Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 Ran by Xyz (administrator) on KOMP (20-03-2016 19:16:38) Running from C:\Users\Xyz\Downloads Loaded Profiles: Xyz (Available Profiles: Xyz & Guest) Platform: Windows 8.1 Pro (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Akamai Technologies, Inc.) C:\Users\Xyz\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Xyz\AppData\Local\Akamai\netsession_win.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16384_x64__8wekyb3d8bbwe\glcnd.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Corporation) C:\Windows\System32\wscript.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-23] (NVIDIA Corporation) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-07-08] (ESET) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation) HKLM-x32\...\Run: [SiemensAutomationFileStorage_TIAP13] => C:\Program Files (x86)\Siemens\Automation\Portal V13\Bin\Siemens.Automation.ObjectFrame.FileStorage.Server.exe [1022464 2014-02-12] (Siemens AG) HKLM-x32\...\Run: [NI Update Service] => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [857888 2013-05-28] (National Instruments) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Xyz\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [NIRegistrationWizard] => C:\Program Files (x86)\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [847000 2013-04-19] () HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50605696 2016-02-10] (Skype Technologies S.A.) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\Run: [SyncManPath] => C:\Users\Xyz\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe [23845728 2016-02-10] (Yandex) HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\MountPoints2: {0f1bf4b6-74af-11e5-8261-3010b31e230b} - "E:\setup.exe" HKU\S-1-5-21-1744513230-2656635619-383314694-1001\...\MountPoints2: {e68554a0-6f0a-11e5-824c-806e6f6e6963} - "D:\AsInsWiz.exe" ShellIconOverlayIdentifiers: [ YndCase0Sync] -> {63D48440-63AB-44D0-B323-4731DFCDE9E9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll [2016-02-10] (Yandex) ShellIconOverlayIdentifiers: [ YndCase1Modified] -> {7E7DC279-E6BE-4D57-9DEC-14FA0339DBC0} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll [2016-02-10] (Yandex) ShellIconOverlayIdentifiers: [ YndCase2Error] -> {FB2FE984-05F5-4512-9D9B-69D3DE61F6D9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll [2016-02-10] (Yandex) ShellIconOverlayIdentifiers: [ YndCase3Shared] -> {AF8D197E-7022-4c3d-BD88-68AD35C9C169} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll [2016-02-10] (Yandex) ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Xyz\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NI Error Reporting.lnk [2015-12-08] ShortcutTarget: NI Error Reporting.lnk -> C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation) Startup: C:\Users\Xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-11-27] ShortcutTarget: MEGAsync.lnk -> C:\Users\Xyz\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Winsock: Catalog5 08 C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [26512 2013-05-11] (National Instruments Corporation) Winsock: Catalog5-x64 08 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [28560 2013-05-11] (National Instruments Corporation) Hosts: Hosts file not detected in the default directory Tcpip\Parameters: [DhcpNameServer] 87.246.220.1 Tcpip\..\Interfaces\{00956F69-3819-4737-9549-190CB94B1149}: [DhcpNameServer] 87.246.220.1 Internet Explorer: ================== BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation) BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2016-01-12] (Perfect World Entertainment Inc) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-11] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-11] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2016-01-12] (Perfect World Entertainment Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems) Chrome: ======= CHR Profile: C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-09] CHR Extension: (Dokumenty Google) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-09] CHR Extension: (Dysk Google) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23] CHR Extension: (YouTube) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09] CHR Extension: (Google Search) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Tampermonkey) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-03-19] CHR Extension: (Arkusze Google) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-09] CHR Extension: (Dokumenty Google offline) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (AdBlock) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18] CHR Extension: (TED Talks) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibcngmpkgghccnakicfmgajlkhnohep [2015-11-24] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-09] CHR Extension: (Gmail) - C:\Users\Xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-09] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 almservice; C:\Program Files\Common Files\Siemens\sws\almsrv\almsrv64x.exe [1563968 2014-01-13] (SIEMENS AG) S4 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88024 2016-01-12] (Perfect World Entertainment Inc) S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-10-09] (Broadcom Corporation.) S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1314848 