Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-06-2017 01 Uruchomiony przez Milten (administrator) DESKTOP-UKHK025 (16-06-2017 18:38:13) Uruchomiony z C:\Users\Milten\Downloads Załadowane profile: Milten (Dostępne profile: Milten) Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Waves Audio Ltd.) C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760 2015-08-04] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320 2015-08-04] (Realtek Semiconductor) HKLM\...\Run: [WavesSvc] => C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe [562264 2014-04-10] (Waves Audio Ltd.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2857128 2015-01-10] (Synaptics Incorporated) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0d7a3b8e-4944-4e16-9c18-7437305b8247}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== FireFox: ======== FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-16] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default [2017-06-16] CHR Extension: (Prezentacje Google) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-16] CHR Extension: (Dokumenty Google) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-16] CHR Extension: (Dysk Google) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-16] CHR Extension: (YouTube) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-16] CHR Extension: (Arkusze Google) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-16] CHR Extension: (Dokumenty Google offline) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-16] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-16] CHR Extension: (Gmail) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-16] CHR Extension: (Chrome Media Router) - C:\Users\Milten\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-16] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [382456 2017-02-16] (Intel Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-08] (NVIDIA Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056 2015-08-04] (Realtek Semiconductor) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-06-03] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318760 2015-08-13] (Qualcomm Atheros Communications, Inc.) R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.) S3 iaLPSS_GPIO; C:\WINDOWS\System32\drivers\iaLPSS_GPIO.sys [35832 2014-06-03] (Intel Corporation) S3 iaLPSS_I2C; C:\WINDOWS\System32\drivers\iaLPSS_I2C.sys [120312 2014-06-03] (Intel Corporation) R1 MpKslf3a4190d; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DACCF8D9-3C22-416E-A59E-3F16F426E0D0}\MpKslf3a4190d.sys [44928 2017-06-16] (Microsoft Corporation) S3 NVSWCFilter; C:\WINDOWS\System32\drivers\nvswcfilter.sys [26560 2017-06-08] (Windows (R) Win 7 DDK provider) S3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-06-08] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [896744 2015-08-13] (Realtek ) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [412400 2015-08-05] (Realsil Semiconductor Corporation) R3 SynRMIHID; C:\WINDOWS\System32\drivers\SynRMIHID.sys [42664 2015-01-10] (Synaptics Incorporated) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 kwxdqaob; C:\Users\Milten\AppData\Local\Temp\kwxdqaob.sys [56584 2017-06-16] (GMER) [Brak podpisu cyfrowego] <==== UWAGA ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-16 18:38 - 2017-06-16 18:38 - 00008266 _____ C:\Users\Milten\Downloads\FRST.txt 2017-06-16 18:38 - 2017-06-16 18:38 - 00000000 ____D C:\FRST 2017-06-16 18:25 - 2017-06-16 18:25 - 02438656 _____ (Farbar) C:\Users\Milten\Downloads\FRST64.exe 2017-06-16 18:22 - 2017-06-16 18:22 - 00003968 _____ C:\Users\Milten\Desktop\Gmer.txt 2017-06-16 17:32 - 2017-06-16 17:32 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell 2017-06-16 17:32 - 2017-06-16 17:32 - 00000000 ____D C:\Users\Milten\AppData\Local\Deployment 2017-06-16 17:32 - 2017-06-16 17:32 - 00000000 ____D C:\Users\Milten\AppData\Local\Apps\2.0 2017-06-16 17:31 - 2017-06-16 17:31 - 00519600 _____ () C:\Users\Milten\Downloads\DellSystemDetectLauncher.exe 2017-06-16 17:22 - 2017-06-16 17:24 - 00000000 ____D C:\AdwCleaner 2017-06-16 17:18 - 2017-06-16 17:18 - 00380928 _____ C:\Users\Milten\Downloads\f9bc83s0.exe 2017-06-16 17:17 - 2017-06-16 17:17 - 04110280 _____ C:\Users\Milten\Downloads\adwcleaner_6.047.exe 2017-06-16 15:11 - 2017-06-16 15:11 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-06-16 15:11 - 2017-06-16 15:11 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2017-06-16 14:45 - 2017-06-16 14:45 - 00003218 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_PushButton 2017-06-16 14:39 - 2017-06-16 14:39 - 00000000 ____D C:\Users\Milten\AppData\Local\ElevatedDiagnostics 2017-06-16 14:34 - 2017-06-16 14:34 - 00001037 _____ C:\Users\Milten\Desktop\Telegram.lnk 2017-06-16 14:34 - 2017-06-16 14:34 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop 2017-06-16 14:33 - 2017-06-16 18:34 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Telegram Desktop 2017-06-16 14:32 - 2017-06-16 14:33 - 20977064 _____ (Telegram Messenger LLP ) C:\Users\Milten\Downloads\tsetup.1.1.7.exe 2017-06-16 14:29 - 