53 - 005553104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-09-11 17:24 - 2019-08-29 04:53 - 000709856 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2019-09-11 17:24 - 2019-08-29 04:53 - 000264120 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2019-09-11 17:24 - 2019-08-29 04:53 - 000155360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2019-09-11 17:24 - 2019-08-29 04:53 - 000096992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2019-09-11 17:24 - 2019-08-29 04:52 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:52 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:51 - 001670784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 001472512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 001211392 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 001162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 001078784 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000733184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000408576 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:50 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:27 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2019-09-11 17:24 - 2019-08-29 04:27 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2019-09-11 17:24 - 2019-08-29 04:22 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2019-09-11 17:24 - 2019-08-29 04:22 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2019-09-11 17:24 - 2019-08-29 04:22 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2019-09-11 17:24 - 2019-08-29 04:22 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2019-09-11 17:24 - 2019-08-29 04:22 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2019-09-11 17:24 - 2019-08-29 04:22 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2019-09-11 17:24 - 2019-08-29 04:22 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2019-09-11 17:24 - 2019-08-29 04:22 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2019-09-11 17:24 - 2019-08-29 04:21 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2019-09-11 17:24 - 2019-08-29 04:21 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:21 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:21 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:21 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2019-09-11 17:24 - 2019-08-29 04:19 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2019-09-11 17:24 - 2019-08-29 04:19 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys 2019-09-11 17:24 - 2019-08-29 04:18 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2019-09-11 17:24 - 2019-08-29 04:15 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2019-09-11 17:24 - 2019-08-29 04:15 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2019-09-11 17:24 - 2019-08-29 04:15 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2019-09-11 17:24 - 2019-08-29 04:15 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2019-09-11 17:24 - 2019-08-29 04:15 - 000161280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2019-09-11 17:24 - 2019-08-29 04:15 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2019-09-11 17:24 - 2019-08-29 04:14 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys 2019-09-11 17:24 - 2019-08-29 04:14 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2019-09-11 17:24 - 2019-08-27 22:50 - 000390536 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2019-09-11 17:24 - 2019-08-27 21:59 - 000341896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2019-09-11 17:24 - 2019-08-27 07:07 - 025752064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-09-11 17:24 - 2019-08-27 05:29 - 002909184 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-09-11 17:24 - 2019-08-27 05:27 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-09-11 17:24 - 2019-08-27 05:27 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2019-09-11 17:24 - 2019-08-27 05:27 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2019-09-11 17:24 - 2019-08-27 05:27 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2019-09-11 17:24 - 2019-08-27 05:26 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2019-09-11 17:24 - 2019-08-27 05:21 - 020290560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2019-09-11 17:24 - 2019-08-27 05:20 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2019-09-11 17:24 - 2019-08-27 05:19 