Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 19-06-2016 01
Uruchomiony przez katar (administrator)  MG (19-06-2016 21:37:01)
Uruchomiony z C:\Users\katar\Downloads
Załadowane profile: katar (Dostępne profile: katar)
Platform: Microsoft Windows 10 Home Wersja 1511 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Datpol) C:\Program Files\SpyShelter Free Anti-keylogger\SpyShelterSrv.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_028821c569ae5894\stacsv.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(NoVirusThanks Company Srl) C:\Program Files\NoVirusThanks\EXE Radar Pro\ERPSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_028821c569ae5894\AEstSrv.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Károly Pados) C:\Program Files\TinyWall\TinyWall.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NoVirusThanks Company Srl) C:\Program Files\NoVirusThanks\EXE Radar Pro\EXERadar.exe
(Datpol) C:\Program Files\SpyShelter Free Anti-keylogger\SpyShelter.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Károly Pados) C:\Program Files\TinyWall\TinyWall.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11602.1.26.0_x86__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Redefine.ipla_3.5.3.0_x86__wezn46m95z9ge\ipla 10.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.526.11220.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.BingWeather_4.9.76.0_x86__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
() C:\Program Files\WindowsApps\Microsoft.BingNews_4.9.76.0_x86__8wekyb3d8bbwe\Microsoft.Msn.News.exe
(Microsoft Corporation) C:\Windows\SystemApps\WindowsFeedback_cw5n1h2txyewy\FeedbackApp.Windows.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\TrayNotify.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495708 2010-02-26] (IDT, Inc.)
HKLM\...\Run: [TinyWall Controller] => C:\Program Files\TinyWall\TinyWall.exe [698296 2016-03-10] (Károly Pados)
HKU\S-1-5-21-2128185018-83059525-1353127512-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [644240 2016-02-26] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2128185018-83059525-1353127512-1001\...\MountPoints2: {302aaafe-33e8-11e6-9d27-0023ae283989} - "F:\autorun.exe" 
HKU\S-1-5-21-2128185018-83059525-1353127512-1001\...\MountPoints2: {302aac11-33e8-11e6-9d27-0023ae283989} - "F:\autorun.exe" 
HKU\S-1-5-21-2128185018-83059525-1353127512-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [515584 2015-10-30] (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{53172b95-87dd-4d85-a781-dd5ef23174a7}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================

FireFox:
========
FF ProfilePath: C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438
FF Homepage: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-06-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-18] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Extension: Greasemonkey - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-06-12]
FF Extension: DownThemAll! - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2016-06-12]
FF Extension: PajacykXPI - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{6E21139C-F48B-11DA-B59C-B582C6649067}.xpi [2016-06-12]
FF Extension: SmoothWheel (mozdev.org) - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}.xpi [2016-06-12]
FF Extension: Flashblock - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2016-06-12]
FF Extension: MinimizeToTray revived (MinTrayR) - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\mintrayr@tn123.ath.cx [2016-06-12]
FF Extension: HTTPS-Everywhere - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\https-everywhere@eff.org [2016-06-12]
FF Extension: Resurrect Pages - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\extensions\{0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}.xpi [2016-06-12]
FF Extension: checkCompatibility - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\check-compatibility@dactyl.googlecode.com.xpi [2016-06-12]
FF Extension: Ghostery - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\firefox@ghostery.com.xpi [2016-06-12]
FF Extension: ZenMate Security, Privacy & Unblock VPN - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\firefox@zenmate.com.xpi [2016-06-12]
FF Extension: LavaFox V2 - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\info@djzig.com [2016-06-12]
FF Extension: I don't care about cookies - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2016-06-12]
FF Extension: Weather Forecast Global - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\jid1-pqwXAhIle2AJKr@jetpack.xpi [2016-06-18]
FF Extension: uBlock Origin - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\uBlock0@raymondhill.net.xpi [2016-06-14]
FF Extension: Configuration Mania - C:\Users\katar\AppData\Roaming\Mozilla\Firefox\Profiles\d5x65f7e.default-1465741239438\Extensions\{c4d362ec-1cff-4ca0-9031-99a8fad7995a}.xpi [2016-06-12]

Chrome: 
=======
CHR Profile: C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Turn Off the Lights) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2016-06-18]
CHR Extension: (Slinky Elegancki) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-06-19]
CHR Extension: (uBlock Origin) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-06-18]
CHR Extension: (Hide Most Visited Pages Reloaded) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhphmpoekpoecdbjeionimpiceigkeil [2016-06-18]
CHR Extension: (User-Agent Switcher for Google Chrome) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffhkkpnppgnfaobgihpdblnhmmbodake [2016-06-19]
CHR Extension: (I don't care about cookies) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2016-06-18]
CHR Extension: (HTTPS Everywhere) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2016-06-18]
CHR Extension: (Instant Translate: Translator and Dictionary) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2016-06-18]
CHR Extension: (Momentum) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2016-06-18]
CHR Extension: (Flashcontrol) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2016-06-18]
CHR Extension: (GetThemAll Video Downloader) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbkekaeindpfpcoldfckljplboolgkfm [2016-06-18]
CHR Extension: (SmoothScroll) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbokbjkabcmbfdlbddjidfmibcpneigj [2016-06-18]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-18]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2016-06-18]
CHR Extension: (Charytatywny Gest - pomóż innym!) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglafjhgkdmobmcefnjclnkapoonbhmn [2016-06-18]
CHR Extension: (One Window) - C:\Users\katar\AppData\Local\Google\Chrome\User Data\Default\Extensions\papnlnnbddhckngcblfljaelgceffobn [2016-06-18]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_028821c569ae5894\aestsrv.exe [81920 2009-03-03] (Andrea Electronics Corporation)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R2 ERPSvc; C:\Program Files\NoVirusThanks\EXE Radar Pro\ERPSvc.exe [1940304 2015-03-03] (NoVirusThanks Company Srl)
S3 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [396952 2016-03-09] ()
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [155336 2016-05-25] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [146576 2016-02-26] (Sandboxie Holdings, LLC)
R2 SpyShelterSrv; C:\Program Files\SpyShelter Free Anti-keylogger\SpyShelterSrv.exe [60968 2016-06-17] (Datpol)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_028821c569ae5894\STacSV.exe [229458 2010-02-26] (IDT, Inc.)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] ()
R2 TinyWall; C:\Program Files\TinyWall\TinyWall.exe [698296 2016-03-10] (Károly Pados)
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [396952 2016-03-09] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [614400 2016-05-28] (Microsoft Corporation) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\Windows\System32\drivers\athwn.sys [3205632 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2014-12-20] (Elaborate Bytes AG)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51752 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41512 2015-12-10] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15912 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [190504 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-06-19] (Malwarebytes)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [176784 2016-02-26] (Sandboxie Holdings, LLC)
R1 Spyshelter; C:\Program Files\SpyShelter Free Anti-keylogger\SpyShelter.sys [745512 2016-06-17] (SpyShelter)
R1 SpyshelterKb; C:\Program Files\SpyShelter Free Anti-keylogger\SpyshelterKb.sys [636968 2016-06-17] (SpyShelter)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
R3 yukonw8; C:\Windows\System32\drivers\yk63x86.sys [242688 2015-10-30] (Marvell)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2016-05-25] (Huawei Technologies Co., Ltd.)
