Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-12-2016
Uruchomiony przez Scrop (administrator)  SCROP-KOMPUTER (01-01-2017 08:45:22)
Uruchomiony z C:\Users\Scrop\Downloads
Załadowane profile: Scrop (Dostępne profile: Scrop)
Platform: Windows 7 Ultimate (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Windows\Temp\gDD13.tmp.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\EpmNews.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\EpmNews.exe [2090176 2016-09-20] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUS Cleanup] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\CleanUpUI.exe [1243328 2016-09-20] (CHENGDU Yiwo Tech Development Co., Ltd.)
Winlogon\Notify\tukiloz-x32: C:\Users\Scrop\AppData\Local\tukiloz.dll [X]
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\Run: [YPRPack] => regsvr32.exe C:\Users\Scrop\AppData\Local\YPRPack\zxqtilzk.dll <===== UWAGA
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\Run: [Idzsoft] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Scrop\AppData\Local\Ukmedia\ljshatmj.dll
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\MountPoints2: F - F:\AutoRunMorrowind.exe
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\MountPoints2: {13b2e5da-b7d9-11e6-a733-001d7d9dde5a} - F:\AutoRunMorrowind.exe
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\...\MountPoints2: {44f54c04-b66a-11e6-8ddb-001d7d9dde5a} - E:\autorun.exe
HKU\S-1-5-18\...\Run: [] => 0
HKLM\...\Providers\tvuf9a0e: C:\Program Files (x86)\Curoydrerguse Log\local64spl.dll [292352 2016-12-30] ()
ShellExecuteHooks: Brak nazwy - {9C8A04D0-CAA5-11E6-96ED-64006A5CFC23} -  -> Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{646DB409-3877-4FD0-A929-9FEDFD927185}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2482533737-4085879092-1565963746-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-30] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData
CHR StartupUrls: ChromeDefaultData -> "hxxp://google.pl/"
CHR Profile: C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-01-01] <==== UWAGA
CHR Extension: (Prezentacje Google) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-29]
CHR Extension: (Dokumenty Google) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29]
CHR Extension: (Dysk Google) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29]
CHR Extension: (YouTube) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29]
CHR Extension: (Arkusze Google) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-29]
CHR Extension: (Gmail) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\Scrop\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-13]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Archer; C:\Program Files (x86)\WinArcher\Archer.dll [461824 2016-12-31] () [Brak podpisu cyfrowego]
R2 GubedZL; C:\Program Files (x86)\Gubed\GubedZL.dll [118784 2016-12-31] () [Brak podpisu cyfrowego]
R3 iThemes5; C:\Program Files (x86)\Common Files\Services\iThemes.dll [820224 2016-12-31] () [Brak podpisu cyfrowego] <==== UWAGA
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
R2 Reopithejatain; C:\Program Files (x86)\Rotsychwopy\Atunoentrpr.dll [176640 2016-12-30] () [Brak podpisu cyfrowego]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [DependOnService: iThemes5]<==== UWAGA
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 WinSAPSvc; C:\ProgramData\WinSAPSvc\WinSAP.dll [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-11-29] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-11-29] (Disc Soft Ltd)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [24056 2016-01-14] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [21496 2016-01-14] ()
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2016-12-14] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2016-07-11] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2016-07-11] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2017-01-01] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2017-01-01] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-01] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-01] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-01-01] (Malwarebytes)
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-01 08:45 - 2017-01-01 08:45 - 00009299 _____ C:\Users\Scrop\Downloads\FRST.txt
2017-01-01 06:34 - 2017-01-01 08:45 - 00000000 ____D C:\FRST
2017-01-01 06:34 - 2017-01-01 06:35 - 00371282 _____ C:\Users\Scrop\Downloads\gmer.zip
2017-01-01 06:23 - 2017-01-01 06:23 - 02420736 _____ (Farbar) C:\Users\Scrop\Downloads\FRST64.exe
2016-12-31 11:39 - 2016-12-31 11:39 - 00040893 _____ C:\Users\Scrop\Documents\Bez_nazwy (7).wma
2016-12-31 10:33 - 2016-12-31 10:33 - 00031913 _____ C:\Users\Scrop\Documents\Bez_nazwy (6).wma
2016-12-31 10:02 - 2017-01-01 06:06 - 00007288 _____ C:\Windows\PFRO.log
2016-12-31 01:50 - 2016-12-31 10:04 - 00000000 ____D C:\Program Files\tvuf9a0e
2016-12-31 00:40 - 2017-01-01 08:00 - 00000000 ____D C:\ProgramData\WinSAPSvc