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2019-09-11 17:24 - 2019-08-27 05:17 - 005500928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-09-11 17:24 - 2019-08-27 05:17 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2019-09-11 17:24 - 2019-08-27 05:16 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2019-09-11 17:24 - 2019-08-27 05:16 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2019-09-11 17:24 - 2019-08-27 05:15 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2019-09-11 17:24 - 2019-08-27 05:15 - 000790528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-09-11 17:24 - 2019-08-27 05:08 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2019-09-11 17:24 - 2019-08-27 05:05 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2019-09-11 17:24 - 2019-08-27 05:03 - 000496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2019-09-11 17:24 - 2019-08-27 05:03 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2019-09-11 17:24 - 2019-08-27 05:02 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2019-09-11 17:24 - 2019-08-27 05:02 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2019-09-11 17:24 - 2019-08-27 05:01 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2019-09-11 17:24 - 2019-08-27 04:59 - 002301952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2019-09-11 17:24 - 2019-08-27 04:59 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2019-09-11 17:24 - 2019-08-27 04:58 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2019-09-11 17:24 - 2019-08-27 04:58 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2019-09-11 17:24 - 2019-08-27 04:56 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2019-09-11 17:24 - 2019-08-27 04:56 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2019-09-11 17:24 - 2019-08-27 04:55 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2019-09-11 17:24 - 2019-08-27 04:54 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2019-09-11 17:24 - 2019-08-27 04:54 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2019-09-11 17:24 - 2019-08-27 04:53 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2019-09-11 17:24 - 2019-08-27 04:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2019-09-11 17:24 - 2019-08-27 04:53 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2019-09-11 17:24 - 2019-08-27 04:52 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2019-09-11 17:24 - 2019-08-27 04:50 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2019-09-11 17:24 - 2019-08-27 04:45 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2019-09-11 17:24 - 2019-08-27 04:42 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2019-09-11 17:24 - 2019-08-27 04:40 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2019-09-11 17:24 - 2019-08-27 04:40 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2019-09-11 17:24 - 2019-08-27 04:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2019-09-11 17:24 - 2019-08-27 04:39 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2019-09-11 17:24 - 2019-08-27 04:39 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2019-09-11 17:24 - 2019-08-27 04:37 - 002132480 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2019-09-11 17:24 - 2019-08-27 04:37 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2019-09-11 17:24 - 2019-08-27 04:37 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2019-09-11 17:24 - 2019-08-27 04:36 - 015389184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-09-11 17:24 - 2019-08-27 04:36 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2019-09-11 17:24 - 2019-08-27 04:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2019-09-11 17:24 - 2019-08-27 04:34 - 000350208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2019-09-11 17:24 - 2019-08-27 04:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2019-09-11 17:24 - 2019-08-27 04:30 - 004112384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2019-09-11 17:24 - 2019-08-27 04:28 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2019-09-11 17:24 - 2019-08-27 04:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2019-09-11 17:24 - 2019-08-27 04:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2019-09-11 17:24 - 2019-08-27 04:26 - 004859392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2019-09-11 17:24 - 2019-08-27 04:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2019-09-11 