Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 24-05-2017
Uruchomiony przez rekkis (administrator)  ZUBR (26-05-2017 07:49:10)
Uruchomiony z C:\Users\rekkis\Downloads
Załadowane profile: rekkis (Dostępne profile: rekkis)
Platform: Microsoft Windows 8.1 z usługą Bing (Update) (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Lenovo) C:\Program Files\Lenovo\YMC\ymc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\avpui.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Intel Corporation) C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [73216 2013-11-02] (Intel Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKU\S-1-5-21-137526994-970686790-3836505406-1001\...\Run: [Emsftion] => C:\Windows\System32\regsvr32.exe C:\Users\rekkis\AppData\Local\YZRPack\pxqxylft.dll <===== UWAGA
HKU\S-1-5-21-137526994-970686790-3836505406-1001\...409d6c4515e9\InprocServer32: [Default-shell32] C:\Users\rekkis\AppData\Local\YZRPack\pxqxylft.dll UWAGA
HKLM\...\Providers\oqfxjsqv: C:\Program Files\Hetutain Monitor\local32spl.dll

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{36D1C2D7-595F-4657-B23F-DA89A5822617}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-137526994-970686790-3836505406-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)

FireFox:
========
FF DefaultProfile: kxm63t72.default
FF ProfilePath: C:\Users\rekkis\AppData\Roaming\Mozilla\Firefox\Profiles\kxm63t72.default [2017-05-26]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\kxm63t72.default -> initialpage123
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\kxm63t72.default -> initialpage123
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-03-29]
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2013-07-12] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2013-07-12] (Intel Corporation)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AVP17.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Total Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [75264 2013-11-02] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [89088 2013-11-02] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [82432 2013-11-02] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752 2013-07-01] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [637912 2013-07-01] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe [168216 2013-07-29] (Intel Corporation)
R2 KSDE1.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3398608 2017-05-09] (Malwarebytes)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280872 2017-03-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103696 2017-03-29] (Microsoft Corporation)
R2 ymc; C:\Program Files\Lenovo\YMC\ymc.exe [45448 2016-12-23] (Lenovo)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [296664 2013-08-13] (Broadcom Corp)
S3 camera; C:\Windows\system32\DRIVERS\camera.sys [344576 2013-11-03] (Intel Corporation)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [170840 2016-06-10] (AO Kaspersky Lab)
R3 DptfDevDBPT; C:\Windows\system32\DRIVERS\DptfDevPower.sys [17408 2013-11-03] (Intel Corporation)
R3 DptfDevDisplay; C:\Windows\system32\DRIVERS\DptfDevDisplay.sys [19968 2013-11-03] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [28160 2013-11-03] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [72704 2013-11-03] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [176640 2013-11-03] (Intel Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59904 2017-05-09] ()
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [23552 2013-11-04] (Intel Corporation)
R3 GpioVirtual; C:\Windows\System32\drivers\iaiogpiovirtual.sys [16896 2013-11-04] (Intel Corporation)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [57344 2013-11-04] (Intel Corporation)
R3 iaiospi; C:\Windows\System32\drivers\iaiospi.sys [53760 2013-11-04] (Intel Corporation)
R3 iaiouart; C:\Windows\System32\drivers\iaiouart.sys [87552 2013-11-04] (Intel Corporation)
S3 igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [3354624 2013-11-04] (Intel Corporation) [Brak podpisu cyfrowego]
R2 inpout32; C:\Windows\System32\Drivers\inpout32.sys [11936 2017-05-25] (Highresolution Enterprises [www.highrez.co.uk])
S3 intaud_WaveExtensible; C:\Windows\system32\drivers\intelaud.sys [33176 2013-10-29] (Intel Corporation)
R3 IntelSST; C:\Windows\system32\drivers\isstrtc.sys [252416 2013-11-04] (Intel(R) Corporation)
R3 iwdbus; C:\Windows\System32\drivers\iwdbus.sys [23448 2013-10-29] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [165296 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [57264 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [71512 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [69000 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [23168 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [157408 2017-05-25] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\drivers\klhk.sys [338416 2017-05-25] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792280 2017-05-25] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49744 2017-03-29] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [46000 2016-05-19] (AO Kaspersky Lab)
