Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:23-09-2015 Uruchomiony przez Paweł (administrator) KOMP (27-09-2015 15:34:45) Uruchomiony z C:\Users\Paweł\Downloads Załadowane profile: Paweł (Dostępne profile: Paweł) Platform: Windows 8.1 Pro N (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe (AMD) C:\Windows\System32\atiesrxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe (Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe (G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (AMD) C:\Windows\System32\atieclxx.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (G DATA Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Joyent, Inc) C:\Users\Paweł\AppData\Roaming\Steganos\OkayFreedom\Proxy\node.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe Brak dostępu do procesu -> AVKTray.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe HKU\S-1-5-21-4186264908-892325800-295169171-1001\...\Run: [OKAYFREEDOM_Agent] => C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe [6619656 2015-07-08] (Steganos Software GmbH) HKU\S-1-5-21-4186264908-892325800-295169171-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd) HKU\S-1-5-21-4186264908-892325800-295169171-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11776 2013-08-22] (Microsoft Corporation) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) AutoConfigURL: [S-1-5-21-4186264908-892325800-295169171-1001] => http://127.0.0.1:8445/okf.pac Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 10.10.8.1 Tcpip\..\Interfaces\{6C3397F0-67F0-47FD-A3C1-FD0C3607837C}: [DhcpNameServer] 192.168.2.1 10.10.8.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-4186264908-892325800-295169171-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-4186264908-892325800-295169171-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp FireFox: ======== FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-25] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-25] (Google Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.pl/ CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dysk Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-25] CHR Extension: (AdBlock) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-09-25] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25] CHR Extension: (Gmail) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-07-04] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG) R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [345632 2015-07-08] (Steganos Software GmbH) S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026944 2015-09-25] (Enigma Software Group USA, LLC.) S2 szserver; C:\Program Files (x86)\iS3\STOPzilla AntiMalware\SZServer.exe [195264 2015-05-20] (iS3, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-09-25] (Enigma Software Group USA, LLC.) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-09-25] () R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-09-24] (G Data Software AG) S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-09-24] (G Data Software AG) R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-09-24] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230912 2015-09-24] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [91648 2015-09-24] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-09-24] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-09-25] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [125952 2015-09-24] (G Data Software AG) R0 szkg5; C:\Windows\SysWow64\drivers\szkg64.sys [74768 2015-05-20] (iS3 Inc.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S0 is3srv; SySWOW64\drivers\is3srv64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-09-27 15:34 - 2015-09-27 15:34 - 00009343 _____ C:\Users\Paweł\Downloads\FRST.txt 2015-09-27 15:29 - 2015-09-27 15:34 - 00000000 ____D C:\Users\Paweł\Desktop\Nowy folder 2015-09-26 14:52 - 2015-09-26 14:52 - 00000648 _____ C:\Windows\system32\Drivers\kgpcpy.cfg 2015-09-26 11:20 - 2015-09-27 15:29 - 00000181 _____ C:\Users\Paweł\Desktop\G Data.txt 2015-09-26 10:29 - 2015-09-26 10:29 - 00380416 _____ C:\Users\Paweł\Downloads\5ux5l6qf.exe 2015-09-26 10:23 - 2015-09-26 10:23 - 00000022 _____ C:\Users\Paweł\Downloads\gm.zip 2015-09-26 00:27 - 2015-09-27 15:34 - 00000000 ____D C:\FRST 2015-09-26 00:26 - 2015-09-26 00:26 - 02192384 _____ (Farbar) C:\Users\Paweł\Downloads\FRST64.exe 2015-09-25 22:28 - 2015-09-26 11:58 - 00002384 _____ C:\Windows\PFRO.log 2015-09-25 22:23 - 2015-09-25 22:23 - 01375089 _____ C:\Users\Paweł\Downloads\AdwCleaner.pl 3.11.exe 2015-09-25 21:50 - 2015-09-25 21:50 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Wargaming.net 2015-09-25 21:42 - 2015-09-25 22:16 - 00000000 ____D C:\ProgramData\HitmanPro 2015-09-25 21:42 - 2015-09-25 21:42 - 00000000 ____D C:\Program Files\HitmanPro 2015-09-25 21:39 - 2015-09-25 21:39 - 11350472 _____ (SurfRight B.V.) C:\Users\Paweł\Downloads\hitmanpro_x64 (1).exe 2015-09-25 21:11 - 2015-09-25 21:11 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2015-09-25 21:11 - 2015-09-25 21:11 - 00000160 _____ C:\Windows\SysWOW64\Drivers\kgpfr2.cfg 2015-09-25 21:03 - 2015-09-27 15:33 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-09-25 21:03 - 2015-09-25 21:03 - 00002047 _____ C:\Users\Public\Desktop\STOPzilla AntiMalware.lnk 2015-09-25 21:03 - 2015-09-25 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla AntiMalware 2015-09-25 21:03 - 2015-09-25 21:03 - 00000000 ____D C:\Program Files (x86)\iS3 2015-09-25 20:39 - 2015-09-25 20:39 - 00000000 _____ C:\autoexec.bat 2015-09-25 20:38 - 2015-09-25 20:38 - 00003318 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2015-09-25 20:38 - 2015-09-25 20:38 - 00001103 _____ C:\Users\Paweł\Desktop\SpyHunter.lnk 2015-09-25 20:38 - 2015-09-25 20:38 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Enigma Software Group 2015-09-25 20:38 - 2015-09-25 20:38 - 00000000 ____D C:\sh4ldr 2015-09-25 20:37 - 2015-09-25 20:37 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2015-09-25 20:35 - 2015-09-25 20:35 - 00000000 ____D C:\Program Files\Enigma Software Group 2015-09-25 19:09 - 2015-09-25 19:09 - 02124768 _____ (iS3, Inc.) C:\Users\Paweł\Downloads\STOPzillaASM_Setup.exe 2015-09-25 19:05 - 2015-09-25 19:09 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Paweł\Downloads\SpyHunter-Installer.exe 2015-09-25 19:00 - 2015-09-25 19:00 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk 2015-09-25 19:00 - 2015-09-25 19:00 - 00001043 _____ C:\Users\Public\Desktop\foobar2000.lnk 2015-09-25 19:00 - 2015-09-25 19:00 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\foobar2000 2015-09-25 19:00 - 2015-09-25 19:00 - 00000000 ____D C:\Program Files (x86)\foobar2000 2015-09-25 18:59 - 2015-09-25 18:59 - 03875496 _____ (foobar2000.org) C:\Users\Paweł\Downloads\foobar2000_v1.3.8.exe 2015-09-25 18:50 - 2015-09-26 14:30 - 01370290 _____ C:\Windows\WindowsUpdate.log 2015-09-25 09:08 - 2015-09-25 09:18 - 00000000 ____D C:\Program Files\CCleaner 2015-09-25 09:08 - 2015-09-25 09:08 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-09-25 09:08 - 2015-09-25 09:08 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk 2015-09-25 09:08 - 2015-09-25 09:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-09-25 09:06 - 2015-09-25 09:07 - 06678784 _____ (Piriform Ltd) C:\Users\Paweł\Downloads\ccsetup510pro (1).exe 2015-09-25 09:06 - 2015-09-25 09:06 - 06678784 _____ (Piriform Ltd) C:\Users\Paweł\Downloads\ccsetup510pro.exe 2015-09-25 08:50 - 2015-09-25 08:50 - 00002281 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-09-25 08:50 - 2015-09-25 08:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-09-25 08:49 - 2015-09-27 14:54 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-09-25 08:49 - 2015-09-27 12:59 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-25 08:49 - 2015-09-25 19:32 - 00000000 ____D C:\Users\Paweł\AppData\Local\Google 2015-09-25 08:49 - 2015-09-25 08:50 - 00000000 ____D C:\Program Files (x86)\Google 2015-09-25 08:49 - 2015-09-25 08:49 - 00004028 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-25 08:49 - 2015-09-25 08:49 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-24 23:27 - 2015-09-25 21:59 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\TS3Client 2015-09-24 23:27 - 2015-09-24 23:27 - 00001249 _____ C:\Users\Paweł\Desktop\TeamSpeak 3 Client.lnk 2015-09-24 23:27 - 2015-09-24 23:27 - 00000000 ____D C:\Users\Paweł\AppData\Local\TeamSpeak 3 Client 2015-09-24 23:26 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-09-24 23:26 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-09-24 23:26 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-09-24 23:26 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-09-24 23:26 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-09-24 23:26 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-09-24 23:26 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-09-24 23:26 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-09-24 23:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-09-24 23:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-09-24 23:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-09-24 23:26 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-09-24 23:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-09-24 23:26 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-09-24 23:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-09-24 23:26 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-09-24 23:26 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-09-24 23:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-09-24 23:26 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-09-24 23:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-09-24 23:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-09-24 23:26 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-09-24 23:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-09-24 23:26 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-09-24 23:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-09-24 23:26 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-09-24 23:26 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-09-24 23:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-09-24 23:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-09-24 23:26 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-09-24 23:26 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-09-24 23:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-09-24 23:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-09-24 23:26 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-09-24 23:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-09-24 23:26 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-09-24 23:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-09-24 23:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-09-24 23:26 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-09-24 23:26 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-09-24 23:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-09-24 23:26 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-09-24 23:26 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-09-24 23:26 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-09-24 23:26 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-09-24 23:26 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-09-24 23:26 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-09-24 23:26 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-09-24 23:26 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-09-24 23:26 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-09-24 23:26 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-09-24 23:26 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-09-24 23:26 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-09-24 23:26 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-09-24 23:26 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-09-24 23:26 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-09-24 23:26 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-09-24 23:26 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-09-24 23:26 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-09-24 23:26 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-09-24 23:26 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-09-24 23:26 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-09-24 23:26 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-09-24 23:26 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-09-24 23:26 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-09-24 23:26 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-09-24 23:26 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-09-24 23:26 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-09-24 23:26 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-09-24 23:26 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-09-24 23:26 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-09-24 23:26 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-09-24 23:26 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-09-24 23:26 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-09-24 23:26 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-09-24 23:26 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-09-24 23:26 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-09-24 23:26 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-09-24 23:26 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-09-24 23:26 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-09-24 23:26 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2015-09-24 23:26 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-09-24 23:26 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-09-24 23:26 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-09-24 23:26 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-09-24 23:26 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-09-24 23:26 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-09-24 23:26 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-09-24 23:26 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-09-24 23:26 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-09-24 23:26 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-09-24 23:26 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-09-24 23:26 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-09-24 23:26 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-09-24 23:26 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-09-24 23:26 