Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-02-2020 Ran by Tomek (administrator) on DESKTOP-DL2BBIR (Gigabyte Technology Co., Ltd. To be filled by O.E.M.) (29-02-2020 17:36:30) Running from C:\Users\Tomek\Desktop\Download Loaded Profiles: Tomek & tomek_ftpuhgw & obody (Available Profiles: Tomek & tomek_ftpuhgw & obody) Platform: Windows 10 Pro Version 1809 17763.1039 (X64) Language: Angielski (Stany Zjednoczone) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Windows\KMS-R@1n.exe (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.133.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20011.10711.0_x64__8wekyb3d8bbwe\Music.UI.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [353056 2019-03-17] (RealNetworks, Inc. -> RealNetworks, Inc.) HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\Real\RealDownloader\downloader2.exe [1263392 2018-11-15] (RealNetworks, Inc. -> ) HKU\S-1-5-21-1196825691-1671280597-225934830-1001\...\Run: [GG] => C:\Users\Tomek\AppData\Local\GG\Application\gghub.exe [4078144 2019-02-19] (GG Network S.A. -> GG Network S.A.) HKU\S-1-5-21-1196825691-1671280597-225934830-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-1196825691-1671280597-225934830-1001\...\MountPoints2: {18699fe0-4435-11e9-98ca-806e6f6e6963} - "E:\setup.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1001\...\MountPoints2: {c0f8b257-0aee-11ea-9910-74d43550b322} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1001\...\MountPoints2: {e43c9557-eea2-11e9-990e-74d43550b322} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02122020234737563\...\Run: [GG] => C:\Users\Tomek\AppData\Local\GG\Application\gghub.exe [4078144 2019-02-19] (GG Network S.A. -> GG Network S.A.) HKU\S-1-5-21-1196825691-1671280597-225934830-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02122020234737563\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-1196825691-1671280597-225934830-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02122020234737563\...\MountPoints2: {18699fe0-4435-11e9-98ca-806e6f6e6963} - "E:\setup.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02122020234737563\...\MountPoints2: {c0f8b257-0aee-11ea-9910-74d43550b322} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02122020234737563\...\MountPoints2: {e43c9557-eea2-11e9-990e-74d43550b322} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1196825691-1671280597-225934830-1005\...\Run: [Discord] => C:\Users\obody\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.) HKU\S-1-5-21-1196825691-1671280597-225934830-1005\...\Run: [AvastBrowserAutoLaunch_44D4AC154EC643BC47A5B2335EDA2CE4] => "C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --check-run=src=logon --onboarding-at-startup HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.122\Installer\chrmstp.exe [2020-02-24] (Google LLC -> Google LLC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2019-07-07] ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe () [File not signed] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2019-03-17] ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc. -> RealNetworks, Inc.) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {07BB55CD-1FCB-4BB0-BA4A-E0F092596F31} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-28] (Avast Software s.r.o. -> Avast Software) Task: {1331E74E-8883-4312-9F97-C9FC655BD5F6} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\Real\RealDownloader\downloader2.exe [1263392 2018-11-15] (RealNetworks, Inc. -> ) Task: {136FE4B2-DE46-4117-9071-BF38197113E3} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1196825691-1671280597-225934830-1001 => C:\Program Files (x86)\Real\RealDownloader\RealUpgrade.exe [135456 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.) Task: {1D238F1F-5D0D-45B2-BAE7-ED8995B520EA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115024 2020-02-26] (Microsoft Corporation -> Microsoft Corporation) Task: {20D31C64-D1CF-4BFB-B11F-4593CD80A4CC} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_Plugin.exe [1457208 2019-07-15] (Adobe Inc. -> Adobe) Task: {37F9B731-D831-46A8-A600-852AEF379BC9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-15] (Piriform Software Ltd -> Piriform Software Ltd) Task: {4D4D8465-B332-40D4-846C-A9F1D7949E6D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568696 2020-02-12] (Microsoft Corporation -> Microsoft Corporation) Task: {530539D4-6E8B-499A-9523-9BFF1D318CF8} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-15] (Adobe Inc. -> Adobe) Task: {55D4085E-97EC-4492-9562-DBC85DBA758B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4297536 2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Task: {5A8BB920-48EB-41C0-8A6B-14CEBE5F6BDC} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-26] (Microsoft Corporation -> Microsoft Corporation) Task: {64E89898-7B50-45AD-8FEA-561BB48189B7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115024 2020-02-26] (Microsoft Corporation -> Microsoft Corporation) Task: {70F197BD-D987-4A28-AB8A-DAC46D87105E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-15] (Piriform Software Ltd -> Piriform Ltd) Task: {7942245E-AE0B-4E4A-8378-2A05EC579A92} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems) Task: {7B4F6CBF-AE60-465F-B4B6-489BDA0206F3} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1196825691-1671280597-225934830-1001 => C:\Program Files (x86)\Real\RealDownloader\RealUpgrade.exe [135456 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.) Task: {BAD1645C-18C7-4C4F-A9E8-FEAB536D43D5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4297536 2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Task: {C3AC4073-3826-42BD-A0B6-B766B0F80301} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568696 2020-02-12] (Microsoft Corporation -> Microsoft Corporation) Task: {CBC6C43A-2965-4A39-9095-8150563EAF5D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-16] (Google Inc -> Google Inc.) Task: {CCD36701-0670-40E4-8A3E-9FFC0C33D340} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-16] (Google Inc -> Google Inc.) Task: {F0CAA0A4-1EF9-433E-81F6-A17DCB403498} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-26] (Microsoft Corporation -> Microsoft Corporation) Task: {F508B82F-F909-49AD-894A-09D153A2DFF8} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{af1464c1-1574-46b3-8dab-45a153e390fd}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\Real\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2018-11-15] (RealNetworks, Inc. -> RealDownloader) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation) BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-22] (McAfee, LLC -> McAfee, Inc.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\Real\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2018-11-15] (RealNetworks, Inc. -> RealDownloader) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-22] (McAfee, LLC -> McAfee, Inc.) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-22] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_223.dll [2019-07-15] (Adobe Inc. -> ) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems Incorporated -> Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_223.dll [2019-07-15] (Adobe Inc. -> ) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-12-06] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=18.1.15.215 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2019-03-17] (RealNetworks, Inc. -> RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=18.1.15.215 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2019-03-17] (RealNetworks, Inc. -> RealPlayer) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-09-19] (Adobe Systems Incorporated -> Adobe Systems) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default [2020-02-29] CHR DownloadDir: C:\Users\Tomek\Desktop\Download CHR Notifications: Default -> hxxps://vod.pl; hxxps://www.dobreprogramy.pl; hxxps://www.facebook.com; hxxps://www.filmweb.pl; hxxps://www.newsweek.pl CHR Extension: (Easy Auto Refresh) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2019-07-02] CHR Extension: (Prezentacje) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-16] CHR Extension: (Dokumenty) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-16] CHR Extension: (Dysk Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-16] CHR Extension: (YouTube) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-16] CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-02-19] CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-12-21] CHR Extension: (Arkusze) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-16] CHR Extension: (McAfee® WebAdvisor) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-02-19] CHR Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-09] CHR Extension: (AdBlock — best ad blocker) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-02-21] CHR Extension: (Avast Online Security) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-02-28] CHR Extension: (Disqus Condensed) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjdnibohihomibfhckihkohkjaegbcnf [2019-03-16] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-05] CHR Extension: (Gmail) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30] CHR Extension: (Chrome Media Router) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-05] CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-08-30] CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\System Profile [2019-08-30] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [351944 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096648 2020-02-12] (Microsoft Corporation -> Microsoft Corporation) R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2019-03-11] () [File not signed] R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6960640 2019-11-29] (Malwarebytes Inc -> Malwarebytes) R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [920656 2020-02-22] (McAfee, LLC -> McAfee, Inc.) S3 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [38016 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.) S3 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [990840 2019-03-17] (RealNetworks, Inc. -> RealNetworks, Inc.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5378320 2019-10-08] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\NisSrv.exe [3856504 2019-04-08] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MsMpEng.exe [113992 2019-04-08] (Microsoft Corporation -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices) R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37616 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [276952 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. -> AVAST Software) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110104 2016-09-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216544 2019-12-19] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-11-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-21] (Malwarebytes Inc -> Malwarebytes) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [711968 2019-06-04] (Realtek Semiconductor Corp. -> Realtek ) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [451792 2019-04-02] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation) R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [343520 2019-04-08] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [68576 2019-04-08] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-02-26 21:02 - 2020-02-26 21:02 - 000851822 _____ C:\Users\Tomek\Desktop\doc20200226183108 (1).pdf 2020-02-26 20:56 - 2020-02-26 20:56 - 000002073 _____ C:\Users\Public\Desktop\Google Slides.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000002073 _____ C:\ProgramData\Desktop\Google Slides.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000002071 _____ C:\Users\Public\Desktop\Google Sheets.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000002071 _____ C:\ProgramData\Desktop\Google Sheets.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000002061 _____ C:\Users\Public\Desktop\Google Docs.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000002061 _____ C:\ProgramData\Desktop\Google Docs.lnk 2020-02-26 20:56 - 2020-02-26 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google 2020-02-26 20:56 - 2020-02-26 20:56 - 000000000 ____D C:\Program Files\Google 2020-02-24 19:50 - 2020-02-24 19:50 - 000364314 _____ C:\Users\Tomek\Desktop\FV_1_2020.PDF 2020-02-21 11:23 - 2020-02-21 11:23 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-02-19 18:54 - 2020-02-01 07:36 - 000801080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll 2020-02-18 17:14 - 2015-12-11 21:59 - 730260346 _____ C:\Users\Tomek\Desktop\Amy [2015] PLSUBBED.BDRiP.XViD-MX.avi 2020-02-16 09:51 - 2020-02-16 09:52 - 000000000 ____D C:\Users\Tomek\Desktop\Praca2020 2020-02-12 23:48 - 2020-02-12 20:48 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2020-02-12 23:48 - 2020-02-12 20:48 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2020-02-12 23:43 - 2020-02-12 23:43 - 000000000 ____D C:\ProgramData\ssh 2020-02-12 20:35 - 2020-02-12 20:35 - 005436936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 003626496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 003550592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 002469432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 002323904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 002273080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 001877168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 001430672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 001288856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 001267216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-02-12 20:35 - 2020-02-12 20:35 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2020-02-12 20:35 - 2020-02-12 20:35 - 000263576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2020-02-12 20:35 - 2020-02-12 20:35 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 026806784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 024617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 023463424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 020816384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 019020288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 013013504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 012306432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 008906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 007923712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 007870976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 006546296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 006318544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 006061056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 005608328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 004872704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 004658688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 004628992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 003904000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 003702784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 