2017-06-16 14:29 - 00002356 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-06-16 14:29 - 2017-06-16 14:29 - 00002344 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-06-16 14:28 - 2017-06-16 14:45 - 00000000 ____D C:\Users\Milten\AppData\Local\Google 2017-06-16 14:28 - 2017-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\Google 2017-06-16 14:28 - 2017-06-16 14:28 - 01130328 _____ (Google Inc.) C:\Users\Milten\Downloads\ChromeSetup.exe 2017-06-16 14:28 - 2017-06-16 14:28 - 00003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-06-16 14:28 - 2017-06-16 14:28 - 00003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-06-16 14:27 - 2017-06-16 14:28 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-06-16 14:27 - 2017-06-16 14:27 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-06-16 14:23 - 2017-06-16 14:33 - 00000000 ____D C:\Program Files\supdt 2017-06-16 14:21 - 2017-05-30 22:45 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-06-16 14:17 - 2017-06-16 14:17 - 00000000 ____D C:\Users\Milten\AppData\Local\Comms 2017-06-16 14:16 - 2017-06-16 14:16 - 00002500 _____ C:\Users\Milten\Downloads\OOSU10.ini 2017-06-16 14:15 - 2017-06-16 14:15 - 00743488 _____ (O&O Software GmbH) C:\Users\Milten\Downloads\OOSU10.exe 2017-06-16 14:15 - 2017-06-16 14:15 - 00743488 _____ (O&O Software GmbH) C:\Users\Milten\Downloads\OOSU10 (1).exe 2017-06-16 14:08 - 2017-06-16 14:08 - 00003292 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-06-16 14:07 - 2017-06-16 14:07 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Skype 2017-06-16 14:06 - 2017-06-16 14:08 - 00002416 _____ C:\Users\Milten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-06-16 14:06 - 2017-06-16 14:08 - 00000000 ___RD C:\Users\Milten\OneDrive 2017-06-16 13:07 - 2017-06-03 15:14 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-06-16 13:06 - 2017-06-16 13:06 - 00000000 ____D C:\ProgramData\USOShared 2017-06-16 13:05 - 2017-06-16 15:15 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Szablony 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Menu Start 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\Default User 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Users\All Users 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Szablony 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Pulpit 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Menu Start 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Dokumenty 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\ProgramData\Dane aplikacji 2017-06-16 13:05 - 2017-06-16 13:05 - 00000000 _SHDL C:\Documents and Settings 2017-06-16 13:00 - 2017-06-16 13:00 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2017-06-16 13:00 - 2017-06-16 13:00 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-06-16 13:00 - 2017-06-16 13:00 - 00000000 ____D C:\Program Files\Common Files\Atheros 2017-06-16 13:00 - 2017-06-08 01:55 - 06467008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 02479552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 01762936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 00549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 00082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-06-16 13:00 - 2017-06-08 01:55 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-06-16 13:00 - 2017-06-07 14:42 - 08075477 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-06-16 12:59 - 2017-06-16 15:15 - 00000000 ____D C:\ProgramData\NVIDIA 2017-06-16 12:59 - 2017-06-16 12:59 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-06-16 12:59 - 2017-06-16 12:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-06-16 12:59 - 2017-06-16 12:59 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-06-16 12:59 - 2017-06-08 02:01 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-06-16 12:58 - 2017-06-16 15:18 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-06-16 12:58 - 2017-06-16 14:45 - 01019725 _____ C:\WINDOWS\system32\Drivers\rtwavesskdy.dat 2017-06-16 12:58 - 2017-06-16 14:45 - 00455938 _____ C:\WINDOWS\system32\Drivers\rtwavesmapro.dat 2017-06-16 12:58 - 2017-06-16 14:45 - 00031095 _____ C:\WINDOWS\system32\Drivers\rtwavesEFX.dat 2017-06-16 12:58 - 2017-06-16 14:45 - 00019678 _____ C:\WINDOWS\system32\Drivers\rtwavesmaprocap.dat 2017-06-16 12:58 - 2017-06-16 14:45 - 00010945 _____ C:\WINDOWS\system32\Drivers\rtwavesMFX.dat 2017-06-16 12:58 - 2017-06-16 14:45 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-06-16 12:58 - 2017-06-16 12:58 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2017-06-16 12:58 - 2017-06-16 12:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2017-06-16 12:58 - 2017-06-16 12:58 - 00000000 ____D C:\WINDOWS\system32\SRSLabs 2017-06-16 12:58 - 2017-06-16 12:58 - 00000000 ____D C:\Program Files\Realtek 2017-06-16 12:58 - 2017-06-16 12:58 - 00000000 ____D C:\Program Files\Intel 2017-06-16 12:58 - 2017-06-16 12:58 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2017-06-16 12:58 - 2017-06-16 04:09 - 00000000 ____D C:\Intel 2017-06-16 12:58 - 2017-02-16 00:21 - 00112656 