U5 nvterp; C:\Windows\system32\drivers\nvterp.sys [19064 2015-03-02] (NoVirusThanks Company Srl)
U5 nvterpprotect; C:\Windows\system32\drivers\nvterpprotect.sys [13432 2015-01-14] (NoVirusThanks Company Srl)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-19 21:38 - 2016-06-19 21:38 - 00001477 ____C C:\Users\katar\Documents\MBAM.txt
2016-06-19 21:37 - 2016-06-19 21:38 - 00016165 ____C C:\Users\katar\Downloads\FRST.txt
2016-06-19 21:34 - 2016-06-19 21:37 - 00000000 ____D C:\FRST
2016-06-19 21:33 - 2016-06-19 21:33 - 01738240 ____C (Farbar) C:\Users\katar\Downloads\FRST.exe
2016-06-19 21:33 - 2016-06-19 21:33 - 00380928 ____C C:\Users\katar\Downloads\203y8t9j.exe
2016-06-18 11:52 - 2016-06-19 11:58 - 00001032 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-18 11:41 - 2016-06-18 11:46 - 00002296 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 11:38 - 2016-06-19 20:57 - 00001036 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-18 11:38 - 2016-06-18 11:40 - 00000000 ___DC C:\Program Files\Google
2016-06-18 11:37 - 2016-06-18 12:50 - 00000000 ___DC C:\Users\katar\AppData\Local\Google
2016-06-17 21:49 - 2016-06-17 21:49 - 00193648 ____C C:\Windows\system32\FNTCACHE.DAT
2016-06-17 19:15 - 2016-06-17 19:15 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Ashampoo
2016-06-17 19:14 - 2016-06-17 19:15 - 00000000 ___DC C:\Users\katar\AppData\Local\ashampoo
2016-06-17 19:14 - 2016-06-17 19:14 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-06-17 19:13 - 2016-06-17 19:14 - 00000000 ___DC C:\ProgramData\Ashampoo
2016-06-17 19:13 - 2016-06-17 19:13 - 00000000 ___DC C:\Program Files\Ashampoo
2016-06-17 16:24 - 2016-06-17 16:24 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyShelter
2016-06-16 23:44 - 2016-06-16 23:44 - 00000000 ___DC C:\Users\katar\Documents\Nagrania dźwiękowe
2016-06-16 23:13 - 2016-06-16 23:15 - 00000000 ___DC C:\Users\katar\AppData\Local\PackageStaging
2016-06-16 23:12 - 2016-06-16 23:12 - 00000000 __RDC C:\Users\katar\3D Objects
2016-06-16 22:43 - 2016-06-16 22:43 - 00000000 ___DC C:\Users\katar\Tracing
2016-06-16 22:42 - 2016-06-16 22:42 - 00000000 __RDC C:\Program Files\Skype
2016-06-16 22:42 - 2016-06-16 22:42 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-06-16 22:42 - 2016-06-16 22:42 - 00000000 ___DC C:\Program Files\Common Files\Skype
2016-06-16 22:26 - 2016-06-16 22:52 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Skype
2016-06-16 22:25 - 2016-06-16 22:43 - 00000000 ___DC C:\ProgramData\Skype
2016-06-16 20:42 - 2016-06-16 21:02 - 00000000 ___DC C:\Users\katar\Downloads\Huawei
2016-06-16 20:02 - 2016-06-16 20:02 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2016-06-16 20:02 - 2016-06-16 20:02 - 00000000 ___DC C:\ProgramData\HiSuiteOuc
2016-06-16 20:02 - 2016-06-16 20:02 - 00000000 ___DC C:\ProgramData\HandSetService
2016-06-16 20:01 - 2016-06-16 20:02 - 00000000 ___DC C:\Program Files\HiSuite
2016-06-16 20:01 - 2016-05-25 11:53 - 00249856 ____C (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbnet.sys
2016-06-16 20:01 - 2016-05-25 11:53 - 00195200 ____C (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys
2016-06-16 20:01 - 2016-05-25 11:53 - 00112512 ____C (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_cdcacm.sys
2016-06-16 20:01 - 2016-05-25 11:53 - 00102272 ____C (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys
2016-06-16 20:01 - 2016-05-25 11:53 - 00015360 ____C (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbccgpfilter.sys
2016-06-16 20:00 - 2016-06-16 20:00 - 00000000 ___DC C:\Users\katar\.android
2016-06-16 19:59 - 2016-06-16 19:59 - 00000000 ___DC C:\Users\katar\AppData\Local\CEF
2016-06-16 19:53 - 2016-06-16 19:53 - 00000000 ___HC C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-06-16 19:27 - 2016-06-16 19:27 - 00000000 ___DC C:\ProgramData\NoVirusThanks
2016-06-16 19:27 - 2016-06-16 19:27 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoVirusThanks
2016-06-16 19:27 - 2016-06-16 19:27 - 00000000 ___DC C:\Program Files\NoVirusThanks
2016-06-16 19:27 - 2015-03-02 13:32 - 00019064 ____C (NoVirusThanks Company Srl) C:\Windows\system32\Drivers\nvterp.sys
2016-06-16 19:27 - 2015-01-14 01:09 - 00013432 ____C (NoVirusThanks Company Srl) C:\Windows\system32\Drivers\nvterpprotect.sys
2016-06-15 18:50 - 2016-06-15 18:55 - 00000000 ___DC C:\Users\katar\AppData\Roaming\TinyWall
2016-06-15 18:48 - 2016-06-19 18:52 - 00000000 ___DC C:\ProgramData\TinyWall
2016-06-15 18:48 - 2016-06-15 18:50 - 00000660 ____C C:\Windows\system32\InstallUtil.InstallLog
2016-06-15 18:48 - 2016-06-15 18:50 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TinyWall
2016-06-15 18:48 - 2016-06-15 18:50 - 00000000 ___DC C:\Program Files\TinyWall
2016-06-15 01:13 - 2016-06-15 01:13 - 00000000 ___DC C:\Windows\system32\SleepStudy
2016-06-14 18:55 - 2016-05-28 07:05 - 01232576 ____C (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-14 18:55 - 2016-05-28 07:05 - 00042688 ____C (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-14 18:55 - 2016-05-28 05:57 - 00546456 ____C (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-06-14 18:55 - 2016-05-28 05:57 - 00316256 ____C (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 18:55 - 2016-05-28 05:31 - 00091648 ____C (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2016-06-14 18:55 - 2016-05-28 05:31 - 00074752 ____C (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-06-14 18:55 - 2016-05-28 05:27 - 00050176 ____C (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-06-14 18:55 - 2016-05-28 05:23 - 00023552 ____C (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-06-14 18:55 - 2016-05-28 05:22 - 00087040 ____C (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-06-14 18:55 - 2016-05-28 05:22 - 00059904 ____C (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-06-14 18:55 - 2016-05-28 05:20 - 00054784 ____C (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-06-14 18:55 - 2016-05-28 05:18 - 00203264 ____C (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-06-14 18:55 - 2016-05-28 05:15 - 00349696 ____C (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-06-14 18:55 - 2016-05-28 05:12 - 00800768 ____C (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-06-14 18:55 - 2016-05-28 05:11 - 00784896 ____C (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-06-14 18:55 - 2016-05-28 05:11 - 00711680 ____C (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-06-14 18:55 - 2016-05-28 05:11 - 00612352 ____C (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-06-14 18:55 - 2016-05-28 05:08 - 06295552 ____C (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-06-14 18:55 - 2016-05-28 05:03 - 05205504 ____C (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-06-14 18:55 - 2016-05-28 05:03 - 01800704 ____C (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-06-14 18:55 - 2016-05-28 05:00 - 01707520 ____C (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-06-14 18:54 - 2016-05-28 07:05 - 00249536 ____C (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-14 18:54 - 2016-05-28 07:05 - 00081088 ____C (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-14 18:54 - 2016-05-28 06:25 - 05797216 ____C (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-06-14 18:54 - 2016-05-28 06:25 - 04268880 ____C (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-06-14 18:54 - 2016-05-28 06:25 - 00354656 ____C (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-06-14 18:54 - 2016-05-28 06:25 - 00354656 ____C (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-06-14 18:54 - 2016-05-28 06:23 - 00388384 ____C (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 18:54 - 2016-05-28 06:09 - 00501600 ____C (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-06-14 18:54 - 2016-05-28 06:07 - 02921880 ____C (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 18:54 - 2016-05-28 06:07 - 00957608 ____C (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-06-14 18:54 - 2016-05-28 06:07 - 00703840 ____C (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-06-14 18:54 - 2016-05-28 06:06 - 04074160 ____C (Microsoft Corporation) C:\Windows\explorer.exe
2016-06-14 18:54 - 2016-05-28 06:06 - 00613120 ____C (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 18:54 - 2016-05-28 06:06 - 00254656 ____C (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-06-14 18:54 - 2016-05-28 06:04 - 00139616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 18:54 - 2016-05-28 05:57 - 02195632 ____C (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-06-14 18:54 - 2016-05-28 05:57 - 01396592 ____C (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 18:54 - 2016-05-28 05:57 - 00521664 ____C (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-06-14 18:54 - 2016-05-28 05:31 - 00023552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsdport.sys
2016-06-14 18:54 - 2016-05-28 05:25 - 00037376 ____C (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 18:54 - 2016-05-28 05:24 - 00093696 ____C (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-14 18:54 - 2016-05-28 05:22 - 00122368 ____C (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2016-06-14 18:54 - 2016-05-28 05:18 - 00132096 ____C (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2016-06-14 18:54 - 2016-05-28 05:17 - 09918976 ____C (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-14 18:54 - 2016-05-28 05:17 - 00144384 ____C (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-06-14 18:54 - 2016-05-28 05:16 - 19344384 ____C (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 18:54 - 2016-05-28 05:16 - 00442368 ____C (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2016-06-14 18:54 - 2016-05-28 05:15 - 00535040 ____C (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-06-14 18:54 - 2016-05-28 05:15 - 00274432 ____C (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-06-14 18:54 - 2016-05-28 05:14 - 18674176 ____C (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-06-14 18:54 - 2016-05-28 05:14 - 00846336 ____C (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-06-14 18:54 - 2016-05-28 05:14 - 00499712 ____C (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-06-14 18:54 - 2016-05-28 05:13 - 00604672 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-14 18:54 - 2016-05-28 05:13 - 00467456 ____C (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-06-14 18:54 - 2016-05-28 05:13 - 00393728 ____C (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-06-14 18:54 - 2016-05-28 05:12 - 00614400 ____C (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 18:54 - 2016-05-28 05:12 - 00521728 ____C (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-14 18:54 - 2016-05-28 05:11 - 01445888 ____C (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-06-14 18:54 - 2016-05-28 05:11 - 00890368 ____C (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-06-14 18:54 - 2016-05-28 05:11 - 00740352 ____C (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-06-14 18:54 - 2016-05-28 05:11 - 00687616 ____C (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 18:54 - 2016-05-28 05:11 - 00504320 ____C (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 18:54 - 2016-05-28 05:06 - 12128256 ____C (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 18:54 - 2016-05-28 05:06 - 03196928 ____C (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-06-14 18:54 - 2016-05-28 05:05 - 03664896 ____C (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 18:54 - 2016-05-28 05:04 - 00079360 ____C (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-06-14 18:54 - 2016-05-28 05:03 - 05323776 ____C (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-14 18:54 - 2016-05-28 05:03 - 02974208 ____C (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-06-14 18:54 - 2016-05-28 05:03 - 01185280 ____C (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-06-14 18:54 - 2016-05-28 05:02 - 02061824 ____C (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-06-14 18:54 - 2016-05-28 05:02 - 01896960 ____C (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-06-14 18:54 - 2016-05-28 05:01 - 02880512 ____C (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 18:54 - 2016-05-28 05:01 - 01799680 ____C (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-06-14 18:54 - 2016-05-28 05:01 - 01582080 ____C (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-06-14 18:54 - 2016-05-28 05:01 - 01500160 ____C (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 18:54 - 2016-05-28 05:01 - 01193984 ____C (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-14 18:54 - 2016-05-28 05:00 - 05660160 ____C (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-06-14 18:54 - 2016-05-28 05:00 - 01900032 ____C (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-06-14 18:54 - 2016-05-28 04:56 - 01075200 ____C (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-06-14 18:53 - 2016-05-28 07:05 - 00973504 ____C (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-14 18:53 - 2016-05-28 07:05 - 00440512 ____C (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-14 18:53 - 2016-05-28 06:25 - 00173920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-06-14 18:53 - 2016-05-28 06:25 - 00096096 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-06-14 18:53 - 2016-05-28 06:22 - 00317280 ____C (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 18:53 - 2016-05-28 06:18 - 00023776 ____C (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-06-14 18:53 - 2016-05-28 06:10 - 00136032 ____C (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe
2016-06-14 18:53 - 2016-05-28 06:09 - 00084832 ____C (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-06-14 18:53 - 2016-05-28 06:08 - 00260960 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-06-14 18:53 - 2016-05-28 06:08 - 00203104 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-06-14 18:53 - 2016-05-28 06:04 - 00505136 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 18:53 - 2016-05-28 06:04 - 00360480 ____C (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 18:53 - 2016-05-28 06:04 - 00111608 ____C (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-14 18:53 - 2016-05-28 06:04 - 00097096 ____C (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-06-14 18:53 - 2016-05-28 05:57 - 01714528 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-06-14 18:53 - 2016-05-28 05:57 - 00484192 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-06-14 18:53 - 2016-05-28 05:31 - 00088576 ____C (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-06-14 18:53 - 2016-05-28 05:25 - 00065024 ____C (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2016-06-14 18:53 - 2016-05-28 05:25 - 00016896 ____C (Microsoft Corporation) C:\Windows\system32\httpprxp.dll
2016-06-14 18:53 - 2016-05-28 05:24 - 00140800 ____C (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-06-14 18:53 - 2016-05-28 05:24 - 00053760 ____C (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-14 18:53 - 2016-05-28 05:22 - 00161280 ____C (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-06-14 18:53 - 2016-05-28 05:22 - 00116224 ____C (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-06-14 18:53 - 2016-05-28 05:20 - 00180736 ____C (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-06-14 18:53 - 2016-05-28 05:20 - 00104960 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\Ndu.sys
2016-06-14 18:53 - 2016-05-28 05:20 - 00074240 ____C (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-06-14 18:53 - 2016-05-28 05:20 - 00070656 ____C (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-06-14 18:53 - 2016-05-28 05:20 - 00057344 ____C (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-06-14 18:53 - 2016-05-28 05:19 - 00258560 ____C (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-06-14 18:53 - 2016-05-28 05:19 - 00114688 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-06-14 18:53 - 2016-05-28 05:19 - 00064000 ____C (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2016-06-14 18:53 - 2016-05-28 05:19 - 00063488 ____C (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-06-14 18:53 - 2016-05-28 05:18 - 00325120 ____C (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-06-14 18:53 - 2016-05-28 05:18 - 00211456 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 18:53 - 2016-05-28 05:18 - 00161792 ____C (Microsoft Corporation) C:\Windows\system32\BrokerLib.dll
2016-06-14 18:53 - 2016-05-28 05:17 - 00485888 ____C (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-06-14 18:53 - 2016-05-28 05:17 - 00415232 ____C (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-06-14 18:53 - 2016-05-28 05:17 - 00160768 ____C (Microsoft Corporation) C:\Windows\system32\GnssAdapter.dll
