Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 22-01-2017 Uruchomiony przez ZBYSZEK (administrator) LENOVO-PC (22-01-2017 18:52:41) Uruchomiony z C:\Users\ZBYSZEK\Desktop Załadowane profile: ZBYSZEK (Dostępne profile: ZBYSZEK) Platform: Windows 8.1 Connected (Update) (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: IE) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Realtek semiconductor) C:\Windows\RTFTrack.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe () C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-04] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor) HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-12-12] (Lenovo(beijing) Limited) HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10841584 2014-12-12] (Lenovo(beijing) Limited) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software) HKU\S-1-5-21-3480572307-726023340-1656694227-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd) AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => Brak pliku AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~3.DLL => Brak pliku ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-26] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63 Tcpip\..\Interfaces\{E1B4A3E1-9D17-43B9-B65F-B62CA52710B6}: [DhcpNameServer] 150.204.1.2 Tcpip\..\Interfaces\{F4EFF64D-58BF-40D0-9F85-B3EEE666DD06}: [DhcpNameServer] 62.179.1.62 62.179.1.63 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3480572307-726023340-1656694227-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/ SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3480572307-726023340-1656694227-1001 -> {42CF00F8-A478-4F7B-BE65-C495A57ADF8F} URL = hxxp://www.facebook.com/search/?q={searchTerms} SearchScopes: HKU\S-1-5-21-3480572307-726023340-1656694227-1001 -> {8781D4F1-55E0-43C8-A0FE-8B5A5899D14A} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-3480572307-726023340-1656694227-1001 -> {8CC1349D-3628-4ECC-ACCA-4E2A923EAA56} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms} FireFox: ======== FF DefaultProfile: vtdedqo5.default FF ProfilePath: C:\Users\ZBYSZEK\AppData\Roaming\Mozilla\Firefox\Profiles\vtdedqo5.default [2017-01-21] FF Extension: (Firefox Certificate Store Hotfix) - C:\Users\ZBYSZEK\AppData\Roaming\Mozilla\Firefox\Profiles\vtdedqo5.default\Extensions\firefox-hotfix@mozilla.org.xpi [2015-06-04] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-24] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-24] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3480572307-726023340-1656694227-1001: SkypePlugin -> C:\Users\ZBYSZEK\AppData\Local\SkypePlugin\7.15.0.49\npGatewayNpapi.dll [2016-02-19] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-3480572307-726023340-1656694227-1001: SkypePlugin64 -> C:\Users\ZBYSZEK\AppData\Local\SkypePlugin\7.15.0.49\npGatewayNpapi-x64.dll [2016-02-19] (Skype Technologies S.A.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxps://startpage-home.com/?s=lenovo&m=home CHR StartupUrls: Default -> "hxxps://startpage-home.com/?s=lenovo&m=start" CHR DefaultSearchURL: Default -> hxxps://secure.startpage-home.com/?src=omnibox&partner=lenovo&q={searchTerms} CHR DefaultSearchKeyword: Default -> startpage-home.com CHR DefaultSuggestURL: Default -> hxxps://secure-suggest.startpage-home.com/suggest?format=json&locale=pl-PL&q={searchTerms} CHR Profile: C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default [2017-01-21] CHR Extension: (Prezentacje Google) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-13] CHR Extension: (Dokumenty Google) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-13] CHR Extension: (Dysk Google) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-13] CHR Extension: (YouTube) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-13] CHR Extension: (Google Search) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-13] CHR Extension: (Adobe Acrobat) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-16] CHR Extension: (Avast SafePrice) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-12-18] CHR Extension: (Arkusze Google) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-13] CHR Extension: (Dokumenty Google offline) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (Avast Online Security) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-18] CHR Extension: (Skype) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-28] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19] CHR Extension: (Gmail) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-13] CHR Extension: (Chrome Media Router) - C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-18] CHR Profile: C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-01-21] CHR Profile: C:\Users\ZBYSZEK\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-21] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-26] (AVAST Software) R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [592880 2014-07-09] () R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation) R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-12-12] (Lenovo(beijing) Limited) S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273544 2016-12-07] (Lenovo) S2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [37624 2014-04-21] (Lenovo(beijing) Limited) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] () R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [37656 2016-09-26] (AVAST Software) R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [37144 2016-09-26] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [108816 2016-09-26] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [103064 2016-09-26] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-26] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [969184 2016-09-26] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [513632 2016-09-26] (AVAST Software) R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [163416 2016-09-26] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software) R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3903488 2014-07-11] (Qualcomm Atheros Communications, Inc.) R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink) R0 MBI; C:\WINDOWS\System32\drivers\MBI.sys [29464 2013-10-10] (Intel Corporation) S3 NETwNe64; C:\WINDOWS\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation) R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.) R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) S3 AthBTPort; \SystemRoot\system32\DRIVERS\btath_flt.sys [X] S3 BTATH_A2DP; \SystemRoot\system32\drivers\btath_a2dp.sys [X] S3 btath_avdt; \SystemRoot\system32\drivers\btath_avdt.sys [X] S3 BTATH_BUS; \SystemRoot\System32\drivers\btath_bus.sys [X] S3 BTATH_HCRP; \SystemRoot\System32\drivers\btath_hcrp.sys [X] S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X] S3 BTATH_RCP; \SystemRoot\System32\drivers\btath_rcp.