003656704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 003430400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002942976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002348544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002280024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001677088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001647104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001247560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 001229824 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001222672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001219584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2020-02-12 20:34 - 2020-02-12 20:34 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2020-02-12 20:34 - 2020-02-12 20:34 - 001076224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 001062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000879104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000876032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000849920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000796160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000741376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000594432 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000541472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000428544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-02-12 20:34 - 2020-02-12 20:34 - 000212480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-02-12 20:34 - 2020-02-12 20:34 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000128616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2020-02-12 20:34 - 2020-02-12 20:34 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-02-12 20:34 - 2020-02-12 20:34 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasphone.exe 2020-02-12 20:33 - 2020-02-12 20:34 - 006445568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 022137336 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 009669648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 007888896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 006943232 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 005777920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 005577656 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 005528576 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 005300736 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 004588776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 004417552 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 004050944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 003874936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 003636736 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 003363848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 003329536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002848256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002780296 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002770944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002699264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002634240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002627600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 002292224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 002192384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001994976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001963536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 001866240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001830928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001824768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001796920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001751432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-02-12 20:33 - 2020-02-12 20:33 - 001674688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001665720 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001608192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001486680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001479208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001476096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 001360912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 001345984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-02-12 20:33 - 2020-02-12 20:33 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001262592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 001054952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 001051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 001012736 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000953344 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000930816 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000917816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000902344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2020-02-12 20:33 - 2020-02-12 20:33 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000741688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000591376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000588600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000481280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000465424 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000431416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2020-02-12 20:33 - 2020-02-12 20:33 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000331104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000313000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000293856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000286520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000252024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000156712 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000105784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasphone.exe 2020-02-12 20:33 - 2020-02-12 20:33 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2020-02-12 20:33 - 2020-02-12 20:33 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 007701200 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 003577856 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 003269632 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 003006464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 002928640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 002707456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 002590736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 002426680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.AppAgent.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 002158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 002015608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001727496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.AppAgent.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001677312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001674752 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001538560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 001520232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001387512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001294488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001259832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 001258504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 001188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AgentService.