2016-06-14 18:53 - 2016-05-28 05:17 - 00142336 ____C (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-06-14 18:53 - 2016-05-28 05:17 - 00129024 ____C (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2016-06-14 18:53 - 2016-05-28 05:16 - 00464896 ____C (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-06-14 18:53 - 2016-05-28 05:16 - 00291328 ____C (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-14 18:53 - 2016-05-28 05:16 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-06-14 18:53 - 2016-05-28 05:15 - 00527872 ____C (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-06-14 18:53 - 2016-05-28 05:15 - 00334336 ____C (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-06-14 18:53 - 2016-05-28 05:15 - 00293888 ____C (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-06-14 18:53 - 2016-05-28 05:14 - 00309248 ____C (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-14 18:53 - 2016-05-28 05:14 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-06-14 18:53 - 2016-05-28 05:14 - 00219136 ____C (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-06-14 18:53 - 2016-05-28 05:14 - 00200192 ____C (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-06-14 18:53 - 2016-05-28 05:14 - 00133120 ____C (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-06-14 18:53 - 2016-05-28 05:13 - 00340480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-14 18:53 - 2016-05-28 05:12 - 00186880 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 18:53 - 2016-05-28 05:11 - 01152000 ____C (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-06-14 18:53 - 2016-05-28 05:11 - 00799744 ____C (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-06-14 18:53 - 2016-05-28 05:11 - 00453632 ____C (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-06-14 18:53 - 2016-05-28 05:09 - 00109056 ____C (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2016-06-14 18:53 - 2016-05-28 05:08 - 00783872 ____C (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-06-14 18:53 - 2016-05-28 05:04 - 00450560 ____C (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-06-14 18:53 - 2016-05-28 05:03 - 01733632 ____C (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-06-14 18:53 - 2016-05-28 05:03 - 00558080 ____C (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2016-06-14 18:53 - 2016-05-28 05:03 - 00359936 ____C (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-06-14 18:53 - 2016-05-28 05:02 - 00103424 ____C (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-06-14 18:53 - 2016-05-28 05:01 - 00141824 ____C (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-06-14 18:53 - 2016-05-28 05:00 - 02230272 ____C (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 18:53 - 2016-05-28 05:00 - 00151040 ____C (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-06-14 18:53 - 2016-05-28 04:54 - 00063488 ____C (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2016-06-13 19:44 - 2016-06-13 19:44 - 00000000 ___DC C:\Users\katar\Downloads\[6x08] Lektor PL. avi
2016-06-13 19:28 - 2016-06-13 19:28 - 685948096 ____C C:\Users\katar\Downloads\[6x08] Lektor PL. avi.rar
2016-06-13 00:25 - 2016-06-13 00:27 - 00000000 ___DC C:\Users\katar\Documents\HiSuite
2016-06-13 00:25 - 2016-05-25 11:53 - 01837296 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01009.dll
2016-06-13 00:25 - 2016-05-25 11:53 - 01461992 ____C (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-06-13 00:25 - 2016-05-25 11:53 - 01461992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01009.dll
2016-06-13 00:25 - 2016-05-25 11:53 - 00851176 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\winusbcoinstaller2.dll
2016-06-13 00:24 - 2016-06-16 20:03 - 00000000 ___DC C:\Users\katar\AppData\Local\Hisuite
2016-06-12 21:10 - 2016-06-12 21:10 - 00000000 ___DC C:\Windows\system32\XPSViewer
2016-06-12 21:10 - 2016-06-12 21:10 - 00000000 ___DC C:\Program Files\Reference Assemblies
2016-06-12 21:10 - 2016-06-12 21:10 - 00000000 ___DC C:\Program Files\MSBuild
2016-06-12 21:07 - 2015-10-23 17:47 - 00778936 ____C (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-06-12 21:07 - 2015-10-23 17:47 - 00103120 ____C (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-06-12 21:07 - 2015-10-23 17:47 - 00035480 ____C (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-06-12 20:41 - 2016-06-12 20:41 - 00001912 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivaZer.lnk
2016-06-12 20:41 - 2016-06-12 20:41 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivaZer
2016-06-12 20:40 - 2016-06-18 15:38 - 00000000 ___DC C:\Users\katar\AppData\Local\PrivaZer
2016-06-12 20:40 - 2016-06-12 20:41 - 00000000 ___DC C:\Program Files\PrivaZer
2016-06-12 20:40 - 2016-06-12 20:40 - 00000000 ___DC C:\ProgramData\privazer
2016-06-12 19:43 - 2016-06-12 19:43 - 00000000 ___DC C:\easeus_tb_cloud
2016-06-12 17:55 - 2016-06-16 20:41 - 00000000 ___DC C:\Users\katar\Downloads\Tapety
2016-06-12 17:46 - 2016-06-19 11:40 - 00000000 ___DC C:\Users\katar\Downloads\Progamy
2016-06-12 17:31 - 2010-02-26 02:03 - 00527360 ____C (IDT, Inc.) C:\Windows\system32\stapi32.dll
2016-06-12 17:30 - 2016-06-12 17:30 - 00000000 ___DC C:\Windows\system32\SRSLabs
2016-06-12 17:30 - 2010-02-26 02:03 - 12460124 ____C (IDT, Inc.) C:\Windows\system32\idtcpl.cpl
2016-06-12 17:30 - 2010-02-26 02:03 - 03350528 ____C (IDT, Inc.) C:\Windows\system32\stlang.dll
2016-06-12 17:30 - 2010-02-26 02:03 - 00536576 ____C (IDT, Inc.) C:\Windows\system32\idtmini1.exe
2016-06-12 17:30 - 2010-01-20 15:55 - 00524288 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo32.dll
2016-06-12 17:30 - 2010-01-12 02:01 - 00139776 _____ (Andrea Electronics Corporation) C:\Windows\system32\aestacap.dll
2016-06-12 17:30 - 2009-10-10 00:45 - 00380928 ____C (Andrea Electronics Corporation) C:\Windows\system32\aestecap.dll
2016-06-12 17:30 - 2009-05-13 03:26 - 00047104 ____C (Creative Technology Ltd.) C:\Windows\system32\ctppld.dll