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-01-22 18:52 - 2017-01-22 18:53 - 00015447 _____ C:\Users\ZBYSZEK\Desktop\FRST.txt 2017-01-22 18:50 - 2017-01-22 18:52 - 00000000 ____D C:\FRST 2017-01-22 18:49 - 2017-01-22 18:50 - 02420736 _____ (Farbar) C:\Users\ZBYSZEK\Desktop\FRST64.exe 2017-01-22 13:06 - 2017-01-22 13:06 - 00000000 ____D C:\Users\ZBYSZEK\.QtWebEngineProcess 2017-01-22 13:06 - 2017-01-22 13:06 - 00000000 ____D C:\Users\ZBYSZEK\.LSC 2017-01-22 13:04 - 2017-01-22 13:10 - 00002112 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk 2017-01-21 22:03 - 2016-06-14 18:13 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-01-21 22:03 - 2016-06-14 18:13 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-01-21 21:31 - 2015-07-30 15:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-01-21 21:31 - 2015-07-30 14:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-01-21 20:40 - 2016-03-31 07:50 - 01307328 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2017-01-21 20:40 - 2016-03-31 04:40 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-01-21 20:39 - 2016-01-10 18:50 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2017-01-21 20:39 - 2016-01-10 18:31 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2017-01-21 20:39 - 2016-01-10 18:16 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-01-21 20:39 - 2016-01-10 18:14 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2017-01-21 20:39 - 2016-01-10 18:12 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2017-01-21 20:39 - 2016-01-10 17:58 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2017-01-21 20:39 - 2016-01-10 17:51 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-01-21 20:39 - 2016-01-10 17:49 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll 2017-01-21 20:39 - 2016-01-10 17:40 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2017-01-21 20:38 - 2016-05-12 19:38 - 00135336 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2017-01-21 20:38 - 2016-05-12 18:43 - 00115704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2017-01-21 20:38 - 2016-05-12 17:17 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll 2017-01-21 20:38 - 2016-05-12 17:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll 2017-01-21 20:38 - 2016-05-12 17:07 - 01360896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2017-01-21 20:38 - 2016-05-12 16:59 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL 2017-01-21 20:38 - 2016-05-12 16:43 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll 2017-01-21 20:38 - 2016-05-12 16:37 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll 2017-01-21 20:38 - 2015-06-28 06:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-21 20:38 - 2015-06-28 06:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-21 20:38 - 2015-05-30 22:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2017-01-21 20:38 - 2015-05-30 20:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-21 20:38 - 2015-05-30 20:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-21 20:37 - 2016-05-06 16:45 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2017-01-21 20:37 - 2016-05-06 16:23 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2017-01-21 20:37 - 2016-04-06 22:13 - 00137976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll 2017-01-21 20:37 - 2016-04-06 18:49 - 00120384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll 2017-01-21 20:37 - 2016-04-06 17:52 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2017-01-21 20:37 - 2016-04-06 16:48 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2017-01-21 20:37 - 2016-03-11 15:48 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-21 20:37 - 2016-03-10 18:03 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2017-01-21 20:37 - 2016-03-10 17:48 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2017-01-21 20:37 - 2015-12-03 20:42 - 00106960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2017-01-21 20:37 - 2015-12-03 19:52 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2017-01-21 20:37 - 2015-12-02 16:04 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2017-01-21 20:37 - 2015-12-02 16:01 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2017-01-21 20:37 - 2015-11-05 09:59 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2017-01-21 20:37 - 2015-06-15 23:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2017-01-21 20:37 - 2015-06-15 23:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2017-01-21 20:37 - 2015-06-15 22:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2017-01-21 20:37 - 2015-06-15 22:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2017-01-21 20:37 - 2015-06-15 21:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2017-01-21 20:37 - 2015-06-15 20:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2017-01-21 20:35 - 2016-04-09 22:58 - 00534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-01-21 20:35 - 2016-04-09 22:50 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-01-21 20:35 - 2016-03-03 02:39 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-01-21 20:35 - 2016-03-03 02:39 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-01-21 20:35 - 2016-01-10 18:02 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-21 20:35 - 2016-01-10 17:43 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 02745184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 02528784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 02450240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 02447136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 02334104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 02324744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 01877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 01484888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 01288128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 01210200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 01150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 01115640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 01037680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00914672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00850680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00735496 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00700360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00629600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00557856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00498472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00492736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00463776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00299080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00275312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00274280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00248432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00246856 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00244296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00229272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00203016 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00184912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00183856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00110544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00099136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2017-01-21 20:35 - 2015-12-05 06:58 - 00090904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00090392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00081032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2017-01-21 20:35 - 2015-12-05 06:58 - 00076936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll 2017-01-21 20:35 - 2015-12-03 19:07 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2017-01-21 20:35 - 2015-12-03 19:07 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2017-01-21 20:35 - 2015-12-03 19:05 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL 2017-01-21 20:35 - 2015-12-03 19:02 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2017-01-21 20:35 - 2015-12-03 19:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL 2017-01-21 20:35 - 2015-12-03 18:36 - 01697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-01-21 20:35 - 2015-12-03 18:30 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL 2017-01-21 20:35 - 2015-12-03 18:28 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2017-01-21 20:35 - 2015-12-03 18:28 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2017-01-21 20:35 - 2015-12-03 18:27 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL 2017-01-21 20:35 - 2015-12-03 18:24 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2017-01-21 20:35 - 2015-12-03 18:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL 2017-01-21 20:35 - 2015-12-03 18:06 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-01-21 20:35 - 2015-12-03 18:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL 2017-01-21 20:35 - 2015-12-03 17:40 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2017-01-21 20:35 - 2015-12-03 17:29 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2017-01-21 20:35 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2017-01-21 20:35 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-01-21 20:34 - 2016-05-14 00:09 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-21 20:34 - 2015-08-27 03:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-21 20:34 - 2015-08-27 03:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-21 20:33 - 2016-04-10 05:21 - 01763376 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-01-21 20:33 - 2016-04-10 05:21 - 01489088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-01-21 20:33 - 2016-03-03 17:47 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2017-01-21 20:33 - 2016-03-03 17:33 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2017-01-21 20:33 - 2016-02-11 15:21 - 00869576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2017-01-21 20:33 - 2016-02-11 15:21 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll 2017-01-21 20:33 - 2016-02-11 15:20 - 00875720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2017-01-21 20:33 - 2016-02-11 15:20 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll 2017-01-21 20:33 - 2015-12-11 01:13 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-21 20:33 - 2015-12-11 01:13 - 00705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-01-21 20:33 - 2015-12-11 01:13 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-01-21 20:33 - 2015-12-11 01:13 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-01-21 20:33 - 2015-07-16 01:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2017-01-21 20:33 - 2015-07-10 18:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2017-01-21 20:31 - 2016-05-16 22:13 - 00563016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-21 20:31 - 2016-05-16 22:13 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2017-01-21 20:31 - 2016-05-16 22:13 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-01-21 20:31 - 2016-05-16 22:13 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2017-01-21 20:31 - 2016-05-14 00:07 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-01-21 20:31 - 2016-05-14 00:07 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-01-21 