17:24 - 2019-08-27 04:23 - 013791744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2019-09-11 17:24 - 2019-08-27 04:15 - 001568256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2019-09-11 17:24 - 2019-08-27 04:09 - 004387840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2019-09-11 17:24 - 2019-08-27 04:06 - 001331712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2019-09-11 17:24 - 2019-08-27 04:04 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-09-11 17:24 - 2019-08-27 04:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2019-09-11 17:24 - 2019-08-23 00:07 - 000628480 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2019-09-11 17:24 - 2019-08-21 03:59 - 000311008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2019-09-11 17:24 - 2019-08-21 03:56 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2019-09-11 17:24 - 2019-08-21 03:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2019-09-11 17:24 - 2019-08-21 03:56 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2019-09-11 17:24 - 2019-08-21 01:19 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2019-09-11 17:24 - 2019-08-20 06:24 - 000385248 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2019-09-11 17:24 - 2019-08-20 06:21 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2019-09-11 17:24 - 2019-08-20 06:21 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2019-09-11 17:24 - 2019-08-20 06:21 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2019-09-11 17:24 - 2019-08-20 06:21 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2019-09-11 17:24 - 2019-08-20 05:59 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ws2ifsl.sys 2019-09-11 17:24 - 2019-08-20 05:51 - 003232256 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2019-09-11 17:24 - 2019-08-20 04:47 - 001251840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2019-09-11 17:24 - 2019-08-15 09:59 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2019-09-11 17:24 - 2019-08-15 09:59 - 000583680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2019-09-11 17:24 - 2019-08-14 19:54 - 003229184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2019-09-11 17:24 - 2019-08-14 19:54 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll 2019-09-11 17:24 - 2019-08-14 19:53 - 000253440 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll 2019-09-11 17:24 - 2019-08-14 19:53 - 000131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2019-09-11 17:24 - 2019-08-14 07:22 - 000374496 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2019-09-11 17:24 - 2019-08-14 07:20 - 003730432 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2019-09-11 17:24 - 2019-08-14 07:20 - 000300032 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2019-09-11 17:24 - 2019-08-14 07:20 - 000282112 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2019-09-11 17:24 - 2019-08-14 07:20 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2019-09-11 17:24 - 2019-08-14 07:19 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2019-09-11 17:24 - 2019-08-14 07:04 - 001053184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2019-09-11 17:24 - 2019-08-14 07:04 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2019-09-11 17:24 - 2019-08-14 06:59 - 001120768 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2019-09-11 17:24 - 2019-08-14 06:59 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2019-09-11 17:24 - 2019-08-14 06:52 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2019-09-11 17:24 - 2019-08-14 00:20 - 000162016 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2019-09-11 17:24 - 2019-08-14 00:19 - 000988384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2019-09-11 17:24 - 2019-08-14 00:19 - 000267488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2019-09-11 17:24 - 2019-08-14 00:16 - 001009664 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2019-09-11 17:24 - 2019-08-14 00:16 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2019-09-11 17:24 - 2019-08-14 00:15 - 000732160 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2019-09-11 17:24 - 2019-08-14 00:15 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2019-09-11 17:24 - 2019-08-14 00:15 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2019-09-11 17:24 - 2019-08-14 00:13 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2019-09-11 