2016-12-31 00:40 - 2016-12-31 00:40 - 00000000 ____D C:\Program Files (x86)\WinArcher
2016-12-31 00:40 - 2016-12-31 00:40 - 00000000 ____D C:\Program Files (x86)\Gubed
2016-12-31 00:39 - 2016-12-31 10:13 - 00000000 ____D C:\Program Files (x86)\7xtug1ih
2016-12-30 20:47 - 2016-12-30 20:50 - 00068249 _____ C:\Users\Scrop\Desktop\das_schweigen_der_laemmer_hannibal_lecter_maske_sdl010-b.jpg
2016-12-30 18:23 - 2016-12-30 18:23 - 00000000 ____D C:\Users\Scrop\AppData\Local\AdvinstAnalytics
2016-12-30 17:49 - 2017-01-01 08:00 - 00000224 _____ C:\Windows\setupact.log
2016-12-30 17:49 - 2016-12-30 17:49 - 00000000 _____ C:\Windows\setuperr.log
2016-12-30 17:44 - 2017-01-01 08:00 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-30 17:44 - 2017-01-01 08:00 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-30 17:44 - 2017-01-01 08:00 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-30 17:44 - 2017-01-01 08:00 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-30 17:44 - 2017-01-01 06:00 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-30 17:43 - 2016-12-30 17:43 - 00001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-30 17:43 - 2016-12-30 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-30 17:43 - 2016-12-30 17:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-30 17:43 - 2016-12-30 17:43 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-30 17:43 - 2016-12-14 12:55 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-30 17:41 - 2016-12-30 17:42 - 54199488 _____ (Malwarebytes ) C:\Users\Scrop\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2016-12-30 15:43 - 2017-01-01 05:36 - 00000000 ____D C:\AdwCleaner
2016-12-30 15:42 - 2016-12-30 15:42 - 03977168 _____ C:\Users\Scrop\Downloads\adwcleaner_6.041_www.INSTALKI.pl.exe
2016-12-30 15:35 - 2016-12-30 15:35 - 00000000 ____D C:\Users\Scrop\Start Menu
2016-12-30 15:35 - 2016-12-30 15:35 - 00000000 _____ C:\autoexec.bat
2016-12-30 15:20 - 2016-12-30 15:20 - 03516080 _____ (Enigma Software Group USA, LLC.) C:\Users\Scrop\Downloads\sh-remover.exe
2016-12-30 14:09 - 2016-12-30 14:09 - 00002277 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-30 14:09 - 2016-12-30 14:09 - 00002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-30 14:08 - 2016-12-30 14:14 - 00003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-30 14:08 - 2016-12-30 14:14 - 00003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-30 13:51 - 2016-12-30 13:51 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-12-30 13:51 - 2016-12-30 13:51 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-30 13:51 - 2016-12-30 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-30 13:51 - 2016-12-30 13:51 - 00000000 ____D C:\Program Files\CCleaner
2016-12-30 13:48 - 2016-12-30 13:50 - 08803648 _____ (Piriform Ltd) C:\Users\Scrop\Downloads\ccsetup525.exe
2016-12-30 13:20 - 2016-12-30 13:20 - 02149220 _____ C:\Users\Scrop\Downloads\Win7 Activator  v2.2.2 + WAT Fix.zip
2016-12-30 12:43 - 2016-12-30 12:43 - 00000000 ____D C:\ProgramData\Microleaves
2016-12-30 12:40 - 2017-01-01 08:46 - 00016696 _____ C:\Windows\System32\Tasks\8n48o5q70422
2016-12-30 12:40 - 2017-01-01 08:02 - 00000000 ____D C:\Users\Scrop\AppData\Local\Ukmedia
2016-12-30 12:40 - 2016-12-30 17:48 - 00000000 ____D C:\Users\Scrop\AppData\Local\YPRPack
2016-12-30 12:40 - 2016-12-30 12:40 - 00000000 ___HD C:\ProgramData\8n48o5q70422
2016-12-30 12:39 - 2016-12-30 13:54 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\Mality
2016-12-30 12:39 - 2016-12-30 12:39 - 00005998 _____ C:\Windows\System32\Tasks\Atuvase Manager
2016-12-30 12:39 - 2016-12-30 12:39 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2016-12-30 12:39 - 2016-12-30 12:39 - 00000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
2016-12-30 12:39 - 2016-12-30 12:39 - 00000000 ____D C:\Users\Default User\AppData\Local\AdvinstAnalytics
2016-12-30 12:39 - 2016-12-30 12:39 - 00000000 ____D C:\Program Files (x86)\Curoydrerguse Log
2016-12-30 12:38 - 2017-01-01 06:06 - 00000000 ____D C:\Program Files (x86)\Rotsychwopy
2016-12-30 12:38 - 2016-12-30 12:39 - 00000000 ____D C:\Users\Scrop\AppData\Local\Cltilenuhent
2016-12-30 12:38 - 2016-12-30 12:38 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\Profiles
2016-12-30 12:37 - 2016-12-31 10:12 - 00000000 ____D C:\Program Files (x86)\Removewat 2.2.7
2016-12-30 12:37 - 2016-12-30 12:37 - 02589652 _____ C:\Users\Scrop\Downloads\Removewat 2.2.7 ( pass - 123456 ).rar
2016-12-30 11:22 - 2016-12-30 11:22 - 00003176 _____ C:\Windows\System32\Tasks\{85EDBEA0-EBF3-48AD-B227-444CC7A083BF}
2016-12-30 00:52 - 2016-12-30 00:52 - 00013824 _____ C:\Users\Scrop\Downloads\RemoveWGA1.2_www.INSTALKI.pl.exe
2016-12-29 13:34 - 2016-12-29 13:34 - 00000000 ____D C:\Users\Scrop\AppData\Local\Chromium
2016-12-29 13:34 - 2016-12-29 13:34 - 00000000 ____D C:\Users\Scrop\AppData\Local\CEF
2016-12-29 13:20 - 2016-12-29 13:20 - 00000777 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk
2016-12-29 13:20 - 2016-12-29 13:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-12-29 13:18 - 2016-12-29 13:22 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2016-12-29 13:17 - 2016-12-29 13:18 - 57382760 _____ (Multi Theft Auto) C:\Users\Scrop\Downloads\mtasa-1.5.3.exe
2016-12-28 15:28 - 2016-12-28 15:28 - 00000000 ____D C:\Users\Scrop\AppData\Local\modloader
2016-12-28 15:28 - 2016-12-28 15:28 - 00000000 ____D C:\ProgramData\modloader
2016-12-28 15:21 - 2016-12-28 15:22 - 02481798 _____ C:\Users\Scrop\Downloads\modloader.zip
2016-12-22 12:13 - 2016-12-22 12:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-12-22 11:50 - 2016-12-22 11:50 - 00199519 _____ C:\Users\Scrop\Desktop\gtownmafiagreens.png
2016-12-22 10:01 - 2016-12-22 10:01 - 00031913 _____ C:\Users\Scrop\Documents\Bez_nazwy (5).wma
2016-12-21 22:00 - 2016-12-21 22:00 - 00174644 _____ C:\Users\Scrop\Desktop\5645_ojczyzna-robaka1111.jpg
2016-12-21 14:52 - 2016-12-21 18:15 - 00002192 _____ C:\Users\Scrop\Desktop\Creepy - Tales from the crypt.txt
2016-12-20 19:43 - 2016-12-20 19:43 - 00001241 _____ C:\Users\Scrop\Desktop\samp — skrót.lnk
2016-12-19 20:42 - 2016-12-19 20:42 - 00069827 _____ C:\Users\Scrop\Downloads\1220357907_SAStreamMemFix2.0.rar
2016-12-17 06:25 - 2016-12-22 16:10 - 00010964 _____ C:\Users\Scrop\Desktop\creepysvl.txt
2016-12-15 04:57 - 2016-12-15 04:57 - 00040893 _____ C:\Users\Scrop\Documents\Bez_nazwy (4).wma
2016-12-15 04:55 - 2016-12-15 04:55 - 00040893 _____ C:\Users\Scrop\Documents\Bez_nazwy (3).wma
2016-12-13 03:39 - 2016-12-13 03:39 - 00045383 _____ C:\Users\Scrop\Documents\Bez_nazwy (2).wma
2016-12-11 23:56 - 2016-12-11 23:57 - 00025342 _____ C:\Users\Scrop\Desktop\R-P-McMurphy-and-Chief-Bromden-one-flew-over-the-cuckoo-E2-80-99s-nest-12280161-500-337.jpg
2016-12-11 09:43 - 2016-12-11 09:47 - 00043520 _____ C:\Windows\SysWOW64\CmdLineExt03.dll
2016-12-11 09:21 - 2016-12-11 09:21 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LucasArts
2016-12-11 09:21 - 2016-12-11 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2016-12-11 08:42 - 2016-12-11 08:42 - 00026027 _____ C:\Users\Scrop\Downloads\Star Wars Knights of the Old Republic.torrent
2016-12-11 03:55 - 2016-12-11 03:55 - 00045383 _____ C:\Users\Scrop\Documents\Bez_nazwy.wma
2016-12-10 13:31 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-12-10 13:31 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-12-10 13:31 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-12-10 13:31 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-12-10 13:31 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-12-10 13:31 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-12-10 13:31 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-12-10 13:31 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-12-10 13:31 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-12-10 13:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-12-10 13:31 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-12-10 13:31 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-12-10 13:31 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-12-10 13:31 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-12-10 13:31 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-12-10 13:31 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-12-10 13:31 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-12-10 13:31 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-12-10 13:31 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-12-10 13:31 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-12-10 13:31 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-12-10 13:31 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-12-10 13:31 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-12-10 13:31 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-12-10 13:31 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-12-10 13:31 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-12-10 13:31 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-12-10 13:31 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-12-10 13:31 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-12-10 13:31 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-12-10 13:31 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-12-10 13:31 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-12-10 13:31 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-12-10 13:31 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-12-10 13:31 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-12-10 13:31 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-12-10 13:31 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-12-10 13:31 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-12-10 13:31 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-12-10 13:31 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-12-10 13:31 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-12-10 13:31 