20:31 - 2016-05-14 00:06 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2017-01-21 20:31 - 2016-05-13 23:34 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2017-01-21 20:31 - 2016-05-13 22:58 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2017-01-21 20:31 - 2016-05-09 22:35 - 07075328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll 2017-01-21 20:31 - 2016-05-09 21:56 - 05270016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll 2017-01-21 20:31 - 2016-05-09 21:45 - 07793152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-01-21 20:31 - 2016-05-09 21:23 - 05265920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-01-21 20:31 - 2016-04-06 19:20 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-01-21 20:31 - 2016-04-06 19:19 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2017-01-21 20:31 - 2016-04-06 19:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-01-21 20:31 - 2016-04-06 17:57 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-21 20:31 - 2015-11-21 17:59 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-01-21 20:31 - 2015-11-21 17:49 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2017-01-21 20:31 - 2015-11-21 17:47 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2017-01-21 20:31 - 2015-11-21 17:40 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2017-01-21 20:30 - 2016-03-29 02:42 - 07446368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-21 20:30 - 2016-02-11 21:17 - 01737088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-01-21 20:30 - 2016-02-11 21:17 - 01663184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-01-21 20:30 - 2016-02-11 21:17 - 01523208 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-01-21 20:30 - 2016-02-11 21:17 - 01490120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-01-21 20:30 - 2016-02-11 21:17 - 01358952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-01-21 20:30 - 2016-02-11 21:16 - 01501488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-01-21 20:30 - 2016-02-09 19:07 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2017-01-21 20:30 - 2016-02-03 16:09 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-01-21 20:30 - 2016-02-03 16:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-01-21 20:30 - 2016-02-03 16:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-01-21 20:30 - 2015-11-09 01:41 - 01540728 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-01-21 20:30 - 2015-11-08 22:23 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-01-21 20:30 - 2015-11-08 22:13 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-01-21 20:30 - 2015-11-08 22:01 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-01-21 20:30 - 2015-11-08 21:52 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-01-21 20:30 - 2015-11-08 21:48 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-01-21 20:30 - 2015-11-08 21:42 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-01-21 20:30 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-01-21 20:30 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2017-01-21 20:30 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-01-21 20:30 - 2015-03-20 04:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2017-01-21 20:29 - 2016-02-12 20:14 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2017-01-21 20:29 - 2016-02-12 16:14 - 03708416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-21 20:29 - 2016-02-12 15:55 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2017-01-21 20:29 - 2016-02-12 15:54 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2017-01-21 20:29 - 2016-02-12 15:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2017-01-21 20:29 - 2016-02-12 15:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2017-01-21 20:29 - 2016-02-12 15:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2017-01-21 20:29 - 2016-02-12 15:51 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2017-01-21 20:29 - 2016-02-12 15:51 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2017-01-21 20:29 - 2016-02-12 15:48 - 02244096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2017-01-21 20:29 - 2016-02-12 15:47 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-21 20:29 - 2016-02-12 15:46 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-21 20:29 - 2015-11-20 19:18 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2017-01-21 20:29 - 2015-07-30 18:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll 2017-01-21 20:29 - 2015-07-30 17:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll 2017-01-21 20:29 - 2015-07-09 19:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2017-01-21 20:29 - 2015-06-27 04:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2017-01-21 20:29 - 2015-06-27 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2017-01-21 20:28 - 2015-09-24 17:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2017-01-21 20:28 - 2015-09-24 17:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-01-21 20:27 - 2016-05-21 18:28 - 25802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-21 20:27 - 2016-05-21 17:57 - 20341248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-21 20:27 - 2016-05-20 23:09 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-01-21 20:27 - 2016-05-20 23:08 - 02895360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-01-21 20:27 - 2016-05-20 23:02 - 06051328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-01-21 20:27 - 2016-05-20 22:57 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-01-21 20:27 - 2016-05-20 22:55 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2017-01-21 20:27 - 2016-05-20 22:54 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-01-21 20:27 - 2016-05-20 22:50 - 02287104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-01-21 20:27 - 2016-05-20 22:44 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-01-21 20:27 - 2016-05-20 22:29 - 13815808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-01-21 20:27 - 2016-05-20 22:27 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-01-21 