S3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [37560 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41392 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\Windows\system32\DRIVERS\kltap.sys [48056 2016-06-07] (The OpenVPN Project)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [71504 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [116448 2017-03-29] (AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [165088 2017-05-25] (AO Kaspersky Lab)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [161720 2017-05-25] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [97208 2017-05-26] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-05-26] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [220088 2017-05-26] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [74680 2017-05-26] (Malwarebytes)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [21456 2013-11-03] (Intel Corporation)
R3 ov2722; C:\Windows\System32\drivers\ov2722.sys [43008 2013-11-03] (Intel Corporation)
R3 ov5693; C:\Windows\System32\drivers\ov5693.sys [51200 2013-11-03] (Intel Corporation)
R3 PMIC; C:\Windows\System32\drivers\PMIC.sys [48128 2013-11-03] (Intel Corporation)
R3 rtii2sac; C:\Windows\system32\DRIVERS\rtii2sac.sys [143576 2013-10-25] (Realtek Semiconductor Corp.)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [190976 2016-10-19] (Microsoft Corporation)
R3 TXEI; C:\Windows\System32\drivers\TXEI.sys [76304 2013-11-03] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [38920 2017-03-29] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [231256 2017-03-29] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [85336 2017-03-29] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-05-26 07:49 - 2017-05-26 07:49 - 00011949 _____ C:\Users\rekkis\Downloads\FRST.txt
2017-05-26 07:48 - 2017-05-26 07:49 - 00000000 ____D C:\FRST
2017-05-26 07:47 - 2017-05-26 07:48 - 01770496 _____ (Farbar) C:\Users\rekkis\Downloads\FRST.exe
2017-05-25 22:13 - 2017-05-25 22:13 - 00000000 ____D C:\$WINDOWS.~BT
2017-05-25 22:09 - 2017-05-25 22:15 - 00000000 _____ C:\Recovery.txt
2017-05-25 18:08 - 2017-05-25 18:10 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\Free Window Registry Repair
2017-05-25 18:07 - 2017-05-25 18:07 - 00808399 _____ C:\Users\rekkis\Downloads\RegpairSetup.exe
2017-05-25 18:07 - 2017-05-25 18:07 - 00001031 _____ C:\Users\rekkis\Desktop\Free Window Registry Repair.lnk
2017-05-25 18:07 - 2017-05-25 18:07 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2017-05-25 18:07 - 2017-05-25 18:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2017-05-25 18:07 - 2017-05-25 18:07 - 00000000 ____D C:\Program Files\Free Window Registry Repair
2017-05-25 17:49 - 2017-05-25 17:50 - 00001916 _____ C:\Users\Public\Desktop\Kerish Doctor 2017.lnk
2017-05-25 17:49 - 2017-05-25 17:49 - 00011936 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\Windows\system32\Drivers\inpout32.sys
2017-05-25 17:49 - 2017-05-25 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2017-05-25 17:49 - 2011-01-20 01:07 - 00098304 _____ (Highresolution Enterprises) C:\Windows\system32\inpout32.dll
2017-05-25 17:48 - 2017-05-25 17:48 - 00000000 ____D C:\ProgramData\Kerish Products
2017-05-25 17:48 - 2016-08-09 09:35 - 00059880 _____ (Kerish Products) C:\Windows\system32\GPUTemp.dll
2017-05-25 17:46 - 2017-05-25 17:47 - 39353120 _____ (Kerish Products ) C:\Users\rekkis\Downloads\Kerish_Doctor_4.65.exe
2017-05-25 17:07 - 2017-05-25 17:07 - 00001240 _____ C:\Users\rekkis\Documents\cc_20170525_170706.reg
2017-05-25 17:00 - 2017-05-25 17:00 - 00001150 _____ C:\Users\rekkis\Documents\cc_20170525_170006.reg
2017-05-25 16:31 - 2017-05-25 16:34 - 00000000 ____D C:\Program Files\Common Files\AV
2017-05-25 16:31 - 2017-05-25 16:31 - 00002155 _____ C:\Users\Public\Desktop\Bezpieczne pieniądze.lnk
2017-05-25 16:31 - 2017-05-25 16:31 - 00002105 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2017-05-25 16:31 - 2017-05-25 16:31 - 00001356 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2017-05-25 16:31 - 2017-05-25 16:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2017-05-25 16:31 - 2017-05-25 16:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2017-05-25 16:30 - 2017-05-26 07:43 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-05-25 16:30 - 2017-05-25 16:37 - 00792280 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2017-05-25 16:30 - 2017-05-25 16:37 - 00157408 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2017-05-25 16:30 - 2017-05-25 16:31 - 00000000 ____D C:\Program Files\Kaspersky Lab