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-09-24 23:26 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-09-24 23:26 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-09-24 23:26 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-09-24 23:26 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-09-24 23:26 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-09-24 23:26 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-09-24 23:26 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-09-24 23:26 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-09-24 23:26 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-09-24 23:26 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-09-24 23:26 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-09-24 23:26 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-09-24 23:26 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-09-24 23:26 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-09-24 23:26 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-09-24 23:25 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-09-24 23:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-09-24 23:25 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-09-24 23:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-09-24 23:23 - 2015-09-24 23:24 - 31011848 _____ (TeamSpeak Systems GmbH) C:\Users\Paweł\Downloads\TeamSpeak3-Client-win64-3.0.18.exe 2015-09-24 23:22 - 2015-09-24 23:26 - 00000000 ____D C:\Windows\SysWOW64\directx 2015-09-24 23:22 - 2015-09-24 23:22 - 00000781 _____ C:\Users\Public\Desktop\World of Tanks.lnk 2015-09-24 23:22 - 2015-09-24 23:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks 2015-09-24 23:22 - 2015-09-24 23:22 - 00000000 ____D C:\Games 2015-09-24 23:21 - 2015-09-24 23:21 - 06798176 _____ (Wargaming.net ) C:\Users\Paweł\Downloads\WoT_internet_install_m_eu.exe 2015-09-24 23:19 - 2015-09-24 23:19 - 00000000 ____D C:\Users\Paweł\AppData\Local\AMD 2015-09-24 23:18 - 2015-09-24 23:18 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\ATI 2015-09-24 23:18 - 2015-09-24 23:18 - 00000000 ____D C:\Users\Paweł\AppData\Local\ATI 2015-09-24 23:18 - 2015-09-24 23:18 - 00000000 ____D C:\ProgramData\ATI 2015-09-24 23:04 - 2015-09-24 23:04 - 00091648 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-09-24 23:03 - 2015-09-24 23:03 - 00001141 _____ C:\Users\Public\Desktop\OkayFreedom.lnk 2015-09-24 23:02 - 2015-09-24 23:02 - 00230912 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00158720 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00125952 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2015-09-24 23:02 - 2015-09-24 23:02 - 00002070 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk 2015-09-24 23:02 - 2015-09-24 23:02 - 00000779 _____ C:\Users\Paweł\AppData\Roaming\gdscan.log 2015-09-24 23:02 - 2015-09-24 23:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2015-09-24 23:02 - 2015-09-24 23:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf 2015-09-24 23:02 - 2015-09-24 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-09-24 23:02 - 2015-09-24 23:02 - 00000000 _____ C:\Users\Paweł\AppData\Roaming\gdfw.log 2015-09-24 23:01 - 2015-09-27 13:00 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Steganos VPN 2015-09-24 23:01 - 2015-09-26 10:17 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Steganos 2015-09-24 23:01 - 2015-09-24 23:03 - 00001653 _____ C:\Users\PaweUpdater.exe.log 2015-09-24 23:01 - 2015-09-24 23:03 - 00000481 _____ C:\Users\Paweproxysetuptool.exe.log 2015-09-24 23:01 - 2015-09-24 23:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OkayFreedom 2015-09-24 23:01 - 2015-09-24 23:03 - 00000000 ____D C:\Program Files (x86)\OkayFreedom 2015-09-24 23:01 - 2015-09-24 23:01 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Steganos Updates 2015-09-24 23:00 - 2015-09-24 23:00 - 00000000 ____D C:\Program Files (x86)\G DATA 2015-09-24 22:59 - 2015-09-24 23:17 - 00000000 ____D C:\ProgramData\G Data 2015-09-24 22:28 - 2015-09-25 09:13 - 00000000 ____D C:\Windows\Panther 2015-09-24 22:27 - 2015-09-24 22:27 - 00008192 __RSH C:\BOOTSECT.BAK 2015-09-24 22:13 - 2015-09-24 22:14 - 21651232 _____ (Steganos Software GmbH) C:\Users\Paweł\Downloads\okayfreedomwr.exe 2015-09-24 22:11 - 2015-09-24 22:37 - 477461352 _____ (G Data Software AG) C:\Users\Paweł\Downloads\setup_is.exe 2015-09-24 21:52 - 2015-09-24 21:52 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Macromedia 2015-09-24 21:49 - 2015-09-24 21:49 - 00060385 _____ C:\Windows\SysWOW64\CCCInstall_201509242149460176.log 2015-09-24 21:49 - 2015-09-24 21:49 - 00000000 ____D C:\ProgramData\Package Cache 2015-09-24 21:49 - 2015-09-24 21:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-09-24 21:49 - 2015-09-24 21:49 - 00000000 ____D C:\ProgramData\AMD 2015-09-24 21:49 - 2015-09-24 21:49 - 00000000 ____D C:\Program Files\ATI