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-06-16 12:58 - 2017-02-16 00:21 - 00108560 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-06-16 12:54 - 2017-06-16 12:54 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-06-16 12:53 - 2017-06-16 15:15 - 00221176 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-16 04:49 - 2017-06-16 04:49 - 00000000 _____ C:\Recovery.txt 2017-06-16 04:45 - 2017-06-16 04:46 - 00000000 ____D C:\Windows.old 2017-06-16 04:45 - 2017-06-16 04:45 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-06-16 04:45 - 2017-06-16 04:45 - 00000000 ____D C:\WINDOWS\InfusedApps 2017-06-16 04:45 - 2017-06-16 04:06 - 00000000 ___DC C:\WINDOWS\Panther 2017-06-16 04:43 - 2017-06-16 04:43 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-06-16 04:43 - 2017-06-16 04:43 - 00000000 ____D C:\Program Files\Synaptics 2017-06-16 04:40 - 2017-06-16 04:40 - 00000000 ____D C:\WINDOWS\Setup 2017-06-16 04:39 - 2017-06-16 15:22 - 00818302 _____ C:\WINDOWS\system32\perfh015.dat 2017-06-16 04:39 - 2017-06-16 15:22 - 00157970 _____ C:\WINDOWS\system32\perfc015.dat 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\WINDOWS\OCR 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\Program Files\MSBuild 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-06-16 04:39 - 2017-06-16 04:39 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-06-16 04:39 - 2017-06-16 04:38 - 00342912 _____ C:\WINDOWS\system32\perfi015.dat 2017-06-16 04:39 - 2017-06-16 04:38 - 00041236 _____ C:\WINDOWS\system32\perfd015.dat 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\pl 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\winrm 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\WCN 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\slmgr 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\pl 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\0409 2017-06-16 04:38 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\DigitalLocker 2017-06-16 04:35 - 2017-06-03 05:07 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-06-16 04:35 - 2017-06-03 05:07 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-06-16 04:34 - 2017-06-16 17:42 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-16 04:34 - 2017-06-16 15:19 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 __RSD C:\WINDOWS\Media 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\setup 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\Provisioning 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files\Windows Portable Devices 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files\Windows Defender 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2017-06-16 04:34 - 2017-06-16 15:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-06-16 04:34 - 2017-06-16 15:07 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-06-16 04:34 - 2017-06-16 14:28 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2017-06-16 04:34 - 2017-06-16 13:07 - 00000000 ____D C:\WINDOWS\system32\spool 2017-06-16 04:34 - 2017-06-16 13:07 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2017-06-16 04:34 - 2017-06-16 13:05 - 00000000 ____D C:\Program Files\Windows NT 2017-06-16 04:34 - 2017-06-16 13:03 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-06-16 04:34 - 2017-06-16 04:49 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-06-16 04:34 - 2017-06-16 04:39 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-06-16 04:34 - 2017-06-16 04:39 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\system32\Com 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\IME 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\Help 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\Program Files\Common Files\System 2017-06-16 04:34 - 2017-06-16 04:38 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 __SHD C:\Program Files\Windows Sidebar 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 __RHD C:\Users\Public\Libraries 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___SD C:\WINDOWS\system32\Nui 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Web 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Vss 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\tracing 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\TAPI 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SystemResources 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SystemApps 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\winevt 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\ras 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\IME 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\icsxml 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\ias 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\downlevel 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\System 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SKB 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\security 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\schemas 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\SchCache 