2017-05-25 15:46 - 2017-05-26 07:41 - 00220088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-25 15:46 - 2017-05-26 07:41 - 00097208 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-05-25 15:46 - 2017-05-26 07:41 - 00074680 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-05-25 15:46 - 2017-05-26 07:41 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-05-25 15:46 - 2017-05-25 15:46 - 00161720 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-05-25 15:46 - 2017-05-25 15:46 - 00002036 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-05-25 15:46 - 2017-05-25 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-05-25 15:46 - 2017-05-09 16:37 - 00059904 _____ C:\Windows\system32\Drivers\mbae.sys
2017-05-25 15:45 - 2017-05-25 15:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-25 15:45 - 2017-05-25 15:45 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-25 15:43 - 2017-05-25 15:43 - 00030654 _____ C:\Users\rekkis\Documents\cc_20170525_154259.reg
2017-05-25 15:41 - 2017-05-25 15:41 - 00000977 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-25 15:41 - 2017-05-25 15:41 - 00000000 ____D C:\Program Files\CCleaner
2017-05-25 15:33 - 2017-05-25 15:22 - 04110280 _____ C:\Users\rekkis\Desktop\adwcleaner_6.047.exe
2017-05-25 15:29 - 2017-05-25 15:29 - 00003072 _____ C:\Windows\SECOH-QAD.dll
2017-05-25 15:19 - 2017-05-26 07:40 - 00000000 ____D C:\AdwCleaner
2017-05-25 15:11 - 2017-05-25 15:52 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\ServerTest
2017-05-25 15:11 - 2017-05-25 15:52 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\nh3oukwai1x
2017-05-25 15:11 - 2017-05-25 15:52 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\h0f152dudbg
2017-05-25 15:11 - 2017-05-25 15:11 - 00140800 _____ C:\Users\rekkis\AppData\Local\installer.dat
2017-05-25 15:11 - 2017-05-25 15:11 - 00011568 _____ C:\Users\rekkis\AppData\Local\InstallationConfiguration.xml
2017-05-25 15:11 - 2017-05-25 15:11 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\lqzba204nx5
2017-05-25 15:10 - 2017-05-25 15:52 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\2segbxvccsj
2017-05-25 15:10 - 2017-05-25 15:17 - 00000042 _____ C:\ServiceLog.txt
2017-05-25 15:09 - 2017-05-25 15:16 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\Perbot
2017-05-25 15:09 - 2017-05-25 15:09 - 00000000 ____D C:\Users\rekkis\AppData\Local\Jukokdrozph
2017-05-25 15:05 - 2017-05-25 15:05 - 00000017 _____ C:\Users\rekkis\AppData\Local\resmon.resmoncfg
2017-05-25 14:51 - 2017-05-25 16:55 - 00000000 ____D C:\Users\rekkis\AppData\Local\YZRPack
2017-05-25 14:50 - 2017-05-25 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-05-25 14:50 - 2017-05-25 14:50 - 00000000 ____D C:\Program Files\7-Zip
2017-05-25 14:47 - 2017-05-25 14:47 - 00000000 ____D C:\Users\rekkis\AppData\LocalLow\Temp
2017-05-25 14:43 - 2017-05-25 14:43 - 00000448 _____ C:\Users\rekkis\Desktop\Komputer.lnk
2017-05-25 14:26 - 2017-05-25 14:26 - 00150872 _____ C:\Windows\Minidump\052517-10515-01.dmp
2017-05-25 14:19 - 2017-05-25 14:19 - 00150872 _____ C:\Windows\Minidump\052517-10500-01.dmp
2017-05-25 14:17 - 2017-05-25 14:17 - 00150872 _____ C:\Windows\Minidump\052517-10750-01.dmp
2017-05-25 13:59 - 2017-05-25 13:59 - 00150872 _____ C:\Windows\Minidump\052517-17890-01.dmp
2017-05-25 13:58 - 2017-05-25 13:58 - 00003392 ____N C:\bootsqm.dat
2017-05-25 13:48 - 2017-05-25 13:48 - 00150872 _____ C:\Windows\Minidump\052517-31671-01.dmp
2017-05-25 13:45 - 2017-05-25 13:45 - 00000000 ____D C:\Users\rekkis\AppData\Local\Intel_Corporation
2017-05-25 13:42 - 2017-05-25 13:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsServiceDriver_01_11_00.Wdf
2017-05-25 13:42 - 2017-05-25 13:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsHIDClassDriver_01_11_00.Wdf
2017-05-25 13:42 - 2017-05-25 13:42 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-05-25 13:42 - 2013-11-04 07:23 - 00060416 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2017-05-25 13:41 - 2013-11-04 14:22 - 00252416 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\isstrtc.sys
2017-05-25 13:41 - 2013-11-04 11:17 - 00087552 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaiouart.sys
2017-05-25 13:41 - 2013-11-04 11:17 - 00057344 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaioi2ce.sys
2017-05-25 13:41 - 2013-11-04 11:17 - 00053760 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaiospi.sys
2017-05-25 13:41 - 2013-11-04 11:17 - 00023552 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaiogpioe.sys
2017-05-25 13:41 - 2013-11-04 11:17 - 00016896 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaiogpiovirtual.sys