2016-06-12 17:30 - 2009-03-03 01:57 - 00061440 _____ (Andrea Electronics Corporation) C:\Windows\system32\aestaren.dll
2016-06-12 17:30 - 2009-03-03 01:47 - 00086016 ____C (Andrea Electronics Corporation) C:\Windows\system32\AESTCom.dll
2016-06-12 17:29 - 2010-02-26 02:03 - 00945664 _____ (IDT, Inc.) C:\Windows\system32\stapo.dll
2016-06-12 17:29 - 2010-02-26 02:03 - 00423424 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt.sys
2016-06-12 17:29 - 2010-02-26 02:03 - 00405504 ____C (IDT, Inc.) C:\Windows\system32\stcplx.dll
2016-06-12 17:29 - 2010-02-26 02:03 - 00175616 ____C (IDT, Inc.) C:\Windows\system32\st326272.dll
2016-06-12 17:28 - 2016-06-12 17:31 - 00000000 ___DC C:\Program Files\IDT
2016-06-12 17:28 - 2016-06-12 17:28 - 00000000 __HDC C:\Program Files\InstallShield Installation Information
2016-06-12 16:27 - 2016-06-18 17:08 - 00000000 ___DC C:\Users\katar\AppData\Local\CrashDumps
2016-06-12 16:26 - 2016-06-16 22:19 - 00000000 ___DC C:\ProgramData\Napisy24
2016-06-12 16:26 - 2016-06-12 16:26 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Napisy24
2016-06-12 16:26 - 2016-06-12 16:26 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer
2016-06-12 16:26 - 2016-06-12 16:26 - 00000000 ___DC C:\Program Files\Napisy24
2016-06-12 16:25 - 2013-04-05 21:26 - 02106368 ____C C:\Windows\system32\ac3filter.ax
2016-06-12 16:25 - 2013-04-05 21:26 - 00276992 ____C (IntelleSoft) C:\Windows\system32\BugTrap.dll
2016-06-12 16:25 - 2011-06-02 02:10 - 00644608 ____C C:\Windows\system32\xvidcore.dll
2016-06-12 16:25 - 2007-10-07 15:36 - 00258048 ____C C:\Windows\system32\libFLAC.dll
2016-06-12 16:24 - 2016-06-12 16:58 - 00000000 ___DC C:\ProgramData\ALLPlayer
2016-06-12 16:24 - 2016-06-12 16:26 - 00000000 ___DC C:\Program Files\ALLPlayer
2016-06-12 16:05 - 2016-06-12 21:11 - 00000000 ___DC C:\Users\katar\AppData\Local\Deployment
2016-06-12 16:05 - 2016-06-12 16:05 - 00000000 ___DC C:\Users\katar\AppData\Local\Apps\2.0
2016-06-12 15:57 - 2016-06-12 15:57 - 00000000 ___DC C:\Dell
2016-06-12 15:42 - 2016-06-12 15:42 - 00000000 ___DC C:\ProgramData\IntelDLM
2016-06-12 15:40 - 2016-06-12 15:40 - 00000000 ___DC C:\Users\katar\AppData\Local\Intel
2016-06-12 15:39 - 2016-06-12 15:39 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2016-06-12 15:38 - 2016-06-12 15:56 - 00000000 ___DC C:\ProgramData\Package Cache
2016-06-12 15:38 - 2016-06-12 15:56 - 00000000 ___DC C:\Program Files\Intel
2016-06-12 15:38 - 2016-06-12 15:38 - 00000000 ___DC C:\ProgramData\Intel
2016-06-12 15:38 - 2016-06-12 15:38 - 00000000 ___DC C:\Program Files\Intel Driver Update Utility
2016-06-12 15:25 - 2016-06-17 16:25 - 00000000 ____D C:\Program Files\SpyShelter Free Anti-keylogger
2016-06-12 15:25 - 2016-06-15 18:56 - 00000000 ____D C:\Users\katar\AppData\Roaming\SpyShelter
2016-06-12 15:25 - 2016-06-13 11:47 - 00045608 ____C (Datpol) C:\Windows\system32\SpyShelterShellExt.dll
2016-06-12 15:25 - 2015-03-13 21:16 - 00053000 ____C C:\Windows\system32\Osklauncher.exe
2016-06-12 15:25 - 2009-06-24 15:34 - 00054784 ____C C:\Windows\system32\inject_logon_dll.dll
2016-06-12 14:41 - 2016-06-19 11:06 - 00000000 ___DC C:\Moje kopie zapasowe
2016-06-12 14:40 - 2016-06-12 14:40 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup Free 9.1
2016-06-12 14:40 - 2015-12-10 06:10 - 00190504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\EuFdDisk.sys
2016-06-12 14:40 - 2015-12-10 06:10 - 00051752 ____C (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\eubakup.sys
2016-06-12 14:40 - 2015-12-10 06:10 - 00041512 ____C C:\Windows\system32\Drivers\EUBKMON.sys
2016-06-12 14:40 - 2015-12-10 06:10 - 00015912 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\eudskacs.sys
2016-06-12 14:36 - 2015-12-10 06:14 - 00019496 ____C (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2016-06-12 14:35 - 2016-06-12 14:35 - 00000000 ___DC C:\Program Files\EaseUS
2016-06-12 14:32 - 2016-06-19 21:15 - 00170200 ____C (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-12 14:32 - 2016-06-12 14:32 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-12 14:32 - 2016-06-12 14:32 - 00000000 ___DC C:\ProgramData\Malwarebytes
2016-06-12 14:32 - 2016-06-12 14:32 - 00000000 ___DC C:\Program Files\Malwarebytes Anti-Malware
2016-06-12 14:32 - 2016-03-10 14:09 - 00053120 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-12 14:32 - 2016-03-10 14:08 - 00126336 ____C (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-12 14:32 - 2016-03-10 14:08 - 00024448 ____C (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-12 14:26 - 2016-06-12 14:26 - 00000000 __HDC C:\OneDriveTemp
2016-06-12 14:22 - 2016-06-12 14:22 - 00000000 ___DC C:\Users\katar\AppData\LocalLow\Adobe
2016-06-12 14:07 - 2016-06-12 14:07 - 00025702 ____C C:\Users\katar\Documents\cc_20160612_140726.reg
2016-06-12 14:05 - 2016-06-12 14:05 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2016-06-12 14:04 - 2016-06-12 14:04 - 00000000 ___DC C:\Program Files\Elaborate Bytes
2016-06-12 14:03 - 2016-06-17 16:45 - 00000000 ___DC C:\ProgramData\Malwarebytes Anti-Exploit
2016-06-12 14:03 - 2016-06-12 14:03 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-06-12 14:03 - 2016-06-12 14:03 - 00000000 ___DC C:\Program Files\7-Zip
2016-06-12 14:00 - 2016-06-12 21:06 - 00000000 ___DC C:\Windows\pss
2016-06-12 13:55 - 2016-06-12 13:55 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-06-12 13:55 - 2016-06-12 13:55 - 00000000 ___DC C:\Program Files\CCleaner
2016-06-12 13:52 - 2016-06-12 14:43 - 00002457 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-12 13:52 - 2016-06-12 13:52 - 00000000 ___DC C:\Program Files\Common Files\Adobe
2016-06-12 13:52 - 2016-06-12 13:52 - 00000000 ___DC C:\Program Files\Adobe