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-12-10 13:31 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-12-10 13:31 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-12-10 13:31 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-12-10 13:31 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-12-10 13:31 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-12-10 13:31 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-12-10 13:31 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-12-10 13:31 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-12-10 13:31 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-12-10 13:31 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-12-10 13:31 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-12-10 13:31 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-12-10 13:31 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-12-10 13:31 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-12-10 13:31 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-12-10 13:31 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-12-10 13:31 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-12-10 13:31 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-12-10 13:31 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-12-10 13:31 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-12-10 13:31 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-12-10 13:31 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-12-10 13:31 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-12-10 13:31 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-12-10 13:31 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-12-10 13:31 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-12-10 13:31 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-12-10 13:31 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-12-10 13:31 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-12-10 13:31 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-12-10 13:31 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-12-10 13:31 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-12-10 13:31 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-12-10 13:31 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-12-10 13:31 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-12-10 13:31 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-12-10 13:31 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-12-10 13:31 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-12-10 13:31 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-12-10 13:31 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-12-10 13:31 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-12-10 13:31 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-12-10 13:31 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-12-10 13:31 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-12-10 13:31 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-12-10 13:31 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-12-10 13:31 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-12-10 13:31 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-12-10 13:31 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-12-10 13:31 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-12-10 13:31 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-12-10 13:31 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-12-10 13:31 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-12-10 13:31 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-12-10 13:31 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-12-10 13:31 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-12-10 13:29 - 2016-12-29 13:20 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-12-10 13:29 - 2016-12-29 13:20 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-12-10 13:28 - 2016-12-10 13:28 - 00736927 _____ C:\Users\Scrop\Documents\mod_sa.v4.4.1.2.SA-MP.v0.3.7.R1.Setup.exe
2016-12-04 22:32 - 2016-12-04 22:33 - 00000697 _____ C:\Users\Scrop\Downloads\rmfmaxxx.pls
2016-12-04 22:32 - 2016-12-04 22:32 - 00001535 _____ C:\Users\Scrop\Downloads\maxxx.pls
2016-12-03 21:15 - 2016-12-03 21:15 - 00043134 _____ C:\Users\Scrop\Downloads\motherboard_memory_m57sli-s4.pdf
2016-12-03 21:13 - 2016-12-03 21:13 - 00041472 _____ C:\Users\Scrop\Downloads\launcher64.dll
2016-12-03 21:12 - 2016-12-03 21:12 - 00663768 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Scrop\Downloads\biosagentplus_40.exe
2016-12-03 19:38 - 2016-12-03 19:38 - 00000000 ____D C:\Windows\pss
2016-12-03 19:34 - 2016-12-03 19:35 - 06777527 _____ C:\Users\Scrop\Downloads\memtest86-usb.zip
2016-12-03 12:26 - 2016-12-03 12:26 - 00001005 _____ C:\Users\Scrop\Desktop\Morrowind — skrót.lnk
2016-12-02 05:28 - 2016-12-02 05:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2016-12-02 05:00 - 2016-12-02 05:00 - 00002601 _____ C:\Users\Scrop\Desktop\µTorrent.lnk