2017-05-25 13:41 - 2013-11-04 07:23 - 20920320 _____ (Intel Corporation) C:\Windows\system32\igdfcl32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 13211136 _____ (Intel Corporation) C:\Windows\system32\igd10iumd32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 11434496 _____ (Intel Corporation) C:\Windows\system32\igdumdim32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 09074176 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 06135808 _____ (Intel Corporation) C:\Windows\system32\ig7icd32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 03529216 _____ (Intel Corporation) C:\Windows\system32\igdusc32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 03451552 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 03354624 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd32.sys
2017-05-25 13:41 - 2013-11-04 07:23 - 02977792 _____ (Intel Corporation) C:\Windows\system32\igdrcl32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 02585088 _____ C:\Windows\system32\GfxRes.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 01815040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 01220256 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 01123328 _____ (Intel Corporation) C:\Windows\system32\iglhsip32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00664736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00571040 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00560288 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00492544 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00451584 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00317440 _____ C:\Windows\system32\igdmd32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00296096 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00290816 _____ (Intel Corporation) C:\Windows\system32\igdbcl32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00279552 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00230912 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2017-05-25 13:41 - 2013-11-04 07:23 - 00205312 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00195072 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00193536 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00185344 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00182272 _____ C:\Windows\system32\igdde32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00174752 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00156832 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00153600 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3348.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00142848 _____ C:\Windows\system32\igdail32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00133120 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00128512 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00107168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00094208 _____ C:\Windows\system32\IccLibDll.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00081568 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00062464 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00060416 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD32.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00025600 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2017-05-25 13:41 - 2013-11-04 07:23 - 00001806 _____ C:\Windows\system32\GfxUIEx.exe.config
2017-05-25 13:41 - 2013-11-04 07:23 - 00000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2017-05-25 13:41 - 2013-11-04 07:23 - 00000935 _____ C:\Windows\system32\CustomModeApp.exe.config
2017-05-25 13:41 - 2013-11-04 07:23 - 00000264 _____ C:\Windows\system32\GfxUIHotKeyMenu.exe.config
2017-05-25 13:41 - 2013-11-03 15:23 - 07589848 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 02139792 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD32.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00877528 _____ (Intel Corporation) C:\Windows\system32\igfxstarter.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00754648 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00529880 _____ C:\Windows\system32\DPTopologyApp.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00424408 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS32.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00396760 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00318936 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00316376 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2017-05-25 13:41 - 2013-11-03 15:23 - 00315352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2017-05-25 13:41 - 2013-11-03 10:29 - 01778176 _____ (Intel Corporation) C:\Windows\system32\IntelCameraPlugin.dll