2016-06-12 13:51 - 2016-06-12 14:37 - 00000000 ___DC C:\ProgramData\Adobe
2016-06-12 13:36 - 2016-06-12 13:36 - 00000000 ___HC C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-06-12 13:30 - 2016-06-12 13:30 - 00000000 __RDC C:\Sandbox
2016-06-12 13:26 - 2016-06-16 20:39 - 00002836 ____C C:\Windows\Sandboxie.ini
2016-06-12 13:23 - 2016-06-12 13:23 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2016-06-12 13:23 - 2016-06-12 13:23 - 00000000 ___DC C:\Program Files\Sandboxie
2016-06-12 13:11 - 2016-06-12 13:11 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-06-12 13:11 - 2016-06-12 13:11 - 00000000 ___DC C:\Program Files\Microsoft Silverlight
2016-06-12 13:07 - 2016-06-12 13:07 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Macromedia
2016-06-12 13:07 - 2016-06-12 13:07 - 00000000 ___DC C:\Users\katar\AppData\Local\Macromedia
2016-06-12 13:02 - 2016-06-12 14:22 - 00000000 ___DC C:\Users\katar\AppData\Local\Adobe
2016-06-12 13:02 - 2016-06-12 13:11 - 00000000 ___DC C:\Users\katar\AppData\Local\Thunderbird
2016-06-12 13:02 - 2016-06-12 13:02 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Thunderbird
2016-06-12 12:16 - 2016-06-14 21:50 - 00000000 ___DC C:\Windows\system32\MRT
2016-06-12 12:15 - 2016-06-14 21:45 - 139785240 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-12 12:15 - 2016-06-12 12:21 - 00000000 ___DC C:\Users\katar\AppData\Local\Mozilla
2016-06-12 12:15 - 2016-06-12 12:15 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Mozilla
2016-06-12 12:14 - 2016-06-18 15:15 - 00000000 ___DC C:\Program Files\Mozilla Maintenance Service
2016-06-12 12:13 - 2016-04-23 07:06 - 00576192 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-06-12 12:13 - 2016-04-23 07:06 - 00149696 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-06-12 12:13 - 2016-04-23 06:28 - 01561392 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-06-12 12:13 - 2016-04-23 06:28 - 01541792 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-06-12 12:13 - 2016-04-23 06:09 - 21123320 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-06-12 12:13 - 2016-04-23 06:09 - 05240960 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-06-12 12:13 - 2016-04-23 05:31 - 13018112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-06-12 12:13 - 2016-04-23 05:21 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-06-12 12:13 - 2016-04-23 05:16 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-06-12 12:13 - 2016-04-23 05:15 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-12 12:13 - 2016-04-23 05:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-06-12 12:13 - 2016-04-23 05:13 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-06-12 12:13 - 2016-04-23 05:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-06-12 12:13 - 2016-04-23 05:04 - 04759040 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-06-12 12:13 - 2016-04-23 05:03 - 02000896 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-06-12 12:13 - 2016-04-23 05:03 - 00754176 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-06-12 12:13 - 2016-04-02 04:20 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-06-12 12:13 - 2016-03-29 10:37 - 01862008 _____ C:\Windows\system32\CoreUIComponents.dll
2016-06-12 12:13 - 2016-03-29 10:36 - 01820512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-06-12 12:13 - 2016-03-29 10:13 - 00986976 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-06-12 12:13 - 2016-03-29 08:46 - 01861984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-06-12 12:13 - 2016-03-29 08:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-06-12 12:13 - 2016-03-29 08:12 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-12 12:13 - 2016-03-29 07:53 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-06-12 12:13 - 2016-03-29 07:41 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-06-12 12:13 - 2016-03-29 07:32 - 01588224 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-06-12 12:13 - 2016-03-29 07:31 - 01117184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-06-12 12:13 - 2016-03-29 07:30 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-06-12 12:13 - 2016-03-29 07:28 - 01944576 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-06-12 12:13 - 2016-03-29 07:28 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-06-12 12:13 - 2016-03-29 07:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-06-12 12:13 - 2016-03-29 07:14 - 01072128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-06-12 12:13 - 2016-03-29 07:10 - 03671040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-12 12:13 - 2016-03-29 07:06 - 00813056 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-06-12 12:13 - 2016-03-29 06:49 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-12 12:13 - 2016-03-29 06:38 - 02798080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-06-12 12:13 - 2016-03-29 06:36 - 02722816 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-06-12 12:13 - 2016-03-29 06:25 - 00712704 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-06-12 12:12 - 2016-05-06 06:20 - 00077664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdport.sys