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Resources 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Registration 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\PLA 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Performance 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\L2Schemas 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\InputMethod 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Globalization 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Cursors 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\Branding 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\appcompat 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\addins 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\ProgramData\USOPrivate 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\ProgramData\Comms 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\Program Files\Common Files\Services 2017-06-16 04:34 - 2017-06-16 04:34 - 00000000 ____D C:\Program Files (x86)\Windows NT 2017-06-16 04:34 - 2017-06-16 04:32 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2017-06-16 04:34 - 2017-06-16 04:32 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2017-06-16 04:34 - 2017-06-16 04:32 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2017-06-16 04:34 - 2017-06-16 04:32 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2017-06-16 04:34 - 2017-06-16 04:32 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2017-06-16 04:34 - 2017-06-16 04:32 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2017-06-16 04:34 - 2017-06-16 04:32 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2017-06-16 04:34 - 2017-06-16 04:32 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2017-06-16 04:34 - 2017-06-16 04:32 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2017-06-16 04:34 - 2017-06-16 04:32 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2017-06-16 04:34 - 2017-06-16 04:32 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2017-06-16 04:34 - 2017-06-16 04:32 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2017-06-16 04:34 - 2017-06-16 04:32 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2017-06-16 04:34 - 2017-06-16 04:32 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2017-06-16 04:34 - 2017-06-16 04:32 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2017-06-16 04:34 - 2017-06-16 04:32 - 00000389 _____ C:\WINDOWS\system32\AutoWorkplace.exe.config 2017-06-16 04:34 - 2017-06-16 04:32 - 00000219 _____ C:\WINDOWS\system.ini 2017-06-16 04:34 - 2017-06-16 04:32 - 00000092 _____ C:\WINDOWS\win.ini 2017-06-16 04:34 - 2017-06-16 04:13 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-06-16 04:34 - 2017-06-16 04:05 - 00000000 ____D C:\WINDOWS\rescache 2017-06-16 04:33 - 2017-06-16 15:22 - 00000000 ____D C:\WINDOWS\INF 2017-06-16 04:27 - 2017-06-16 14:29 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-06-16 04:22 - 2017-06-16 15:14 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2017-06-16 04:22 - 2017-06-16 13:06 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2017-06-16 04:22 - 2017-06-16 04:38 - 00000000 ____D C:\WINDOWS\servicing 2017-06-16 04:22 - 2017-06-16 04:34 - 00000000 ____D C:\WINDOWS\system32\SMI 2017-06-16 04:22 - 2015-10-30 08:33 - 00000164 _____ C:\WINDOWS\system32\config\FP 2017-06-16 04:21 - 2017-06-16 04:22 - 00000000 ___HD C:\$Windows.~BT 2017-06-16 04:17 - 2017-06-16 04:17 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Macromedia 2017-06-16 04:16 - 2017-06-16 04:16 - 00000000 ____D C:\Users\Milten\AppData\Local\MicrosoftEdge 2017-06-16 04:16 - 2017-06-16 04:16 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-06-16 04:15 - 2017-06-16 15:22 - 01845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-16 04:15 - 2017-06-16 04:15 - 00000819 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent uaktualnienia do systemu Windows 10.lnk 2017-06-16 04:15 - 2017-06-16 04:15 - 00000807 _____ C:\Users\Milten\Desktop\Asystent uaktualnienia do systemu Windows 10.lnk 2017-06-16 04:15 - 2017-06-16 04:15 - 00000000 ____D C:\Windows10Upgrade 2017-06-16 04:14 - 2017-06-16 04:14 - 00000000 ____D C:\Users\Milten\AppData\Local\Publishers 2017-06-16 04:14 - 2017-06-16 04:14 - 00000000 ____D C:\Users\Milten\AppData\Local\ActiveSync 2017-06-16 04:13 - 2017-06-16 15:18 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-06-16 04:13 - 2017-06-16 14:52 - 00000000 ____D C:\Users\Milten\AppData\Local\Packages 2017-06-16 04:13 - 2017-06-16 04:13 - 00000000 ____D C:\Users\Milten\AppData\Roaming\Adobe 2017-06-16 04:13 - 2017-06-16 04:13 - 00000000 ____D C:\Users\Milten\AppData\Local\VirtualStore 2017-06-16 04:12 - 2017-06-16 15:18 - 00000000 __SHD C:\Users\Milten\IntelGraphicsProfiles 2017-06-16 04:12 - 2017-06-16 14:06 - 00000000 ____D C:\Users\Milten 2017-06-16 04:12 - 2017-06-16 04:12 - 00000020 ___SH C:\Users\Milten\ntuser.ini 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Ustawienia lokalne 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Szablony 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Moje