2017-05-25 13:41 - 2013-11-03 10:29 - 00595968 _____ (Intel Corporation) C:\Windows\system32\libjpegencoder.dll
2017-05-25 13:41 - 2013-11-03 10:29 - 00344576 _____ (Intel Corporation) C:\Windows\system32\Drivers\camera.sys
2017-05-25 13:41 - 2013-11-03 10:29 - 00117248 _____ (Intel Corporation) C:\Windows\system32\IntelSocYuvCopy.dll
2017-05-25 13:41 - 2013-11-03 10:29 - 00051200 _____ (Intel Corporation) C:\Windows\system32\Drivers\ov5693.sys
2017-05-25 13:41 - 2013-11-03 10:29 - 00043008 _____ (Intel Corporation) C:\Windows\system32\Drivers\ov2722.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00176640 _____ (Intel Corporation) C:\Windows\system32\Drivers\DptfManager.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00072704 _____ (Intel Corporation) C:\Windows\system32\Drivers\DptfDevProc.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00048128 _____ (Intel Corporation) C:\Windows\system32\Drivers\PMIC.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00028160 _____ (Intel Corporation) C:\Windows\system32\Drivers\DptfDevGen.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00021456 _____ (Intel Corporation) C:\Windows\system32\Drivers\MBI.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00019968 _____ (Intel Corporation) C:\Windows\system32\Drivers\DptfDevDisplay.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00017408 _____ (Intel Corporation) C:\Windows\system32\Drivers\DptfDevPower.sys
2017-05-25 13:41 - 2013-11-03 04:01 - 00014336 _____ (Intel Corporation) C:\Windows\system32\DptfPolicyLpmDll.dll
2017-05-25 13:41 - 2013-11-03 04:00 - 00076304 _____ (Intel Corporation) C:\Windows\system32\Drivers\TXEI.sys
2017-05-25 13:41 - 2013-11-02 12:01 - 00089088 _____ (Intel Corporation) C:\Windows\system32\DptfPolicyCriticalService.exe
2017-05-25 13:41 - 2013-11-02 12:01 - 00082432 _____ (Intel Corporation) C:\Windows\system32\DptfPolicyLpmService.exe
2017-05-25 13:41 - 2013-11-02 12:01 - 00075264 _____ (Intel Corporation) C:\Windows\system32\DptfParticipantProcessorService.exe
2017-05-25 13:41 - 2013-11-02 12:01 - 00073216 _____ (Intel Corporation) C:\Windows\system32\DptfPolicyLpmServiceHelper.exe
2017-05-25 13:41 - 2013-10-25 19:30 - 00143576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\rtii2sac.sys
2017-05-25 13:40 - 2017-05-25 13:40 - 00000000 ____D C:\Program Files\NeuroSky
2017-05-25 13:40 - 2017-05-25 13:40 - 00000000 ____D C:\Program Files\DIFX
2017-05-25 13:37 - 2017-05-25 15:25 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-05-25 13:37 - 2017-05-25 15:25 - 00001019 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-05-25 12:21 - 2017-05-25 14:26 - 00000000 ____D C:\Windows\Minidump
2017-05-25 12:21 - 2017-05-25 12:21 - 00150968 _____ C:\Windows\Minidump\052517-33125-01.dmp
2017-05-25 11:56 - 2017-05-25 15:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-25 11:44 - 2017-05-25 11:44 - 00000000 ____D C:\Users\rekkis\Documents\Bluetooth Exchange Folder
2017-05-25 11:44 - 2017-05-25 11:44 - 00000000 ____D C:\Users\rekkis\AppData\Local\Broadcom
2017-05-25 11:29 - 2017-05-25 13:46 - 00000000 ____D C:\ProgramData\Intel
2017-05-25 11:26 - 2017-05-25 15:10 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-05-25 11:21 - 2017-05-25 14:40 - 00000000 ____D C:\Program Files\Intel
2017-05-25 11:21 - 2017-05-25 11:21 - 00000000 ____D C:\Program Files\Common Files\Intel
2017-05-25 11:21 - 2017-05-25 11:21 - 00000000 ____D C:\Intel
2017-05-25 11:18 - 2017-05-25 11:18 - 00000000 ____D C:\Users\rekkis\Intel
2017-05-25 11:17 - 2013-11-04 14:22 - 00526500 _____ C:\Windows\system32\Drivers\realtek_fw_sst.bin
2017-05-25 11:17 - 2013-11-04 07:23 - 02108679 _____ C:\Windows\system32\iglhxa32.cpa
2017-05-25 11:17 - 2013-11-04 07:23 - 00503296 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00502784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00502784 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00502784 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00502272 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00502272 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501760 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501760 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501760 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501248 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501248 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501248 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501248 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00501248 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00500736 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00500736 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00500736 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00500224 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00500224 