20:27 - 2016-05-20 22:25 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-01-21 20:27 - 2016-05-20 22:25 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-01-21 20:27 - 2016-05-20 22:21 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-01-21 20:27 - 2016-05-20 22:21 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-01-21 20:27 - 2016-05-20 22:19 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2017-01-21 20:27 - 2016-05-20 22:16 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2017-01-21 20:27 - 2016-05-20 22:14 - 04610048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-01-21 20:27 - 2016-05-20 22:12 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-01-21 20:27 - 2016-05-20 22:11 - 15420928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-01-21 20:27 - 2016-05-20 22:11 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-01-21 20:27 - 2016-05-20 22:09 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-01-21 20:27 - 2016-05-20 22:09 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-01-21 20:27 - 2016-05-20 22:08 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-01-21 20:27 - 2016-05-20 22:08 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-01-21 20:27 - 2016-05-20 22:06 - 02131968 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-01-21 20:27 - 2016-05-20 21:46 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-01-21 20:27 - 2016-05-20 21:42 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-01-21 20:27 - 2016-05-20 21:38 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-01-21 20:27 - 2016-05-20 21:38 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-01-21 20:27 - 2016-05-20 21:34 - 01544192 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-01-21 20:27 - 2016-05-20 21:23 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-01-21 20:27 - 2016-04-22 20:14 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-21 20:27 - 2016-04-22 19:52 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-01-21 20:27 - 2016-02-08 21:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2017-01-21 20:27 - 2016-02-08 19:14 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2017-01-21 20:27 - 2016-02-08 18:15 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2017-01-21 20:27 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2017-01-21 20:27 - 2015-11-10 00:25 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2017-01-21 20:27 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2017-01-21 20:27 - 2015-09-10 18:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-01-21 20:27 - 2015-09-10 17:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2017-01-21 20:27 - 2015-09-10 17:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2017-01-21 20:27 - 2015-09-10 17:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-01-21 20:27 - 2015-07-16 21:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2017-01-21 20:27 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2017-01-21 20:27 - 2015-07-07 10:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2017-01-21 20:27 - 2015-07-07 10:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2017-01-21 20:27 - 2015-07-07 10:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2017-01-21 20:27 - 2015-06-15 23:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-01-21 20:27 - 2015-06-15 22:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2017-01-21 20:27 - 2015-06-15 21:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-01-21 20:27 - 2015-06-15 21:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2017-01-21 20:26 - 2016-05-19 00:15 - 01379040 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-01-21 20:26 - 2016-05-18 21:35 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-01-21 20:26 - 2016-05-18 06:31 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-01-21 20:26 - 2016-05-18 06:31 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-01-21 20:26 - 2016-05-14 21:01 - 00363104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2017-01-21 20:26 - 2016-05-14 21:01 - 00320720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2017-01-21 20:26 - 2016-05-14 00:07 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys 2017-01-21 20:26 - 2016-05-14 00:04 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-01-21 20:26 - 2016-05-13 23:19 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-01-21 20:26 - 2016-05-13 22:58 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll 2017-01-21 20:26 - 2016-05-13 22:45 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-01-21 20:26 - 2016-05-13 22:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll 2017-01-21 20:26 - 2016-05-13 22:26 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-01-21 20:26 - 2016-04-11 07:21 - 00074584 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2017-01-21 20:26 - 2016-04-10 08:48 - 00738096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2017-01-21 20:26 - 2016-04-10 08:48 - 00613624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2017-01-21 20:26 - 2016-04-10 06:37 - 01549144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-01-21 20:26 - 2016-03-03 17:13 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll 2017-01-21 20:26 - 2016-02-06 19:08 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll 2017-01-21 20:26 - 2016-02-05 20:07 - 00292696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL 2017-01-21 20:26 - 2016-02-05 20:07 - 00243032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL 2017-01-21 20:26 - 2016-02-05 16:03 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-01-21 20:26 - 2016-02-05 16:00 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-01-21 20:26 - 2016-01-31 20:16 - 00148832 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2017-01-21 20:26 - 2016-01-19 20:13 - 02175008 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-01-21 20:26 - 2016-01-19 20:13 - 01063464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2017-01-21 20:26 - 2016-01-19 20:12 - 01133744 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-01-21 