2016-01-19] () R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-10-18] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation) R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation) R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1353720 2015-07-08] (ESET) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation) S4 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.) S4 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2013-06-12] (National Instruments Corporation) S4 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2013-06-12] (National Instruments Corporation) S4 mxssvr; C:\Program Files (x86)\National Instruments\MAX\nimxs.exe [83768 2013-06-10] (National Instruments Corporation) S4 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57696 2013-06-08] (National Instruments Corporation) S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [81248 2013-06-08] (National Instruments Corporation) S4 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [380720 2013-06-12] (National Instruments Corporation) S4 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation) S4 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [260976 2013-05-11] (National Instruments Corporation) S4 NINetworkDiscovery; C:\Program Files (x86)\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [176512 2013-06-19] (National Instruments Corporation) S4 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [90440 2013-06-07] (National Instruments Corporation) S4 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57680 2013-06-08] (National Instruments Corporation) S4 NITaggerService; C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exe [687944 2013-06-15] (National Instruments Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-02-17] () S4 s7oiehsx64; C:\Program Files\Common Files\Siemens\Automation\Simatic OAM\bin\s7oiehsx64.exe [144608 2014-01-16] (Siemens AG) S4 S7TraceServiceX; C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceService64X.exe [472288 2014-01-16] (Siemens AG) S4 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed] S4 UA Local Discovery Server; C:\Program Files (x86)\Common Files\OPC Foundation\UA\v1.0\Bin\Opc.Ua.DiscoveryServer.exe [26624 2011-06-21] (OPC Foundation) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2015-10-09] (Broadcom Corporation.) R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7546544 2015-10-09] (Broadcom Corporation) R3 dpmconv; C:\Windows\System32\drivers\dpmconv.sys [259584 2013-08-07] (Siemens AG) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation) R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2015-10-20] (DT Soft Ltd) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [255240 2015-07-14] (ESET) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [251632 2015-07-14] (ESET) R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [178520 2015-07-14] (ESET) R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [231520 2015-07-14] (ESET) R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [53360 2015-07-14] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [72400 2015-07-14] (ESET) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( ) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-20] (Intel Corporation) S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 s7odpx2x64; C:\Windows\System32\drivers\s7odpx2x64.sys [71168 2012-12-19] (SIEMENS AG) R3 s7oppinx64; C:\Windows\System32\drivers\s7oppinx64.sys [107520 2012-07-24] (SIEMENS AG) R3 s7oserix64; C:\Windows\System32\Drivers\s7oserix64.sys [121856 2012-07-24] (SIEMENS AG) R3 s7osmcax64; C:\Windows\System32\drivers\s7osmcax64.sys [199680 2012-07-24] (SIEMENS AG) R3 s7osobux64; C:\Windows\System32\drivers\s7osobux64.sys [153600 2012-07-24] (SIEMENS AG) R3 s7otmcd64x; C:\Windows\System32\Drivers\s7otmcd64x.sys [199680 2012-07-24] (SIEMENS AG) R3 s7otranx64; C:\Windows\System32\drivers\s7otranx64.sys [260608 2013-12-02] (Siemens AG) R3 s7otsadx64; C:\Windows\System32\drivers\s7otsadx64.sys [196096 2012-07-24] (SIEMENS AG) R2 s7ousbu64x; C:\Windows\System32\drivers\s7ousbu64x.sys [137216 2013-12-17] (Siemens AG) R2 s7sn2srtx; C:\Windows\system32\DRIVERS\s7sn2srtx.sys [83032 2012-05-09] (SIEMENS AG) R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.) R2 SNTIE; C:\Windows\system32\DRIVERS\sntie.sys [359648 2013-10-28] (Siemens AG) R3 vsnl2ada; C:\Windows\System32\drivers\vsnl2ada.sys [128000 2013-08-07] (SIEMENS AG) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2015-10-09] (Basil Projects) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-03-20 19:16 - 2016-03-20 19:17 - 00023259 _____ C:\Users\Xyz\Downloads\FRST.txt 2016-03-20 19:16 - 2016-03-20 19:16 - 02374144 _____ (Farbar) C:\Users\Xyz\Downloads\FRST64.exe 2016-03-20 19:16 - 2016-03-20 19:16 - 00000000 ____D C:\FRST 2016-03-20 19:10 - 2016-03-20 19:10 - 00096864 _____ C:\Users\Xyz\Documents\cc_20160320_191010.reg 2016-03-20 18:04 - 2016-03-20 18:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune 2016-03-20 18:04 - 2016-03-20 18:04 - 00000000 ____D C:\Program Files (x86)\HD Tune 2016-03-20 18:03 - 2016-03-20 18:03 - 00642632 _____ (EFD Software ) C:\Users\Xyz\Downloads\hdtune_255.exe 2016-03-20 17:56 - 2016-03-20 17:56 - 00393224 _____ C:\Windows\Minidump\032016-49515-01.dmp 2016-03-20 14:07 - 2016-03-20 14:07 - 00024134 _____ C:\Users\Xyz\Downloads\7.4 Some More Action 1_v1.01_recovered.pdf 2016-03-18 21:09 - 2016-03-20 17:30 - 00770848 _____ C:\Windows\system32\perfh007.dat 2016-03-18 21:09 - 2016-03-20 17:30 - 00161978 _____ C:\Windows\system32\perfc007.dat 2016-03-18 21:09 - 2016-03-18 21:07 - 00305634 _____ C:\Windows\system32\perfi007.dat 2016-03-18 21:09 - 2016-03-18 21:07 - 00040390 _____ C:\Windows\system32\perfd007.dat 2016-03-18 21:07 - 2016-03-18 21:07 - 00000000 ____D C:\Windows\SysWOW64\de 2016-03-18 21:07 - 2016-03-18 21:07 - 00000000 ____D C:\Windows\system32\de 2016-03-17 16:47 - 2016-03-17 16:58 - 00000273 _____ C:\Users\Xyz\Desktop\Powrót króla.txt 2016-03-16 22:56 - 2016-03-16 22:57 - 00000166 _____ C:\Users\Xyz\Desktop\German.txt 2016-03-16 11:29 - 2016-03-16 11:29 - 00454720 _____ C:\Users\Xyz\Desktop\Sprawozdanie_C1.pdf 2016-03-15 16:41 - 2016-03-15 21:02 - 00000000 ____D C:\51 2016-03-15 16:13 - 2016-03-15 16:15 - 00000000 ____D C:\Users\Xyz\Desktop\Catia 2016-03-15 15:14 - 2016-03-15 15:14 - 00000000 ____D C:\Users\Xyz\AppData\Local\DOSBox 2016-03-15 15:13 - 2016-03-15 15:13 - 00001930 _____ C:\Users\Public\Desktop\DOSBox 0.74.lnk 2016-03-15 15:13 - 2016-03-15 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74 2016-03-15 15:13 - 2016-03-15 15:13 - 00000000 ____D C:\Program Files (x86)\DOSBox-0.74 2016-03-15 15:12 - 2016-03-15 15:12 - 01448809 _____ (DOSBox Team) C:\Users\Xyz\Downloads\DOSBox0.74-win32-installer.exe 2016-03-14 22:04 - 2016-03-15 01:29 - 00000329 _____ C:\Users\Xyz\Desktop\Kaliber 44.txt 2016-03-14 08:18 - 2016-03-14 08:18 - 00731038 _____ C:\Users\Xyz\Desktop\Sprawko.pdf 2016-03-13 19:20 - 2016-03-13 19:20 - 00008005 _____ C:\Users\Xyz\Desktop\Nowy Arkusz programu Microsoft Office Excel.xlsx 2016-03-12 23:17 - 2016-03-12 23:17 - 00000351 _____ C:\Users\Xyz\Downloads\vocab-patryk-german.csv 2016-03-12 22:21 - 2016-03-12 22:22 - 00000035 _____ C:\Users\Xyz\Downloads\vocab-patryk-french.csv 2016-03-12 21:27 - 2016-03-12 21:27 - 00001609 _____ C:\Users\Xyz\Desktop\dontcrack — skrót.lnk 2016-03-12 21:24 - 2016-03-12 21:24 - 00000000 ____D C:\Program Files (x86)\Mirillis 2016-03-12 21:19 - 2016-03-12 21:24 - 42514714 _____ C:\Users\Xyz\Downloads\Mirillis.Action.1.18.0.PL.rar 2016-03-12 21:10 - 2016-03-12 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis 2016-03-12 20:55 - 2016-03-12 21:07 - 21509666 _____ C:\Users\Xyz\Downloads\Action + Crack!.rar 2016-03-12 19:47 - 2016-03-12 19:47 - 00000000 ____D C:\Users\Xyz\Desktop\NOTATKI 2016-03-12 18:21 - 2016-03-12 18:21 - 02008982 _____ C:\Users\Xyz\Desktop\Skrypt swiatlowody.pdf 2016-03-12 13:19 - 2016-03-12 13:19 - 00021802 _____ C:\Users\Xyz\Downloads\rocket-german-course.torrent 2016-03-12 13:08 - 2016-03-12 13:09 - 00000000 ____D C:\Program Files (x86)\Rocket German - Mega German 2016-03-12 13:08 - 2016-03-12 13:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rocket German - Mega German 2016-03-11 16:58 - 2016-03-11 16:58 - 01190608 _____ (Adobe Systems Incorporated) C:\Users\Xyz\Downloads\flashplayer21_d_install.exe 2016-03-10 23:52 - 2016-03-14 07:43 - 00000000 ____D C:\Users\Xyz\Desktop\V semestr 2016-03-10 18:08 - 2016-03-10 18:08 - 10299241 ____R C:\Users\Xyz\Downloads\EaseUS Data Recovery Wizard 8.5.zip 2016-03-10 18:08 - 2016-03-10 18:08 - 00000000 ____D C:\Users\Xyz\Desktop\EaseUS 2016-03-09 15:15 - 2016-03-09 15:18 - 87489000 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 3.2. Fly Into The Scene.mp4 2016-03-09 15:04 - 2016-03-09 15:04 - 72484047 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 3.1. Creating A Frame.mp4 2016-03-09 10:49 - 2016-03-09 10:49 - 54365145 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.8. Lighting The Scene.mp4 2016-03-09 10:47 - 2016-03-09 10:49 - 129479668 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.7. Texturing The Scene.mp4 2016-03-09 10:44 - 2016-03-09 10:47 - 89145110 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.6. Simulating Depth Blurring.mp4 2016-03-09 10:44 - 2016-03-09 10:46 - 94900187 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.5. Improving Flow and Rotation.mp4 2016-03-09 10:43 - 2016-03-09 10:48 - 203779850 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.4. Animating The Elements.mp4 2016-03-09 10:43 - 2016-03-09 10:47 - 172861718 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.3. Modifying The Camera Path.mp4 2016-03-09 10:42 - 2016-03-09 10:46 - 119791946 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.2. The Basic Flythrough.mp4 2016-03-09 10:42 - 2016-03-09 10:44 - 76572132 _____ C:\Users\Xyz\Downloads\Camera Flythrough In After Effects - 2.1. Setting Up 3D Layers.mp4 2016-03-08 22:47 - 2016-03-15 15:27 - 00000000 ____D C:\Users\Xyz\Desktop\dsm_instr 2016-03-08 20:53 - 2016-02-08 22:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-03-08 20:53 - 2016-02-08 21:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-03-08 20:53 - 2016-02-08 21:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-03-08 20:53 - 2016-02-08 21:29 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2016-03-08 20:53 - 2016-02-08 21:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-03-08 20:53 - 2016-02-08 21:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-03-08 20:53 - 2016-02-08 21:07 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2016-03-08 20:53 - 2016-02-08 21:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-03-08 20:53 - 2016-02-08 21:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-03-08 20:53 - 2016-02-08 21:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-03-08 20:53 - 2016-02-08 21:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-03-08 20:53 - 2016-02-08 21:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-03-08 20:53 - 2016-02-08 20:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-03-08 20:53 - 2016-02-08 20:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-03-08 20:53 - 2016-02-08 20:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-03-08 20:53 - 2016-02-08 19:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-03-08 20:53 - 2016-02-08 19:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-03-08 20:53 - 2016-02-08 19:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-03-08 20:53 - 2016-02-08 19:14 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2016-03-08 20:53 - 2016-02-08 19:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-03-08 20:53 - 2016-02-08 18:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-03-08 20:53 - 2016-02-08 18:42 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-03-08 20:53 - 2016-02-08 18:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-03-08 20:53 - 2016-02-08 18:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-03-08 20:53 - 2016-02-08 18:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-03-08 20:53 - 2016-02-08 18:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-03-08 20:53 - 2016-02-08 18:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-03-08 20:53 - 2016-02-08 18:15 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2016-03-08 20:53 - 2016-02-08 18:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-03-08 20:53 - 2016-02-08 17:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-03-08 20:51 - 2016-02-12 20:14 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2016-03-08 20:51 - 2016-02-12 16:14 - 03708416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-03-08 20:51 - 2016-02-12 15:55 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2016-03-08 20:51 - 2016-02-12 15:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2016-03-08 20:51 - 2016-02-12 15:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2016-03-08 20:51 - 2016-02-12 15:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2016-03-08 20:51 - 2016-02-12 15:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2016-03-08 20:51 - 2016-02-12 15:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2016-03-08 20:51 - 2016-02-12 15:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2016-03-08 20:51 - 2016-02-12 15:48 - 02244096 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2016-03-08 20:51 - 2016-02-12 15:47 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-03-08 20:51 - 2016-02-12 15:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2016-03-08 20:51 - 2016-02-11 15:21 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2016-03-08 20:51 - 2016-02-11 15:21 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll 2016-03-08 20:51 - 2016-02-11 15:20 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2016-03-08 20:51 - 2016-02-11 15:20 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll 2016-03-08 20:51 - 2016-02-06 19:08 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2016-03-08 20:51 - 2016-02-05 20:07 - 00292696 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL 2016-03-08 20:51 - 2016-02-05 20:07 - 00243032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL 2016-03-08 20:51 - 2016-02-05 16:03 - 15432704 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-03-08 20:51 - 2016-02-05 16:00 - 13318144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2016-03-08 20:51 - 2016-02-05 15:59 - 07784960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2016-03-08 20:51 - 2016-02-05 15:55 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2016-03-08 20:51 - 2016-02-05 15:48 - 07075840 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2016-03-08 20:51 - 2016-02-05 15:47 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2016-03-08 20:51 - 2016-02-04 19:18 - 04174336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-03-08 20:51 - 2016-02-04 19:18 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-03-08 20:51 - 2016-02-04 19:12 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-03-08 20:51 - 2016-02-04 18:44 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-03-08 20:51 - 2016-02-04 18:39 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-03-08 20:51 - 2016-02-04 18:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-03-08 20:51 - 2016-02-04 18:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2016-03-08 20:51 - 2016-02-03 21:37 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-03-08 20:51 - 2016-02-03 21:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-03-08 20:51 - 2016-02-03 16:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2016-03-08 20:51 - 2016-02-03 16:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-03-08 20:51 - 2016-02-03 16:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-03-08 20:51 - 2016-01-31 20:16 - 00148832 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2016-03-08 15:46 - 2016-03-08 15:46 - 22935578 _____ C:\Users\Xyz\Downloads\dsm_instr.7z 2016-03-06 22:17 - 2016-03-06 22:17 - 00478652 _____ C:\Users\Xyz\Downloads\D20031152Lj.pdf 2016-03-06 20:26 - 2016-03-06 20:36 - 195243815 _____ C:\Users\Xyz\Downloads\GrayScaleGorilla - Model And Animate A Light To Follow A Target In Cinema 4D.rar 2016-03-06 20:26 - 2016-03-06 20:30 - 90183491 _____ C:\Users\Xyz\Downloads\formula_tool_c4d.rar 2016-03-06 20:10 - 2016-03-06 20:10 - 00015297 _____ C:\Users\Xyz\Downloads\[videotuts.ru]_Shape Layers Sparks in After Effects.torrent 2016-03-05 14:26 - 2016-03-05 14:26 - 00222347 _____ C:\Users\Xyz\Desktop\Bogdan.aep 2016-03-05 11:41 - 2016-03-05 11:41 - 00014963 _____ C:\Users\Xyz\Downloads\[videotuts.ru]_Generate random shapes on a single shape layer using expressions.rar.torrent 2016-03-05 11:29 - 2016-03-05 13:25 - 56777868 _____ C:\Users\Xyz\Downloads\видеоурок-скобкО.rar 2016-03-04 20:36 - 2016-03-04 20:36 - 01716093 _____ C:\Users\Xyz\Desktop\Aetuts_Project_Files_Dynamic_Mograph_(CS5) (converted) MY.aep 2016-03-04 19:02 - 2016-03-20 18:18 - 00000000 ___RD C:\Users\Xyz\YandexDisk 2016-03-04 19:02 - 2016-03-04 19:02 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Yandex 2016-03-04 19:02 - 2016-03-04 19:02 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex.Disk 2016-03-04 19:02 - 2016-03-04 19:02 - 00000000 ____D C:\Users\Xyz\AppData\LocalLow\Yandex 2016-03-04 19:02 - 2016-03-04 19:02 - 00000000 ____D C:\Program Files\Yandex 2016-03-04 19:02 - 2016-03-04 19:02 - 00000000 ____D C:\Program Files (x86)\Yandex 2016-03-04 19:00 - 2016-03-04 19:00 - 00000000 ____D C:\Users\Xyz\AppData\Local\Yandex 2016-03-04 19:00 - 2016-03-04 19:00 - 00000000 ____D C:\ProgramData\Yandex 2016-03-04 18:58 - 2016-03-04 18:58 - 01539496 _____ (Yandex) C:\Users\Xyz\Downloads\YandexDiskSetupEn.exe 2016-03-04 17:20 - 2016-03-04 17:40 - 100002812 _____ C:\Users\Xyz\Downloads\Distribute-Your-Layers-in-3D-Custom-Effect.rar 2016-03-02 14:20 - 2016-03-02 14:20 - 13739490 _____ C:\Users\Xyz\Desktop\Mastering-Illustrator.pdf 2016-02-29 20:52 - 2015-08-22 14:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2016-02-29 20:52 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2016-02-28 22:51 - 2016-02-28 22:51 - 00012967 _____ C:\Users\Xyz\Downloads\[kat.cr]video.copilot.element.3d.2.v2.0.7.crack.xtreme.torrent 2016-02-28 22:49 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-02-28 22:49 - 2016-02-09 09:39 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-02-28 22:49 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-02-28 22:40 - 2016-02-28 22:45 - 335612944 _____ (NVIDIA Corporation) C:\Users\Xyz\Downloads\361.91-notebook-win8-win7-64bit-international-whql.exe 2016-02-28 21:50 - 2016-02-28 23:31 - 00000000 ____D C:\ProgramData\VideoCopilot 2016-02-28 21:46 - 2016-02-28 21:51 - 00000000 ____D C:\Users\Xyz\Documents\VideoCopilot 2016-02-28 21:41 - 2016-02-28 22:53 - 00000000 ____D C:\Users\Xyz\Downloads\element 3D 2016-02-28 20:55 - 2016-02-28 20:55 - 01777230 _____ C:\Users\Xyz\Downloads\3D Flat Design Animation.zip 2016-02-28 16:51 - 2016-02-28 16:51 - 00492195 _____ C:\Users\Xyz\Downloads\3109_tematyMech-2015-16.zip 2016-02-28 16:49 - 2016-02-28 16:50 - 08600863 _____ C:\Users\Xyz\Downloads\PiFO 1-24.rar 2016-02-28 16:46 - 2016-02-28 16:46 - 03988936 _____ C:\Users\Xyz\Downloads\Siatki Bragga.rar 2016-02-28 16:46 - 2016-02-28 16:46 - 02008982 _____ C:\Users\Xyz\Downloads\Skrypt_swiatlowody_laboratorium_z_HASLEM.pdf 2016-02-28 16:46 - 2016-02-28 16:46 - 01829220 _____ C:\Users\Xyz\Downloads\poradnik_otdr.pdf 2016-02-28 13:26 - 2011-12-08 12:37 - 01471270 _____ C:\Users\Xyz\Desktop\Aetuts_Project_Files_Dynamic_Mograph_(CS5).aep 2016-02-28 13:25 - 2016-02-28 13:25 - 00071365 _____ C:\Users\Xyz\Downloads\Aetuts_Project_Files_Dynamic_Mograph_(CS5).aep.zip 2016-02-27 19:39 - 2016-02-27 19:39 - 00000000 ____D C:\Windows\system32\uk 2016-02-27 14:11 - 2016-03-08 22:45 - 00000000 ____D C:\Users\Xyz\Desktop\Sygnaly01 2016-02-26 09:06 - 2016-02-26 09:06 - 00060076 _____ C:\Users\Xyz\Downloads\ignis_et_glacies_sharp (1).zip 2016-02-26 09:05 - 2016-02-26 09:05 - 00060076 _____ C:\Users\Xyz\Downloads\ignis_et_glacies_sharp.zip 2016-02-24 21:20 - 2016-02-24 21:20 - 02695168 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (2)_1.prx.Anonymous.autosave 2016-02-24 21:11 - 2016-02-24 21:12 - 02629632 _____ C:\Users\Xyz\Downloads\projekt_1 (1).prx 2016-02-24 21:11 - 2016-02-24 21:11 - 02633728 _____ C:\Users\Xyz\Downloads\projekt_1 (1).prx.backup 2016-02-24 21:09 - 2016-02-24 21:10 - 02629632 _____ C:\Users\Xyz\Downloads\projekt_1.prx 2016-02-24 21:09 - 2016-02-24 21:09 - 02961408 _____ C:\Users\Xyz\Downloads\projekt_1.prx.backup 2016-02-24 21:08 - 2016-02-24 21:08 - 00062464 _____ C:\Users\Xyz\Downloads\projekt.prx.backup 2016-02-24 21:08 - 2016-02-24 21:08 - 00062464 _____ C:\Users\Xyz\Downloads\projekt.prx 2016-02-24 21:06 - 2016-02-24 21:07 - 02703360 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (2)_1.prx.backup 2016-02-24 21:04 - 2016-02-24 21:24 - 02699264 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (2)_1.prx 2016-02-24 21:04 - 2016-02-24 21:04 - 00098304 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (2).prx.backup 2016-02-24 21:04 - 2016-02-24 21:04 - 00098304 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (2).prx 2016-02-24 20:55 - 2016-02-24 