Technologies 2015-09-24 21:49 - 2015-09-24 21:49 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2015-09-24 21:48 - 2015-09-24 21:48 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2015-09-24 21:48 - 2015-09-24 21:48 - 00000000 ____D C:\Program Files\AMD 2015-09-24 21:48 - 2015-09-24 21:48 - 00000000 ____D C:\AMD 2015-09-24 21:48 - 2015-09-24 21:48 - 00000000 _____ C:\Windows\ativpsrm.bin 2015-09-24 21:43 - 2015-09-27 14:19 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4186264908-892325800-295169171-1001 2015-09-24 21:43 - 2015-09-27 14:19 - 00000000 ___RD C:\Users\Paweł\SkyDrive 2015-09-24 21:38 - 2015-09-24 21:47 - 00000000 ____D C:\Users\Paweł\AppData\Local\Packages 2015-09-24 21:38 - 2015-09-24 21:39 - 00000000 ____D C:\Users\Paweł\AppData\Local\PackageStaging 2015-09-24 21:38 - 2015-09-24 21:38 - 00001450 _____ C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-09-24 21:38 - 2015-09-24 21:38 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Adobe 2015-09-24 21:38 - 2015-09-24 21:38 - 00000000 ____D C:\Users\Paweł\AppData\Local\VirtualStore 2015-09-24 21:37 - 2015-09-25 20:38 - 00000000 ____D C:\Users\Paweł 2015-09-24 21:37 - 2015-09-24 21:37 - 00000020 ___SH C:\Users\Paweł\ntuser.ini 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Ustawienia lokalne 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Szablony 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Moje dokumenty 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Menu Start 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Documents\Moje wideo 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Documents\Moje obrazy 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Documents\Moja muzyka 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\Dane aplikacji 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\AppData\Local\Historia 2015-09-24 21:37 - 2015-09-24 21:37 - 00000000 _SHDL C:\Users\Paweł\AppData\Local\Dane aplikacji 2015-09-24 21:37 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-09-24 21:37 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-09-24 21:37 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-09-24 21:37 - 2013-08-22 17:36 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-09-24 21:36 - 2015-09-25 22:46 - 01735328 _____ C:\Windows\system32\PerfStringBackup.INI 2015-09-24 21:32 - 2015-09-24 21:32 - 00000000 ____D C:\Windows\CSC 2015-09-24 21:32 - 2013-08-22 07:17 - 02407936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Szablony 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Menu Start 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Szablony 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Pulpit 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Menu Start 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Dokumenty 2015-09-24 21:31 - 2015-09-24 21:31 - 00000000 _SHDL C:\ProgramData\Dane aplikacji 2015-09-24 21:30 - 2015-09-24 21:30 - 00000000 __SHD C:\Recovery ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-09-27 15:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru 2015-09-26 14:51 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-26 11:57 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2015-09-26 10:23 - 2015-02-04 13:59 - 00380416 _____ C:\Users\Paweł\Downloads\jhnmqgsg.exe 2015-09-26 00:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2015-09-25 22:46 - 2013-08-23 01:12 - 00769288 _____ C:\Windows\system32\perfh015.dat 2015-09-25 22:46 - 2013-08-23 01:12 - 00155492 _____ C:\Windows\system32\perfc015.dat 2015-09-25 19:01 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2015-09-24 23:02 - 2013-08-22 17:36 - 00000000 ___HD C:\Windows\ELAMBKUP 2015-09-24 22:27 - 2013-08-22 17:36 - 00262144 _____ C:\Windows\system32\config\BCD-Template 2015-09-24 21:49 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\restore 2015-09-24 21:38 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2015-09-24 21:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore 2015-09-24 21:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager 2015-09-24 21:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera 2015-09-24 21:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2015-09-24 21:31 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT 2015-09-24 21:31 - 2013-08-22 15:36 - 00000000 __RHD C:\Users\Default 2015-09-24 21:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Recovery 2015-09-24 21:29 - 2013-08-22 16:44 - 00337840 _____ C:\Windows\system32\FNTCACHE.DAT ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-09-24 23:02 - 2015-09-24 23:02 - 0000000 _____ () C:\Users\Paweł\AppData\Roaming\gdfw.log 2015-09-24 23:02 - 2015-09-24 23:02 - 0000779 _____ () C:\Users\Paweł\AppData\Roaming\gdscan.log ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-09-24 21:28 ==================== Koniec FRST.txt ============================