20:26 - 2016-01-19 19:23 - 01564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-01-21 20:26 - 2016-01-19 19:23 - 00548024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2017-01-21 20:26 - 2016-01-19 18:30 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-01-21 20:26 - 2016-01-19 17:37 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2017-01-21 20:26 - 2016-01-06 19:25 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2017-01-21 20:26 - 2015-12-28 22:42 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll 2017-01-21 20:26 - 2015-12-28 21:31 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll 2017-01-21 20:26 - 2015-12-17 19:29 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-21 20:26 - 2015-12-17 17:17 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-21 20:26 - 2015-11-21 19:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll 2017-01-21 20:26 - 2015-11-21 18:50 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll 2017-01-21 20:26 - 2015-07-13 20:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2017-01-21 20:25 - 2016-02-04 18:24 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2017-01-21 20:25 - 2016-02-04 18:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2017-01-21 20:25 - 2015-07-01 23:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll 2017-01-21 20:25 - 2015-07-01 23:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2017-01-21 20:25 - 2015-07-01 22:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll 2017-01-21 20:25 - 2015-07-01 22:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2017-01-21 17:46 - 2017-01-21 22:00 - 00348104 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-21 17:27 - 2017-01-21 17:27 - 00000017 _____ C:\Users\ZBYSZEK\AppData\Local\resmon.resmoncfg 2017-01-21 17:21 - 2017-01-21 17:21 - 00102068 _____ C:\Users\ZBYSZEK\Documents\cc_20170121_172106.reg 2017-01-11 18:08 - 2017-01-11 18:08 - 00000455 _____ C:\Users\ZBYSZEK\Desktop\Nadużywanie nowego spalacza tłuszczu powoduje dystrofię.url 2017-01-09 12:43 - 2017-01-16 19:43 - 00000131 _____ C:\Users\ZBYSZEK\Desktop\Homepage.url ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-01-22 18:35 - 2015-05-04 20:02 - 00003996 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B9CD8A5C-A04F-42F8-96BA-70B610504F1E} 2017-01-22 18:26 - 2015-05-05 20:09 - 00000000 ____D C:\Users\ZBYSZEK\AppData\Local\CrashDumps 2017-01-22 18:24 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-01-22 13:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-01-22 13:13 - 2015-05-05 20:10 - 00000000 ____D C:\Users\ZBYSZEK\AppData\Roaming\Lenovo 2017-01-22 13:07 - 2014-12-12 07:49 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2017-01-22 13:06 - 2015-05-04 19:40 - 00000000 ____D C:\Users\ZBYSZEK\AppData\Local\Lenovo 2017-01-22 13:06 - 2015-05-04 19:32 - 00000000 ____D C:\Users\ZBYSZEK 2017-01-22 13:04 - 2014-12-12 07:50 - 00000000 ____D C:\Program Files\Lenovo 2017-01-22 13:04 - 2014-12-12 07:49 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2017-01-22 11:09 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2017-01-22 09:44 - 2015-05-04 19:38 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3480572307-726023340-1656694227-1001 2017-01-22 08:21 - 2013-08-22 16:20 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-21 22:12 - 2014-12-12 08:15 - 00000000 ____D C:\ProgramData\LU 2017-01-21 22:10 - 2015-09-26 17:12 - 00001279 _____ C:\Users\ZBYSZEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-FiHotspotChgToast.lnk 2017-01-21 22:06 - 2015-05-04 20:02 - 00000000 __SHD C:\Users\ZBYSZEK\AppData\LocalLow\EmieUserList 2017-01-21 22:06 - 2015-05-04 20:02 - 00000000 __SHD C:\Users\ZBYSZEK\AppData\LocalLow\EmieSiteList 2017-01-21 22:06 - 2015-05-04 20:02 - 00000000 __SHD C:\Users\ZBYSZEK\AppData\Local\EmieUserList 2017-01-21 22:06 - 2015-05-04 20:02 - 00000000 __SHD C:\Users\ZBYSZEK\AppData\Local\EmieSiteList 2017-01-21 22:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf 2017-01-21 21:54 - 2014-03-18 10:38 - 00000000 ____D C:\Program Files\Windows Journal 2017-01-21 21:54 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2017-01-21 21:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-01-21 21:53 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender 2017-01-21 21:53 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-01-21 19:36 - 2015-05-06 19:09 - 00000000 ____D C:\Users\ZBYSZEK\AppData\Roaming\Skype 2017-01-21 19:36 - 2014-12-12 15:31 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat 2017-01-21 19:36 - 2014-12-12 15:31 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat 2017-01-21 19:36 - 2014-03-18 10:53 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-01-21 19:35 - 2015-05-06 20:44 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2017-01-21 19:27 - 2015-05-05 20:02 - 00001556 _____ C:\Users\ZBYSZEK\Desktop\iexplore — skrót.lnk 2017-01-21 18:06 - 2015-05-06 19:08 - 00000000 ____D C:\ProgramData\Skype 2017-01-21 17:53 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2017-01-21 17:46 - 2016-02-24 15:12 - 00000000 ____D C:\Program Files\Google 2017-01-21 17:46 - 2016-01-13 19:58 - 00000000 ____D C:\Program Files (x86)\Google 2017-01-20 17:05 - 2016-02-24 15:10 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-01-13 19:34 - 2016-02-24 15:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-01-12 21:41 - 2015-10-23 17:06 - 00000494 _____ C:\Users\ZBYSZEK\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website 2017-01-12 20:57 - 2015-05-04 20:10 - 00002295 _____ C:\Users\ZBYSZEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk 2017-01-12 20:57 - 2015-05-04 19:32 - 00000000 ____D C:\Users\ZBYSZEK\AppData\Local\SweetLabs App Platform ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-01-21 17:27 - 2017-01-21 17:27 - 0000017 _____ () C:\Users\ZBYSZEK\AppData\Local\resmon.resmoncfg 2014-12-12 07:06 - 2014-12-12 07:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-01-22 09:44 ==================== Koniec FRST.txt ============================