20:55 - 00000000 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1)_1.lprx 2016-02-24 14:30 - 2016-02-24 14:14 - 02699264 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1)_1.prx.Anonymous.autosave~1 2016-02-24 14:14 - 2016-02-24 14:30 - 02699264 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1)_1.prx.Anonymous.autosave 2016-02-24 13:59 - 2016-02-24 14:37 - 02703360 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1)_1.prx.backup 2016-02-24 13:58 - 2016-02-24 21:24 - 02703360 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1)_1.prx 2016-02-24 13:58 - 2016-02-23 21:22 - 00098304 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1).prx.backup 2016-02-24 13:55 - 2016-02-24 13:55 - 00028430 _____ C:\Users\Xyz\Downloads\automation-studio-p6-6-0-10932-x86-[torrentino] (1).torrent 2016-02-24 13:39 - 2016-02-24 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPC Foundation 2016-02-24 13:39 - 2016-02-24 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Automation Studio 6.0 2016-02-24 13:38 - 2016-02-24 13:38 - 00000000 ____D C:\Program Files (x86)\Famic Technologies Inc 2016-02-24 00:22 - 2016-02-24 00:22 - 00000000 ____D C:\Users\Xyz\Downloads\Automation studio 2016-02-24 00:21 - 2016-02-24 00:21 - 00028430 _____ C:\Users\Xyz\Downloads\automation-studio-p6-6-0-10932-x86-[torrentino].torrent 2016-02-23 23:17 - 2016-02-23 23:17 - 00829690 _____ C:\Users\Xyz\Downloads\Automation-Studio-P6-Professional-Edition-v6.0-Crack-is-Here-Exclusive__15047_i1872264702_il18718.7z 2016-02-23 23:05 - 2016-02-23 23:05 - 00000000 ____D C:\Windows\system32\CommonApplicationData% 2016-02-23 23:03 - 2016-02-24 13:38 - 00000000 ____D C:\ProgramData\OPC Foundation 2016-02-23 23:03 - 2016-02-23 23:03 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Famic Technologies 2016-02-23 23:03 - 2016-02-23 23:03 - 00000000 ____D C:\ProgramData\Famic Technologies 2016-02-23 23:02 - 2016-02-23 23:02 - 00000000 ____D C:\Users\Xyz\Documents\Downloaded Installations 2016-02-23 23:02 - 2009-09-17 07:05 - 00145448 _____ (SafeNet, Inc.) C:\Windows\system32\Drivers\sentinel64.sys 2016-02-23 23:01 - 2016-02-23 23:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services 2016-02-23 23:01 - 2016-02-23 23:01 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2016-02-23 23:01 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2016-02-23 23:01 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-02-23 23:01 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2016-02-23 23:01 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-02-23 23:01 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2016-02-23 23:01 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-02-23 21:37 - 2016-02-23 22:30 - 1189672960 _____ C:\Users\Xyz\Downloads\-Getintopc.com-Automation_Studio_6.0.iso 2016-02-23 21:22 - 2016-02-23 21:22 - 00098304 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny (1).prx 2016-02-23 21:22 - 2016-02-23 21:22 - 00030720 _____ C:\Users\Xyz\Downloads\3410_ISO-A4-Laboratorium.prx 2016-02-23 21:03 - 2016-02-23 21:04 - 00000000 ____D C:\Users\Xyz\Downloads\AE PART 2016-02-23 15:51 - 2016-02-23 15:51 - 00000000 ____D C:\ProgramData\RedGiant 2016-02-23 14:20 - 2016-02-23 14:22 - 33384375 _____ C:\Users\Xyz\Downloads\video.flv 2016-02-23 13:45 - 2016-02-23 13:45 - 00000000 ____D C:\ProgramData\REVisionEffects 2016-02-23 13:45 - 2016-02-23 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REVisionEffects 2016-02-23 13:44 - 2016-02-23 13:44 - 09429902 _____ (RE:Vision Effects ) C:\Users\Xyz\Downloads\-Getintopc.com-Twixtor_AE6.04_CE_Install.exe 2016-02-23 12:49 - 2016-02-23 12:49 - 00001857 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2016-02-23 12:49 - 2016-02-23 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2016-02-23 12:48 - 2016-02-23 12:49 - 00000000 ____D C:\Program Files (x86)\QuickTime 2016-02-23 12:48 - 2016-02-23 12:48 - 00000000 ____D C:\ProgramData\Apple Computer 2016-02-23 12:46 - 2016-02-23 12:47 - 41896256 _____ (Apple Inc.) C:\Users\Xyz\Downloads\QuickTimeInstaller.exe 2016-02-23 12:46 - 2016-02-23 12:47 - 01012720 _____ (DivX, LLC) C:\Users\Xyz\Downloads\DivXInstaller.exe 2016-02-23 12:10 - 2016-02-23 12:10 - 00000000 ____D C:\Users\Xyz\Downloads\Aetuts_Project_Files_Shooting_for_Twixtor 2016-02-23 12:06 - 2016-02-23 12:08 - 77977861 _____ C:\Users\Xyz\Downloads\Aetuts_Project_Files_Shooting_for_Twixtor.zip 2016-02-22 23:33 - 2016-02-22 23:34 - 00000000 ____D C:\ProgramData\com.madebysource.subtlepatterns 2016-02-22 23:30 - 2016-02-22 23:32 - 30314784 _____ C:\Users\Xyz\Downloads\subtlepatterns-1.4.2.exe 2016-02-22 23:26 - 2016-02-27 14:23 - 00000000 ____D C:\Users\Xyz\AppData\Local\CrashDumps 2016-02-22 23:21 - 2016-02-22 23:21 - 00555746 _____ C:\Users\Xyz\Downloads\countdown.aep 2016-02-22 21:52 - 2016-02-22 21:52 - 00452864 _____ C:\Users\Xyz\Downloads\SureTarget.zip 2016-02-22 21:48 - 2016-02-22 21:48 - 00318151 _____ C:\Users\Xyz\Downloads\VCColorVibrance_1.0.6.zip 2016-02-22 21:01 - 2016-02-22 21:01 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk 2016-02-22 20:58 - 2016-02-22 20:58 - 00001348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk 2016-02-22 20:57 - 2016-02-22 20:57 - 00001558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2016-02-22 20:34 - 2016-02-22 20:34 - 00000000 ____D