17:24 - 2019-08-14 00:13 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2019-09-11 17:24 - 2019-08-14 00:13 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2019-09-11 17:24 - 2019-08-13 04:58 - 001312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2019-09-11 17:24 - 2019-08-13 04:58 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll 2019-09-11 17:24 - 2019-08-13 04:58 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2019-09-11 17:24 - 2019-08-13 04:58 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll 2019-09-11 17:24 - 2019-08-13 02:56 - 002863104 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2019-09-11 17:24 - 2019-08-13 02:56 - 001712640 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2019-09-11 17:24 - 2019-08-13 02:56 - 001650176 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2019-09-11 17:24 - 2019-08-13 02:56 - 000802304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2019-09-11 17:24 - 2019-08-13 02:56 - 000634368 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2019-09-11 17:24 - 2019-08-13 02:56 - 000501760 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2019-09-11 17:23 - 2019-08-29 04:52 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2019-09-11 17:23 - 2019-08-29 04:52 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2019-09-11 17:23 - 2019-08-29 04:52 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2019-09-11 17:23 - 2019-08-29 04:50 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2019-09-11 17:23 - 2019-08-29 04:50 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2019-09-11 17:23 - 2019-08-29 04:50 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2019-09-11 17:23 - 2019-08-27 05:41 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2019-09-11 17:23 - 2019-08-27 05:41 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2019-09-11 17:23 - 2019-08-27 05:15 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2019-09-11 17:23 - 2019-08-13 02:56 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2019-09-11 17:23 - 2019-08-13 02:56 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2019-09-11 17:23 - 2019-08-13 02:56 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2019-09-09 05:52 - 2019-09-09 05:52 - 000035217 _____ C:\Users\HP\Downloads\Shortcut.txt 2019-09-09 05:05 - 2019-09-09 05:52 - 000043484 _____ C:\Users\HP\Downloads\Addition.txt 2019-09-09 03:48 - 2019-09-12 06:23 - 000067348 _____ C:\Users\HP\Downloads\FRST.txt 2019-09-09 03:45 - 2019-09-12 05:59 - 000000000 ____D C:\FRST 2019-09-09 03:43 - 2019-09-09 03:44 - 001614848 _____ (Farbar) C:\Users\HP\Downloads\FRST64.exe 2019-09-09 03:28 - 2019-09-09 03:29 - 000061078 _____ C:\Users\HP\Downloads\pobrany plik.htm 2019-09-08 06:41 - 2019-09-08 06:41 - 000281767 _____ C:\Users\HP\Desktop\▶ Raggamafia (2007), BABYLON WAR.html 2019-09-08 06:41 - 2019-09-08 06:41 - 000000000 ____D C:\Users\HP\Desktop\▶ Raggamafia (2007), BABYLON WAR_files 2019-08-31 06:39 - 2019-07-06 03:10 - 000000000 ____D C:\Users\HP\Desktop\Bicep - 2017 - Bicep (Ninja Tune) 2019-08-31 06:28 - 2019-08-31 06:31 - 118634528 _____ C:\Users\HP\Downloads\Bicep - 2017 - Bicep (Ninja Tune).rar 2019-08-30 05:45 - 2019-08-29 21:44 - 000000000 ____D C:\Users\HP\Desktop\Scuba - Update 2019-08-30 05:42 - 2019-08-30 05:44 - 179136103 _____ C:\Users\HP\Downloads\Scuba - Update.rar 2019-08-25 23:09 - 2019-08-25 23:09 - 000000000 ____D C:\Users\HP\AppData\Local\Flvto.biz 2019-08-25 22:17 - 2019-08-25 22:33 - 013821484 _____ (Flvto.biz) C:\Users\HP\Downloads\FYDLoad_inconv2_1.exe 2019-08-25 11:54 - 2019-08-25 12:00 - 046657416 _____ C:\Users\HP\Downloads\[MÖRK003] nthng - 1996 EP (WEB) [2015] 320Kbps.rar 2019-08-25 11:53 - 2019-08-25 12:00 - 059456003 _____ C:\Users\HP\Downloads\Stephen M. Stahl - Essential Psychopharmacology.rar 2019-08-25 11:38 - 2019-08-25 11:42 - 104944370 _____ C:\Users\HP\Downloads\-1986- Witkacy - PEYOTL (CD, Polonia Records, rel. 1996).rar 2019-08-25 11:34 - 2019-08-25 11:34 - 000000000 ____D C:\Users\HP\Downloads\Xpander EP 2019-08-25 11:32 - 2019-08-25 11:32 - 000000979 _____ C:\Users\Public\Desktop\Winamp.lnk 2019-08-25 11:32 - 2019-08-25 11:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp 2019-08-25 11:31 - 2019-08-25 23:09 - 000000000 ____D C:\Users\HP\AppData\Roaming\Winamp 2019-08-25 11:31 - 2019-08-25 11:33 - 000000000 ____D C:\Program Files (x86)\Winamp 