2016-12-02 05:00 - 2016-12-02 05:00 - 00000000 ___SD C:\Users\Scrop\AppData\LocalLow\Temp
2016-12-02 04:59 - 2016-12-30 16:02 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\uTorrent
2016-12-02 04:58 - 2016-12-02 04:59 - 02375360 _____ (BitTorrent Inc.) C:\Users\Scrop\Downloads\uTorrent.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-01 08:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-01 08:05 - 2009-07-14 18:55 - 00739694 _____ C:\Windows\system32\perfh015.dat
2017-01-01 08:05 - 2009-07-14 18:55 - 00155268 _____ C:\Windows\system32\perfc015.dat
2017-01-01 08:05 - 2009-07-14 06:13 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-01 08:00 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-01 07:21 - 2009-07-14 05:45 - 00012208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-01 07:21 - 2009-07-14 05:45 - 00012208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-01 06:26 - 2016-11-30 04:14 - 00001885 _____ C:\Users\Scrop\Desktop\Nowy dokument tekstowy.txt
2017-01-01 04:42 - 2016-11-30 20:37 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\Skype
2016-12-31 22:46 - 2009-07-14 05:54 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-31 22:46 - 2009-07-14 05:54 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-31 22:09 - 2016-12-01 23:34 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\TS3Client
2016-12-31 11:39 - 2016-11-29 20:00 - 00000000 ___RD C:\Users\Scrop\Documents
2016-12-31 00:40 - 2009-07-14 04:20 - 00000000 ___RD C:\Program Files (x86)
2016-12-31 00:40 - 2009-07-14 04:20 - 00000000 ___HD C:\ProgramData
2016-12-30 18:23 - 2016-11-29 20:16 - 00000000 __SHD C:\Windows\Installer
2016-12-30 18:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Tasks
2016-12-30 18:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Tasks
2016-12-30 18:12 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\drivers
2016-12-30 17:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\drivers
2016-12-30 17:43 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Desktop
2016-12-30 17:43 - 2009-07-14 04:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs
2016-12-30 16:02 - 2016-11-29 20:42 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\DAEMON Tools Lite
2016-12-30 16:02 - 2016-11-29 19:15 - 00000000 ____D C:\Windows\Panther
2016-12-30 16:02 - 2009-07-14 05:45 - 00000000 ____D C:\Windows\debug
2016-12-30 16:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Logs
2016-12-30 15:47 - 2016-11-29 20:00 - 00000000 ____D C:\Users\Scrop\AppData\Roaming
2016-12-30 15:35 - 2016-11-29 20:00 - 00000000 ____D C:\Users\Scrop
2016-12-30 14:09 - 2016-11-29 20:11 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-30 14:08 - 2016-11-29 20:11 - 00000000 ____D C:\Users\Scrop\AppData\Local\Deployment
2016-12-30 13:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\wdi
2016-12-30 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\catroot
2016-12-30 12:39 - 2009-07-14 04:20 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-30 12:39 - 2009-07-14 04:20 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-24 03:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\config\RegBack
2016-12-22 12:13 - 2009-07-14 04:20 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-22 12:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 19:46 - 2016-11-29 20:00 - 00000000 ____D C:\Users\Scrop\AppData\Local\Microsoft
2016-12-18 19:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-11 09:27 - 2016-11-29 21:18 - 00000000 ____D C:\Users\Scrop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-12-11 09:21 - 2016-11-29 20:00 - 00000000 ___RD C:\Users\Scrop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-11 09:15 - 2016-11-29 20:47 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-11 09:12 - 2016-11-29 20:00 - 00000000 ____D C:\Users\Scrop\AppData\LocalLow
2016-12-10 13:32 - 2016-11-29 20:00 - 00000000 ____D C:\Users\Scrop\AppData\Local\VirtualStore
2016-12-10 13:31 - 2009-07-14 04:20 - 00000000 __RSD C:\Windows\assembly
2016-12-10 13:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Microsoft.NET
2016-12-03 21:18 - 2016-12-01 05:22 - 00007597 _____ C:\Users\Scrop\AppData\Local\resmon.resmoncfg
2016-12-03 21:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\LogFiles

==================== Pliki w katalogu głównym wybranych folderów =======

2016-12-01 05:22 - 2016-12-03 21:18 - 0007597 _____ () C:\Users\Scrop\AppData\Local\resmon.resmoncfg

Niektóre pliki w TEMP:
====================
C:\Users\Scrop\AppData\Local\Temp\g9766.tmp.exe
C:\Users\Scrop\AppData\Local\Temp\g9767.tmp.exe
C:\Users\Scrop\AppData\Local\Temp\libeay32.dll
C:\Users\Scrop\AppData\Local\Temp\msvcr120.dll
C:\Users\Scrop\AppData\Local\Temp\sqlite3.dll
C:\Users\Scrop\AppData\Local\Temp\~ct4B84.tmp.dll
C:\Users\Scrop\AppData\Local\Temp\~ct9829.tmp.dll
C:\Users\Scrop\AppData\Local\Temp\~ctBC71.tmp.dll


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2016-12-24 03:00

==================== Koniec  FRST.txt ============================