C:\Users\Xyz\Downloads\After effects 2015 2016-02-22 13:47 - 2016-02-23 12:10 - 00000000 ____D C:\Users\Xyz\Documents\Cards 2016-02-22 13:46 - 2016-03-11 12:28 - 00023040 ___SH C:\Users\Xyz\Documents\Thumbs.db 2016-02-22 13:45 - 2016-02-22 13:45 - 00001640 _____ C:\Users\Xyz\AppData\Local\recently-used.xbel 2016-02-22 13:40 - 2016-02-22 13:40 - 00000000 ____D C:\Users\Xyz\Downloads\MegaCards_Beginners_v1.03 2016-02-22 13:38 - 2016-02-22 13:39 - 14516562 _____ C:\Users\Xyz\Downloads\MegaCards_Beginners_v1.03.zip 2016-02-22 13:07 - 2016-02-22 13:07 - 00000000 ____D C:\Users\Xyz\AppData\Local\Foxit Reader 2016-02-22 11:36 - 2016-02-22 11:36 - 00001915 _____ C:\Users\Xyz\Downloads\plca_cert (1).crt 2016-02-22 11:18 - 2016-02-22 11:18 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2016-02-22 11:12 - 2016-02-22 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2016-02-22 11:11 - 2016-02-22 11:11 - 28140712 _____ (Sony Mobile Communications ) C:\Users\Xyz\Downloads\Sony PC Companion_Web.exe 2016-02-22 11:11 - 2016-02-22 11:11 - 00000000 ____D C:\ProgramData\Sony 2016-02-22 11:11 - 2016-02-22 11:11 - 00000000 ____D C:\Program Files (x86)\Sony 2016-02-22 11:00 - 2016-02-22 11:02 - 159456941 _____ C:\Users\Xyz\Downloads\11.3.A.0.47.tar.bz2 2016-02-22 10:32 - 2016-02-22 10:32 - 00001367 _____ C:\Users\Public\Desktop\Foxit Reader.lnk 2016-02-22 10:32 - 2016-02-22 10:32 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Foxit AgentInformation 2016-02-22 10:32 - 2016-02-22 10:32 - 00000000 ____D C:\Users\Public\Foxit Software 2016-02-22 10:30 - 2016-02-22 10:30 - 00000089 _____ C:\Users\Public\Documents\pre_fileassoc.tmp 2016-02-22 10:18 - 2016-02-22 10:29 - 43048592 _____ (Foxit Software Inc. ) C:\Users\Xyz\Downloads\FoxitReader73_enu_Setup_Prom.exe 2016-02-22 10:15 - 2016-02-22 10:15 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Aspell 2016-02-22 10:14 - 2016-02-22 10:43 - 00069443 _____ C:\Users\Xyz\Desktop\5371_ME,III,r,A3.pdf 2016-02-22 10:12 - 2016-02-22 10:12 - 00116624 _____ C:\Users\Xyz\Downloads\Activator (1).exe 2016-02-22 10:11 - 2016-02-22 10:12 - 24458720 _____ (Foxit Corporation ) C:\Users\Xyz\Downloads\FoxitAdvancedPDFEditor305_enu_Setup (1).exe 2016-02-22 10:11 - 2016-02-22 10:11 - 00000162 _____ C:\Users\Xyz\Downloads\Insyalacja (1).txt 2016-02-21 23:58 - 2016-02-21 23:58 - 00001915 _____ C:\Users\Xyz\Downloads\plca_cert.crt 2016-02-21 16:00 - 2016-02-21 16:00 - 00098304 _____ C:\Users\Xyz\Downloads\3413_ISO-A4-Laboratorium-L2-ukl-sekwencyjny.prx ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-03-20 19:04 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf 2016-03-20 19:01 - 2015-10-09 21:17 - 00000000 __RDO C:\Users\Xyz\SkyDrive 2016-03-20 18:58 - 2015-10-09 21:21 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1744513230-2656635619-383314694-1001 2016-03-20 18:53 - 2015-10-09 22:16 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-20 18:31 - 2015-10-09 22:16 - 00000916 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-20 18:25 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-20 18:24 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2016-03-20 18:18 - 2015-11-10 21:36 - 00000000 ____D C:\Program Files (x86)\Steam 2016-03-20 17:56 - 2016-02-05 11:22 - 00000000 ____D C:\Windows\Minidump 2016-03-20 17:56 - 2015-10-09 21:11 - 00000000 ____D C:\Users\Xyz 2016-03-20 17:55 - 2016-02-05 11:22 - 1206895131 _____ C:\Windows\MEMORY.DMP 2016-03-20 17:54 - 2015-10-14 19:40 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Skype 2016-03-20 17:30 - 2015-11-24 18:09 - 00814560 _____ C:\Windows\system32\perfh015.dat 2016-03-20 17:30 - 2015-11-24 18:09 - 00166422 _____ C:\Windows\system32\perfc015.dat 2016-03-20 17:30 - 2015-10-09 21:01 - 02738400 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-20 15:19 - 2015-10-17 09:57 - 00463360 ___SH C:\Users\Xyz\Desktop\Thumbs.db 2016-03-20 11:13 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache 2016-03-20 09:52 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp 2016-03-19 14:14 - 2015-10-10 20:13 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\AIMP3 2016-03-18 21:07 - 2015-11-24 18:07 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2016-03-18 21:07 - 2013-08-22 20:11 - 00000000 ____D C:\Program Files\Windows Journal 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\SysWOW64\winrm 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\SysWOW64\WCN 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\system32\winrm 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\system32\WCN 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\system32\slmgr 2016-03-18 21:07 - 2013-08-22 20:09 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ___SD C:\Windows\system32\dsc 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\MUI 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Com 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\MUI 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\migwiz 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Com 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\PolicyDefinitions 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\IME 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\FileManager 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2016-03-18 21:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\oobe 