dokumenty 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Menu Start 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Documents\Moje wideo 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Documents\Moje obrazy 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Documents\Moja muzyka 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\Dane aplikacji 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\AppData\Local\Historia 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 _SHDL C:\Users\Milten\AppData\Local\Dane aplikacji 2017-06-16 04:12 - 2017-06-16 04:12 - 00000000 ____D C:\Users\Milten\AppData\Local\TileDataLayer 2017-06-16 04:06 - 2017-06-16 04:06 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-06-16 04:05 - 2017-05-24 09:12 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-06-15 23:29 - 2017-06-09 02:03 - 14461344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2017-06-15 23:29 - 2017-06-08 03:45 - 40201664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 35390584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 35281344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 28624320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 24697832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 20819216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 16901584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 13693312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 11056272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 11028664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 10551256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 09248144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 09014976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 08808488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 04115112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 03796928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 03625992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 03256440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 01988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438253.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 01729984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 01606776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438253.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 01056888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00994240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00964216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00914880 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00688784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00577728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00196152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00168824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2017-06-15 23:29 - 2017-06-08 03:45 - 00057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-06-15 23:29 - 2017-06-08 03:45 - 00045163 _____ C:\WINDOWS\system32\nvinfo.pb 2017-06-15 23:29 - 2017-06-08 03:45 - 00026560 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\nvswcfilter.sys 2017-06-15 23:29 - 2017-06-08 03:45 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-06-15 23:29 - 2017-06-08 03:45 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-06-15 19:15 - 2017-06-03 14:51 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-06-15 19:15 - 2017-06-03 14:45 - 06536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2017-06-15 19:15 - 2017-06-03 13:48 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-06-15 19:15 - 2017-06-03 13:45 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-06-15 19:15 - 2017-06-03 13:44 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-06-15 19:15 - 2017-06-03 13:39 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-15 19:15 - 2017-06-03 13:14 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-06-15 19:15 - 2017-06-03 13:13 - 00546968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-06-15 19:15 - 2017-06-03 13:11 - 01368176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-06-15 19:15 - 2017-06-03 12:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-06-15 19:15 - 2017-06-03 12:40 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-15 19:15 - 2017-06-03 12:36 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-06-15 19:15 - 2017-06-03 12:34 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-06-15 19:15 - 2017-06-03 12:33 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-06-15 19:15 - 2017-06-03 12:32 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-06-15 19:15 - 2017-06-03 12:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-06-15 19:15 - 2017-06-03 12:20 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll 2017-06-15 19:15 - 2017-06-03 12:15 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2017-06-15 19:15 - 2017-06-03 12:14 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll 2017-06-15 19:15 - 2017-06-03 12:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2017-06-15 19:15 - 2017-06-03 12:08 