2019-08-25 11:29 - 2019-08-25 11:29 - 000002003 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2019-08-25 11:29 - 2019-08-25 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2019-08-25 11:28 - 2019-08-25 14:29 - 000000000 ____D C:\Program Files (x86)\bookingDesktopApp 2019-08-25 11:22 - 2019-08-25 11:22 - 017412576 _____ (Nullsoft, Inc.) C:\Users\HP\Downloads\winamp566_full_all.exe 2019-08-25 11:12 - 2019-08-25 11:29 - 091106359 _____ C:\Users\HP\Downloads\Xpander EP.rar 2019-08-25 11:10 - 2019-08-25 11:11 - 002342568 _____ (Mabim ) C:\Users\HP\Downloads\pobierz_Winamp_full_5.666_V5.666.3516_1353544420.exe 2019-08-25 11:09 - 2019-09-09 06:24 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-08-25 11:08 - 2019-08-27 11:36 - 000478096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000387176 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000363912 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2019-08-25 11:08 - 2019-08-25 11:08 - 000282768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000236024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000169408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000112312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000087944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2019-08-25 11:08 - 2019-08-25 11:08 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 001030784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 000263008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 000209552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 000205848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 000061472 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2019-08-25 11:08 - 2019-08-25 11:07 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2019-08-25 10:59 - 2019-08-25 10:59 - 000007353 _____ C:\Users\HP\foobar2000_v1.4.6.exe 2019-08-25 10:39 - 2019-08-25 10:39 - 000000000 ____D C:\Program Files\AVAST Software 2019-08-25 10:36 - 2019-08-25 10:36 - 002495584 _____ ( ) C:\Users\HP\Downloads\foobar2000-13337-AsystentPobierania_3904587957.exe 2019-08-25 10:32 - 2019-08-17 20:09 - 000000000 ____D C:\Program Files\Sasha - Xpander EP 2019-08-25 10:02 - 2019-08-25 10:24 - 330388291 _____ C:\Users\HP\Downloads\Sasha - Xpander EP.rar 2019-08-14 10:43 - 2019-08-14 10:44 - 000000000 ____D C:\Users\HP\AppData\Roaming\Ad-Aware Antivirus 2019-08-14 10:42 - 2019-08-14 10:43 - 005992056 ____N (Lavasoft Limited) C:\Users\HP\Downloads\ad_aware_free_internet_security_10.0.173.3160_(www.programy.57.pl).exe 2019-08-14 10:15 - 2019-09-12 05:31 - 000000000 ____D C:\Program Files\CCleaner 2019-08-14 10:15 - 2019-09-09 06:47 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update 2019-08-14 10:15 - 2019-09-09 06:47 - 000002808 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2019-08-14 10:15 - 2019-08-14 10:15 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-08-14 10:15 - 2019-08-14 10:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2019-08-14 09:57 - 2019-08-14 09:57 - 020888528 _____ (Piriform Software Ltd) C:\Users\HP\Downloads\cctrialsetup.exe 2019-08-14 05:28 - 2019-07-30 04:20 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2019-08-14 05:28 - 2019-07-30 04:20 - 000517632 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2019-08-14 05:28 - 2019-07-30 04:16 - 001425920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2019-08-14 05:28 - 2019-07-30 03:56 - 000556032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2019-08-14 05:28 - 2019-07-30 03:56 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe 2019-08-14 05:28 - 2019-07-30 03:56 - 000080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS 2019-08-14 05:28 - 2019-07-30 03:56 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys 2019-08-14 05:28 - 2019-07-13 10:36 - 000289720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2019-08-14 05:28 - 2019-07-13 10:35 - 001894840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2019-08-14 05:28 - 2019-07-13 10:35 - 000378808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2019-08-14 05:28 - 2019-07-13 10:34 - 001391616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2019-08-14 05:28 - 2019-07-13 10:34 - 000335360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2PGraph.dll 2019-08-14 05:28 - 2019-07-13 10:34 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll 2019-08-14 