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00499712 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00499712 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00499200 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00497664 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00497152 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00493056 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00491520 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00489472 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00488960 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00346624 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2017-05-25 11:17 - 2013-11-04 07:23 - 00265517 _____ C:\Windows\system32\Gfxres.th-TH.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00251697 _____ C:\Windows\system32\Gfxres.el-GR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00233624 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00199624 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00197178 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00191199 _____ C:\Windows\system32\Gfxres.he-IL.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00179528 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00179434 _____ C:\Windows\system32\Gfxres.it-IT.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00177074 _____ C:\Windows\system32\Gfxres.es-ES.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00176794 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00176779 _____ C:\Windows\system32\Gfxres.de-DE.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00175419 _____ C:\Windows\system32\Gfxres.ro-RO.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00174410 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00174157 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00173907 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00173681 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00172892 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00172258 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00171927 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00171747 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00171454 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00171194 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00170334 _____ C:\Windows\system32\Gfxres.hr-HR.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00166845 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00165565 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00164886 _____ C:\Windows\system32\Gfxres.da-DK.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00160210 _____ C:\Windows\system32\Gfxres.en-US.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00153492 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00151719 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2017-05-25 11:17 - 2013-11-04 07:23 - 00062528 _____ C:\Windows\system32\iglhxs32.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00044474 _____ C:\Windows\system32\iglhxg32.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00044235 _____ C:\Windows\system32\iglhxo32.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00044053 _____ C:\Windows\system32\iglhxo32_dev.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00043760 _____ C:\Windows\system32\iglhxg32_dev.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00043270 _____ C:\Windows\system32\iglhxc32.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00042654 _____ C:\Windows\system32\iglhxc32_dev.vp
2017-05-25 11:17 - 2013-11-04 07:23 - 00001125 _____ C:\Windows\system32\iglhxa32.vp
2017-05-25 11:17 - 2013-11-03 10:29 - 07332936 _____ C:\Windows\system32\Drivers\isp_firmware.bin
2017-05-25 11:17 - 2013-11-03 10:29 - 00014454 _____ C:\Windows\system32\Drivers\mute.bmp
2017-05-25 11:17 - 2013-10-23 07:43 - 00176352 _____ C:\Windows\system32\OV5693_13P2BA523.cpf
2017-05-25 11:17 - 2013-09-07 09:13 - 00102472 _____ C:\Windows\system32\OV2722_13P2SF225.cpf
2017-05-25 11:16 - 2017-05-25 11:26 - 00000000 ____D C:\Program Files\Broadcom
2017-05-25 11:16 - 2017-05-25 11:16 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-25 11:12 - 2017-05-25 13:39 - 00000000 ____D C:\bios
2017-05-25 11:11 - 2017-05-25 11:11 - 00000000 ____D C:\ProgramData\Lenovo
2017-05-25 11:10 - 2017-05-25 11:43 - 00000000 ____D C:\Program Files\Lenovo
2017-05-25 11:08 - 2017-05-26 07:43 - 00000000 ____D C:\Users\rekkis\AppData\LocalLow\Mozilla
2017-05-25 11:07 - 2017-05-25 13:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-05-25 11:07 - 2017-05-25 13:37 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-05-25 11:07 - 2017-05-25 11:12 - 00000000 ____D C:\Users\rekkis\AppData\Local\Mozilla