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\Dism 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Sysprep 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\oobe 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Dism 2016-03-18 21:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\servicing 2016-03-17 22:49 - 2015-10-14 19:18 - 01209344 ___SH C:\Users\Xyz\Downloads\Thumbs.db 2016-03-14 22:33 - 2015-10-09 22:18 - 00002221 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-14 20:26 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness 2016-03-13 18:40 - 2015-10-13 14:09 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\BitTorrent 2016-03-12 23:19 - 2015-10-17 09:15 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\vlc 2016-03-12 22:05 - 2015-10-10 19:08 - 00000034 _____ C:\Users\Xyz\AppData\Roaming\AdobeWLCMCache.dat 2016-03-12 21:14 - 2015-10-16 21:03 - 00000000 ____D C:\Windows\system32\appmgmt 2016-03-11 17:00 - 2015-10-10 17:22 - 00000000 ____D C:\Users\Xyz\AppData\Local\Adobe 2016-03-11 16:01 - 2015-03-13 10:12 - 00000000 ____D C:\Users\Xyz\Documents\AI Projects 2016-03-10 23:54 - 2015-10-10 14:36 - 00000000 ____D C:\Users\Xyz\Desktop\Guides and links 2016-03-09 14:53 - 2013-08-22 15:44 - 05196288 _____ C:\Windows\system32\FNTCACHE.DAT 2016-03-08 21:17 - 2015-10-09 22:25 - 00000000 ____D C:\Windows\system32\MRT 2016-03-08 21:11 - 2015-10-09 22:25 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-03-08 20:50 - 2015-12-09 11:40 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-03-08 20:50 - 2015-12-09 11:40 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-03-08 20:50 - 2015-12-09 11:40 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-03-08 08:00 - 2013-08-22 16:38 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-03-08 08:00 - 2013-08-22 16:38 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-03-07 13:58 - 2015-11-01 21:50 - 00000000 ____D C:\Users\Xyz\Documents\The Witcher 3 2016-02-29 20:53 - 2015-10-10 19:05 - 00000000 ____D C:\ProgramData\Package Cache 2016-02-28 23:12 - 2015-10-09 21:41 - 00000000 ____D C:\ProgramData\NVIDIA 2016-02-28 22:49 - 2016-01-28 21:10 - 00000000 ____D C:\Users\Xyz\AppData\Local\NVIDIA Corporation 2016-02-28 22:49 - 2015-10-09 21:39 - 00000000 ____D C:\Users\Xyz\AppData\Local\NVIDIA 2016-02-28 22:49 - 2015-10-09 21:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-02-28 22:49 - 2015-10-09 21:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-02-28 22:49 - 2015-10-09 21:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-02-28 21:00 - 2015-02-03 16:46 - 00000000 ____D C:\Users\Xyz\Documents\AE Projects 2016-02-24 13:40 - 2015-10-09 21:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-24 13:38 - 2015-10-29 13:21 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-02-23 23:00 - 2015-11-12 09:07 - 00000000 ____D C:\Program Files (x86)\MSECache 2016-02-23 23:00 - 2015-10-17 09:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-02-23 12:10 - 2016-01-14 14:28 - 00000000 ____D C:\Users\Xyz\Downloads\ASPR 2016-02-23 11:29 - 2016-01-25 20:33 - 00000000 ____D C:\Users\Xyz\Desktop\napedy 2016-02-22 23:33 - 2015-10-09 21:16 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Adobe 2016-02-22 21:02 - 2015-10-30 12:53 - 00000000 ____D C:\Users\Xyz\Documents\Adobe 2016-02-22 21:01 - 2015-10-10 17:33 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2016-02-22 20:58 - 2015-10-10 18:34 - 00000000 ____D C:\Program Files\Adobe 2016-02-22 20:57 - 2015-10-10 18:34 - 00000000 ____D C:\Program Files\Common Files\Adobe 2016-02-22 13:54 - 2015-11-26 11:58 - 00000000 ____D C:\Users\Xyz\.gimp-2.8 2016-02-22 13:45 - 2015-11-26 12:07 - 00000000 ____D C:\Users\Xyz\AppData\Local\gtk-2.0 2016-02-22 13:41 - 2015-11-06 18:20 - 00000000 ____D C:\Users\Xyz\Downloads\AE App 2016-02-22 13:41 - 2015-10-22 16:28 - 00000000 ____D C:\Users\Xyz\Downloads\Labview 2016-02-22 10:33 - 2015-11-26 12:32 - 00000000 ____D C:\Users\Xyz\AppData\Roaming\Foxit Software 2016-02-22 10:32 - 2015-11-26 11:53 - 00000000 ____D C:\Program Files (x86)\Foxit Software 2016-02-22 10:12 - 2015-11-26 11:53 - 00001412 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Advanced PDF Editor.lnk 2016-02-22 10:12 - 2015-11-26 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Advanced PDF Editor ==================== Files in the root of some directories ======= 2016-02-16 20:27 - 2016-02-16 20:27 - 0000635 _____ () C:\Program Files (x86)\Blacklight Retribution_enUpdaterLog.txt 2015-10-10 19:08 - 2016-03-12 22:05 - 0000034 _____ () C:\Users\Xyz\AppData\Roaming\AdobeWLCMCache.dat 2016-02-22 13:45 - 2016-02-22 13:45 - 0001640 _____ () C:\Users\Xyz\AppData\Local\recently-used.xbel 2015-10-10 19:34 - 2015-10-10 19:34 - 33293312 _____ () C:\Users\Xyz\AppData\Local\TempCOLOR_VALUE_I_DIV_J 2015-10-10 19:34 - 2015-10-10 19:34 - 0131072 _____ () C:\Users\Xyz\AppData\Local\TempCOLOR_VALUE_I_MULT_J 2015-10-10 19:34 - 2015-10-10 19:34 - 0003072 _____ () C:\Users\Xyz\AppData\Local\TempRGBTABLE 2015-10-09 21:48 - 2015-10-09 21:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Some files in TEMP: ==================== C:\Users\Xyz\AppData\Local\Temp\imdz1402.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-03-20 11:04 ==================== End of FRST.txt ============================