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 001184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 001128960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 001049400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000888864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000872000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000856432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000831800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000758928 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000751632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2013CustomActions.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000681416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000677144 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000662024 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000613176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000606224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2013CustomActions.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000510264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000506200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000450912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000446480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000438784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000422712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000405520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000402584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000389920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000376568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000253256 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000213816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000203064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000193336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000189496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000163240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000147944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000137528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000103736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2020-02-12 20:32 - 2020-02-12 20:32 - 000095760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppCore.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2020-02-12 20:32 - 2020-02-12 20:32 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-02-12 20:32 - 2020-02-12 20:32 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-02-08 17:54 - 2020-02-16 10:02 - 000000000 ____D C:\Users\Tomek\Desktop\Prognozy 2020-02-06 18:59 - 2020-02-16 20:50 - 000000000 ____D C:\Users\Tomek\Desktop\przegląd luty 20 2020-02-05 22:38 - 2020-02-05 22:38 - 000001029 _____ C:\Users\Tomek\Desktop\Adobe Lightroom.lnk 2020-02-05 22:38 - 2020-02-05 22:38 - 000001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk 2020-02-05 22:37 - 2020-02-05 22:37 - 000000000 ____D C:\Program Files\Adobe 2020-02-05 22:33 - 2020-02-05 22:33 - 000001615 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2020-02-05 22:33 - 2020-02-05 22:33 - 000001603 _____ C:\Users\Public\Desktop\Adobe Application Manager.lnk 2020-02-05 22:33 - 2020-02-05 22:33 - 000001603 _____ C:\ProgramData\Desktop\Adobe Application Manager.lnk ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-02-29 17:37 - 2019-08-25 17:32 - 000000000 ____D C:\FRST 2020-02-29 17:36 - 2019-03-17 20:59 - 000000000 ____D C:\Users\Tomek\Desktop\Download 2020-02-29 17:30 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-02-29 17:11 - 2019-03-11 20:51 - 000000000 ____D C:\Users\Tomek\AppData\Local\Packages 2020-02-29 17:06 - 2019-03-14 19:40 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-02-29 14:17 - 2019-08-01 23:02 - 000004224 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{416F8B78-0CF4-4329-8720-9B1D544912FE} 2020-02-29 01:02 - 2019-04-23 08:12 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-02-29 01:02 - 2019-04-23 08:12 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC 2020-02-29 01:02 - 2019-03-29 12:43 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1196825691-1671280597-225934830-1004 2020-02-29 01:02 - 2019-03-18 16:18 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1196825691-1671280597-225934830-1005 2020-02-29 01:02 - 2019-03-17 11:46 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-02-29 01:02 - 2019-03-16 09:15 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-02-29 01:02 - 2019-03-16 09:15 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-02-29 00:50 - 2019-04-22 17:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software 2020-02-28 22:18 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps 2020-02-28 22:18 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-02-26 21:49 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-02-26 20:56 - 2019-03-16 09:15 - 000000000 ____D C:\Users\Tomek\AppData\Local\Google 2020-02-26 20:51 - 2019-03-23 15:23 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2020-02-24 19:23 - 2019-03-16 09:16 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-02-24 19:23 - 2019-03-16 09:16 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-02-24 19:23 - 2019-03-16 09:16 - 000002260 _____ C:\ProgramData\Desktop\Google Chrome.lnk 2020-02-24 19:20 - 2019-04-22 17:59 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update 2020-02-22 22:59 - 2019-03-11 21:56 - 000000000 ____D C:\Program Files\rempl 2020-02-21 11:23 - 2019-07-25 15:07 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-02-16 10:03 - 2019-10-30 11:47 - 000000000 ____D C:\Users\Tomek\Desktop\Tomek 2020-02-13 21:06 - 2019-03-17 11:45 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-02-12 23:54 - 2019-03-16 09:09 - 000788740 _____ C:\WINDOWS\system32\perfh015.dat 2020-02-12 23:54 - 2019-03-16 09:09 - 000156372 _____ C:\WINDOWS\system32\perfc015.dat 2020-02-12 23:54 - 2019-03-11 20:55 - 001768484 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-02-12 23:54 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF 2020-02-12 23:50 - 2019-03-14 19:57 - 000000000 ___RD C:\Users\Tomek\3D Objects 2020-02-12 23:50 - 2019-03-11 20:51 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-02-12 23:49 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2020-02-12 23:47 - 2019-03-14 19:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-02-12 23:47 - 2019-03-14 19:40 - 000440032 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-02-12 23:45 - 2019-03-12 15:40 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2020-02-12 23:45 - 2018-09-15 07:09 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellComponents 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2020-02-12 23:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-02-12 23:43 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-02-12 23:43 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\servicing 2020-02-12 21:29 - 2020-01-27 10:12 - 000012489 _____ C:\Users\Tomek\Desktop\Kasa 2020.xlsx 2020-02-12 20:45 - 2019-03-11 21:55 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-02-12 20:41 - 2019-03-11 21:55 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-02-11 18:11 - 2019-03-29 12:59 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\GG 2020-02-06 18:32 - 2019-03-16 13:43 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2020-02-05 21:23 - 2019-03-18 16:15 - 000000000 ____D C:\Users\obody 2020-02-05 00:29 - 2019-03-14 19:49 - 000000000 ____D C:\Users\Tomek 2020-01-31 16:15 - 2019-04-22 18:01 - 000000000 ____D C:\Users\Tomek\AppData\Local\CrashDumps ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================