2017-05-25 11:07 - 2017-05-25 11:08 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\Mozilla
2017-05-25 10:46 - 2017-05-25 15:44 - 00000000 ____D C:\Users\rekkis\AppData\Local\Packages
2017-05-25 10:46 - 2017-05-25 15:25 - 00001164 _____ C:\Users\rekkis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-05-25 10:46 - 2017-05-25 10:46 - 00000000 ____D C:\Users\rekkis\AppData\Roaming\Adobe
2017-05-25 10:45 - 2017-05-25 17:16 - 00000000 ____D C:\Users\rekkis
2017-05-25 10:45 - 2017-05-25 10:45 - 00000020 ___SH C:\Users\rekkis\ntuser.ini
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Ustawienia lokalne
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Szablony
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Moje dokumenty
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Menu Start
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Documents\Moje wideo
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Documents\Moje obrazy
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Documents\Moja muzyka
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\Dane aplikacji
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\AppData\Local\Historia
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 _SHDL C:\Users\rekkis\AppData\Local\Dane aplikacji
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-25 10:45 - 2017-05-25 10:45 - 00000000 ____D C:\Users\rekkis\AppData\Local\VirtualStore
2017-05-25 10:45 - 2014-03-18 09:39 - 00000369 _____ C:\Users\rekkis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2017-05-25 10:45 - 2014-03-18 09:39 - 00000369 _____ C:\Users\rekkis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Szablony
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Menu Start
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Szablony
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Pulpit
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Menu Start
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-05-25 10:39 - 2017-05-25 10:39 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2017-05-25 10:36 - 2017-05-25 10:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-05-25 02:00 - 2017-05-25 17:49 - 00000000 ____D C:\Program Files\Kerish Doctor

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-05-26 07:45 - 2016-10-19 10:54 - 00808708 _____ C:\Windows\system32\perfh015.dat
2017-05-26 07:45 - 2016-10-19 10:54 - 00164328 _____ C:\Windows\system32\perfc015.dat
2017-05-26 07:45 - 2014-03-18 09:40 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-26 07:45 - 2013-08-22 08:21 - 00000000 ____D C:\Windows\inf
2017-05-26 07:41 - 2013-08-22 09:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-25 22:19 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-05-25 22:19 - 2013-08-22 10:17 - 00000000 ____D C:\Program Files\Windows Defender
2017-05-25 22:17 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\registration
2017-05-25 22:17 - 2013-08-22 08:21 - 00000000 ____D C:\Windows\system32\Sysprep
2017-05-25 20:34 - 2013-08-22 10:17 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2017-05-25 16:37 - 2016-06-14 17:47 - 00165088 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\kneps.sys
2017-05-25 16:36 - 2017-03-29 04:05 - 00338416 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2017-05-25 16:31 - 2013-08-22 08:13 - 00262144 ___SH C:\Windows\system32\config\ELAM
2017-05-25 16:30 - 2013-08-22 10:17 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-05-25 15:44 - 2013-08-22 10:17 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-25 15:44 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\AppReadiness
2017-05-25 15:10 - 2013-08-22 10:17 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-25 14:41 - 2013-08-22 08:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-05-25 12:21 - 2013-08-22 09:22 - 00337448 _____ C:\Windows\system32\FNTCACHE.DAT
2017-05-25 10:54 - 2013-08-22 10:05 - 00000000 ____D C:\Windows\CbsTemp
2017-05-25 10:46 - 2017-03-30 06:18 - 00000000 ____D C:\Windows\Panther
2017-05-25 10:39 - 2013-08-22 10:17 - 00000000 ____D C:\Program Files\Windows NT

==================== Pliki w katalogu głównym wybranych folderów =======

2017-05-25 15:11 - 2017-05-25 15:11 - 0011568 _____ () C:\Users\rekkis\AppData\Local\InstallationConfiguration.xml
2017-05-25 15:11 - 2017-05-25 15:11 - 0140800 _____ () C:\Users\rekkis\AppData\Local\installer.dat
2017-05-25 15:05 - 2017-05-25 15:05 - 0000017 _____ () C:\Users\rekkis\AppData\Local\resmon.resmoncfg

Niektóre pliki w TEMP:
====================
2017-05-25 15:07 - 2017-05-25 15:07 - 0061440 _____ (The Gentee Group) C:\Users\rekkis\AppData\Local\Temp\genteert.dll

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-03-30 05:18

==================== Koniec  FRST.txt ============================