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-06-15 19:15 - 2017-06-03 12:05 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-06-15 19:15 - 2017-06-03 12:04 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-06-15 19:15 - 2017-06-03 12:03 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-06-15 19:15 - 2017-06-03 12:01 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-06-15 19:15 - 2017-06-03 11:55 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-06-15 19:15 - 2017-06-03 11:51 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll 2017-06-15 19:15 - 2017-06-03 11:50 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-06-15 19:15 - 2017-06-03 11:49 - 01151488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-06-15 19:15 - 2017-06-03 11:49 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-06-15 19:15 - 2017-06-03 11:44 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-06-15 19:15 - 2017-06-03 11:43 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2017-06-15 19:15 - 2017-06-03 11:41 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-06-15 19:15 - 2017-06-03 11:41 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-06-15 19:15 - 2017-06-03 11:40 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe 2017-06-15 19:15 - 2017-06-03 11:34 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-06-15 19:15 - 2017-06-03 11:27 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-06-15 19:15 - 2017-06-03 11:20 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-06-15 19:15 - 2017-06-03 11:19 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-06-15 19:15 - 2017-06-03 11:16 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-06-15 19:15 - 2017-06-03 11:14 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-06-15 19:15 - 2017-06-03 11:05 - 03575808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-06-15 19:15 - 2017-06-03 10:59 - 02771456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-06-15 19:15 - 2017-06-03 10:56 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-06-15 19:15 - 2017-06-03 10:55 - 05326848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-06-15 19:15 - 2017-06-03 10:51 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-06-15 19:15 - 2017-06-03 10:48 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2017-06-15 19:15 - 2017-06-03 10:23 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-06-15 19:14 - 2017-06-03 15:34 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-15 19:14 - 2017-06-03 15:31 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2017-06-15 19:14 - 2017-06-03 13:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-15 19:13 - 2017-06-03 15:51 - 00129376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-15 19:13 - 2017-06-03 15:49 - 07464288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-06-15 19:13 - 2017-06-03 15:49 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-06-15 19:13 - 2017-06-03 15:46 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-06-15 19:13 - 2017-06-03 15:27 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2017-06-15 19:13 - 2017-06-03 14:57 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-06-15 19:13 - 2017-06-03 14:47 - 22560744 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-06-15 19:13 - 2017-06-03 14:47 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-06-15 19:13 - 2017-06-03 14:46 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-06-15 19:13 - 2017-06-03 14:46 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-06-15 19:13 - 2017-06-03 14:43 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-06-15 19:13 - 2017-06-03 14:43 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-06-15 19:13 - 2017-06-03 14:12 - 01987424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-06-15 19:13 - 2017-06-03 14:12 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-06-15 19:13 - 2017-06-03 14:12 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-15 19:13 - 2017-06-03 14:10 - 01597520 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00225632 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-06-15 19:13 - 2017-06-03 13:57 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-06-15 19:13 - 2017-06-03 13:57 - 00034656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-06-15 19:13 - 2017-06-03 13:49 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-06-15 19:13 - 2017-06-03 13:42 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-06-15 19:13 - 2017-06-03 13:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll 2017-06-15 19:13 - 2017-06-03 13:41 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll 2017-06-15 19:13 - 2017-06-03 13:41 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-06-15 19:13 - 2017-06-03 13:40 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-06-15 19:13 - 2017-06-03 13:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-15 19:13 - 2017-06-03 13:32 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-06-15 19:13 - 2017-06-03 13:27 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll 2017-06-15 