05:28 - 2019-07-13 10:34 - 000180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2019-08-14 05:28 - 2019-07-13 10:34 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2019-08-14 05:28 - 2019-07-13 10:34 - 000039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ssdpapi.dll 2019-08-14 05:28 - 2019-07-13 10:33 - 000256512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2019-08-14 05:28 - 2019-07-13 10:33 - 000194560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2019-08-14 05:28 - 2019-07-13 10:33 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll 2019-08-14 05:28 - 2019-07-13 10:33 - 000043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000408576 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000264704 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000198656 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000193024 _____ (Microsoft Corporation) C:\Windows\system32\ssdpsrv.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\Groupinghc.dll 2019-08-14 05:28 - 2019-07-13 10:32 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\ssdpapi.dll 2019-08-14 05:28 - 2019-07-13 10:31 - 000318976 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2019-08-14 05:28 - 2019-07-13 10:31 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2019-08-14 05:28 - 2019-07-13 10:31 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll 2019-08-14 05:28 - 2019-07-13 10:31 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2019-08-14 05:28 - 2019-07-13 10:31 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcmonitor.dll 2019-08-14 05:28 - 2019-07-13 10:22 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll 2019-08-14 05:28 - 2019-07-13 10:13 - 000011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcmonitor.dll 2019-08-14 05:28 - 2019-07-04 03:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2019-08-14 05:28 - 2019-07-04 03:14 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2019-08-14 05:27 - 2019-07-30 04:20 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll 2019-08-14 05:27 - 2019-07-30 04:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll 2019-08-14 05:27 - 2019-07-30 04:16 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll 2019-08-14 05:27 - 2019-07-30 03:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll 2019-08-14 05:27 - 2019-07-13 10:34 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2019-08-14 05:27 - 2019-07-13 10:32 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2019-08-13 05:58 - 2019-08-13 05:58 - 000000288 _____ C:\Users\HP\Documents\mal.txt ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-09-12 06:12 - 2009-07-14 06:45 - 000019520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2019-09-12 06:12 - 2009-07-14 06:45 - 000019520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2019-09-12 05:58 - 2009-07-14 19:55 - 000740074 _____ C:\Windows\system32\perfh015.dat 2019-09-12 05:58 - 2009-07-14 19:55 - 000155592 _____ C:\Windows\system32\perfc015.dat 2019-09-12 05:58 - 2009-07-14 07:13 - 001668250 _____ C:\Windows\system32\PerfStringBackup.INI 2019-09-12 05:58 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2019-09-12 05:51 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-09-12 05:51 - 1980-01-04 00:01 - 000299480 _____ C:\Windows\system32\FNTCACHE.DAT 2019-09-12 05:46 - 2018-02-15 16:34 - 000000000 ___SD C:\Windows\system32\CompatTel 2019-09-12 05:44 - 2018-03-08 21:20 - 000000000 ____D C:\Users\HP\AppData\LocalLow\Temp 2019-09-11 16:49 - 2018-03-14 11:13 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier 2019-09-11 16:49 - 2017-06-14 17:22 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-09-11 16:49 - 2017-06-14 17:22 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2019-09-11 16:49 - 2017-06-14 17:22 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2019-09-11 16:49 - 2017-06-14 17:22 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2019-09-11 16:49 - 2017-06-14 17:22 - 000000000 ____D C:\Windows\system32\Macromed 2019-09-09 06:47 - 2019-07-27 23:57 - 000004030 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1564264676 2019-09-09 06:47 - 2019-07-27 23:40 - 000004090 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1564263617 2019-09-09 06:47 - 2019-01-19 16:41 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2019-09-06 04:44 - 2019-07-27 23:58 - 000000963 _____ C:\Users\installer_prefs.json.backup 2019-09-06 04:44 - 2019-07-27 23:57 - 000000963 _____ C:\Users\installer_prefs.json 2019-08-31 07:48 - 2018-02-04 19:27 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps 2019-08-27 05:45 - 2017-12-25 18:19 - 001641040 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2019-08-25 23:25 - 2017-12-26 17:18 - 000541612 _____ C:\Users\HP\AppData\Roaming\downloads.json 2019-08-25 23:13 - 2017-12-25 18:30 - 000000000 ____D C:\Users\HP\Documents\YouTubeDownloads 2019-08-25 23:10 - 2017-12-25 18:31 - 000000000 ____D C:\Users\HP\AppData\Roaming\FlvtoConverter 2019-08-25 14:28 - 2018-04-12 20:31 - 000000000 ____D C:\Program Files (x86)\MobileBrServ 2019-08-25 14:27 - 2018-06-12 01:41 - 000000000 ____D C:\Program Files (x86)\Google 2019-08-25 11:30 - 2019-01-19 16:50 - 000000000 ____D C:\Users\HP\AppData\Roaming\AVAST Software 2019-08-25 10:59 - 2018-06-12 01:37 - 000000000 ____D C:\Users\HP 2019-08-25 10:38 - 2018-03-06 16:36 - 000000000 ____D C:\ProgramData\AVAST Software 2019-08-25 00:22 - 2018-03-14 19:01 - 000000000 ____D C:\Users\HP\AppData\Local\Tibia 2019-08-15 12:55 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache 2019-08-15 03:22 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\PolicyDefinitions 2019-08-14 10:23 - 2018-06-23 04:58 - 000000000 ____D C:\Windows\Minidump 2019-08-14 10:23 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\ModemLogs ==================== Pliki w katalogu głównym wybranych folderów ================ 2019-07-27 23:57 - 2019-07-23 12:48 - 004353832 _____ (Microsoft Corporation) C:\Users\62.0.3331.88\d3dcompiler_47.dll 2019-07-27 23:57 - 2019-07-02 00:02 - 010439104 _____ () C:\Users\62.0.3331.88\icudtl.dat 2019-07-27 23:57 - 2019-07-23 12:49 - 004848152 _____ (Opera Software) C:\Users\62.0.3331.88\installer.exe 2019-07-27 23:57 - 2019-07-23 12:49 - 000371736 _____ () C:\Users\62.0.3331.88\installer_helper_64.exe 2019-07-27 23:57 - 2019-07-23 12:48 - 000010776 _____ (Opera Software AS) C:\Users\62.0.3331.88\installer_helper_lib.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 000381976 _____ () C:\Users\62.0.3331.88\libEGL.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 005561880 _____ () C:\Users\62.0.3331.88\libGLESv2.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 000764952 _____ (The Chromium Authors) C:\Users\62.0.3331.88\notification_helper.exe 2019-07-27 23:57 - 2019-07-23 12:49 - 002021400 _____ (Opera Software) C:\Users\62.0.3331.88\opera.exe 2019-07-27 23:57 - 2019-07-23 12:49 - 003671576 _____ (Opera Software) C:\Users\62.0.3331.88\opera_autoupdate.exe 2019-07-27 23:57 - 2019-07-23 12:49 - 115571224 _____ () C:\Users\62.0.3331.88\opera_browser.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 001399832 _____ (Opera Software) C:\Users\62.0.3331.88\opera_crashreporter.exe 2019-07-27 23:57 - 2019-07-23 12:49 - 000891416 _____ () C:\Users\62.0.3331.88\opera_elf.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 000413720 _____ () C:\Users\62.0.3331.88\win10_share_handler.dll 2019-07-27 23:57 - 2019-07-23 12:49 - 000376856 _____ () C:\Users\62.0.3331.88\win8_importing.dll 2019-08-25 10:59 - 2019-08-25 10:59 - 000007353 _____ () C:\Users\HP\foobar2000_v1.4.6.exe 2017-12-16 12:44 - 1998-04-10 20:56 - 000142848 _____ (3Dfx Interactive, Inc.) C:\Users\QuakE II\3DFXGL.DLL 2017-12-16 12:44 - 2004-05-16 18:43 - 000000020 _____ () C:\Users\QuakE II\CtF.bat 2017-12-16 12:44 - 2004-05-16 18:39 - 000000022 _____ () C:\Users\QuakE II\Ground Zero.bat 2017-12-16 12:44 - 1997-11-25 19:19 - 000227328 _____ (NEC Electronics Inc.) C:\Users\QuakE II\PVRGL.DLL 2017-12-16 12:44 - 1998-11-30 20:48 - 000362496 _____ () C:\Users\QuakE II\QUAKE2.EXE 2017-12-16 12:44 - 1998-11-30 20:48 - 000234496 _____ () C:\Users\QuakE II\REF_GL.DLL 2017-12-16 12:44 - 1998-11-30 20:48 - 000193024 _____ () C:\Users\QuakE II\REF_SOFT.DLL 2017-12-16 12:44 - 2004-05-16 18:36 - 000000024 _____ () C:\Users\QuakE II\The Reckoning.bat 2017-12-26 17:18 - 2019-08-25 23:25 - 000541612 _____ () C:\Users\HP\AppData\Roaming\downloads.json 2017-12-27 17:12 - 2017-12-27 17:13 - 000000000 _____ () C:\Users\HP\AppData\Local\{80BE0D66-F6E0-4398-9782-61A056ADCA67} ==================== SigCheck =============================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-08-21 05:13 ==================== Koniec FRST.txt ============================