19:13 - 2017-06-03 13:21 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2017-06-15 19:13 - 2017-06-03 13:20 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll 2017-06-15 19:13 - 2017-06-03 13:19 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-06-15 19:13 - 2017-06-03 13:13 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-06-15 19:13 - 2017-06-03 13:11 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-06-15 19:13 - 2017-06-03 13:09 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-06-15 19:13 - 2017-06-03 13:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2017-06-15 19:13 - 2017-06-03 13:08 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-06-15 19:13 - 2017-06-03 13:07 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-06-15 19:13 - 2017-06-03 13:02 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-06-15 19:13 - 2017-06-03 12:55 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-06-15 19:13 - 2017-06-03 12:50 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll 2017-06-15 19:13 - 2017-06-03 12:49 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-06-15 19:13 - 2017-06-03 12:48 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-06-15 19:13 - 2017-06-03 12:48 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-06-15 19:13 - 2017-06-03 12:47 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-06-15 19:13 - 2017-06-03 12:45 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-06-15 19:13 - 2017-06-03 12:43 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-06-15 19:13 - 2017-06-03 12:43 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-15 19:13 - 2017-06-03 12:41 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-06-15 19:13 - 2017-06-03 12:40 - 01648128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-06-15 19:13 - 2017-06-03 12:40 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2017-06-15 19:13 - 2017-06-03 12:38 - 01663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-06-15 19:13 - 2017-06-03 12:37 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-06-15 19:13 - 2017-06-03 12:35 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe 2017-06-15 19:13 - 2017-06-03 12:34 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-06-15 19:13 - 2017-06-03 12:26 - 02433536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-06-15 19:13 - 2017-06-03 12:24 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-06-15 19:13 - 2017-06-03 12:20 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-06-15 19:13 - 2017-06-03 12:17 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-06-15 19:13 - 2017-06-03 12:16 - 01121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-06-15 19:13 - 2017-06-03 12:07 - 01729536 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-06-15 19:13 - 2017-06-03 12:06 - 00995840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-15 19:13 - 2017-06-03 12:05 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-06-15 19:13 - 2017-06-03 12:01 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-06-15 19:13 - 2017-06-03 11:49 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-06-15 19:13 - 2017-06-03 11:47 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-06-15 19:13 - 2017-06-03 11:44 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-06-15 19:13 - 2017-06-03 11:41 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2017-06-15 19:13 - 2017-06-03 11:31 - 04890112 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-06-15 19:13 - 2017-06-03 11:30 - 22376448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-06-15 19:13 - 2017-06-03 11:21 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2017-06-15 19:13 - 2017-06-03 11:19 - 24605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-06-15 19:13 - 2017-06-03 11:19 - 06977024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-06-15 19:13 - 2017-06-03 11:17 - 13393920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-06-15 19:13 - 2017-06-03 11:05 - 07852032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-06-15 19:13 - 2017-06-03 11:00 - 19344896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-06-15 19:13 - 2017-06-03 11:00 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-06-15 19:13 - 2017-06-03 10:59 - 18672640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-06-15 19:13 - 2017-06-03 10:59 - 03660288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-06-15 19:13 - 2017-06-03 10:57 - 12139008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-06-15 19:13 - 2017-06-03 10:42 - 05670400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-06-15 19:13 - 2017-06-03 08:03 - 00448576 _____ C:\WINDOWS\system32\ApnDatabase.xml 2017-06-15 19:13 - 2016-06-18 06:57 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-16 04:50 - 2017-01-09 04:06 - 00000000 ___HD C:\$SysReset 2017-06-15 22:56 - 2015-10-30 09:17 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-06-16 12:58 - 2017-06-16 12:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-06-16 12:53 ==================== Koniec FRST.txt ============================