2016-06-12 12:12 - 2016-05-06 05:23 - 00498176 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-06-12 12:12 - 2016-05-06 05:13 - 00272384 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-06-12 12:12 - 2016-05-06 05:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2016-06-12 12:12 - 2016-05-06 05:05 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-06-12 12:12 - 2016-05-06 05:05 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-06-12 12:12 - 2016-04-23 06:28 - 00550240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-06-12 12:12 - 2016-04-23 06:28 - 00545432 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-06-12 12:12 - 2016-04-23 06:28 - 00278368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-06-12 12:12 - 2016-04-23 06:28 - 00083808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-06-12 12:12 - 2016-04-23 06:26 - 00792328 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-12 12:12 - 2016-04-23 06:14 - 00310112 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-06-12 12:12 - 2016-04-23 06:13 - 00306832 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-06-12 12:12 - 2016-04-23 06:12 - 00925064 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-06-12 12:12 - 2016-04-23 06:12 - 00451928 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-06-12 12:12 - 2016-04-23 06:12 - 00104800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufxsynopsys.sys
2016-06-12 12:12 - 2016-04-23 06:09 - 00569744 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-06-12 12:12 - 2016-04-23 06:09 - 00465760 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-06-12 12:12 - 2016-04-23 06:07 - 01536088 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-06-12 12:12 - 2016-04-23 06:07 - 00192704 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-06-12 12:12 - 2016-04-23 06:07 - 00183904 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-06-12 12:12 - 2016-04-23 06:02 - 00188256 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-06-12 12:12 - 2016-04-23 06:01 - 00513368 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-06-12 12:12 - 2016-04-23 06:01 - 00336224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-06-12 12:12 - 2016-04-23 06:00 - 01522152 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-06-12 12:12 - 2016-04-23 06:00 - 01273720 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-06-12 12:12 - 2016-04-23 06:00 - 00453472 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2016-06-12 12:12 - 2016-04-23 06:00 - 00049504 _____ (Microsoft Corporation) C:\Windows\system32\dwminit.dll
2016-06-12 12:12 - 2016-04-23 05:55 - 00430432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-06-12 12:12 - 2016-04-23 05:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-06-12 12:12 - 2016-04-23 05:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2016-06-12 12:12 - 2016-04-23 05:29 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
2016-06-12 12:12 - 2016-04-23 05:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe
2016-06-12 12:12 - 2016-04-23 05:29 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-06-12 12:12 - 2016-04-23 05:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-06-12 12:12 - 2016-04-23 05:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-06-12 12:12 - 2016-04-23 05:27 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-06-12 12:12 - 2016-04-23 05:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-06-12 12:12 - 2016-04-23 05:25 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-06-12 12:12 - 2016-04-23 05:24 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-06-12 12:12 - 2016-04-23 05:24 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-06-12 12:12 - 2016-04-23 05:24 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filecrypt.sys
2016-06-12 12:12 - 2016-04-23 05:23 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2016-06-12 12:12 - 2016-04-23 05:23 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-06-12 12:12 - 2016-04-23 05:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-06-12 12:12 - 2016-04-23 05:21 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-06-12 12:12 - 2016-04-23 05:21 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-06-12 12:12 - 2016-04-23 05:20 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-06-12 12:12 - 2016-04-23 05:20 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-06-12 12:12 - 2016-04-23 05:20 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-06-12 12:12 - 2016-04-23 05:20 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-06-12 12:12 - 2016-04-23 05:20 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2016-06-12 12:12 - 2016-04-23 05:19 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-06-12 12:12 - 2016-04-23 05:19 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2016-06-12 12:12 - 2016-04-23 05:17 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-12 12:12 - 2016-04-23 05:17 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-06-12 12:12 - 2016-04-23 05:16 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-06-12 12:12 - 2016-04-23 05:15 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-06-12 12:12 - 2016-04-23 05:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-06-12 12:12 - 2016-04-23 05:14 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-12 12:12 - 2016-04-23 05:14 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-06-12 12:12 - 2016-04-23 05:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-06-12 12:12 - 2016-04-23 05:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-06-12 12:12 - 2016-04-23 05:13 - 01028608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-06-12 12:12 - 2016-04-23 05:13 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-06-12 12:12 - 2016-04-23 05:13 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-06-12 12:12 - 2016-04-23 05:13 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-06-12 12:12 - 2016-04-23 05:12 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-06-12 12:12 - 2016-04-23 05:11 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-06-12 12:12 - 2016-04-23 05:10 - 00639488 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-06-12 12:12 - 2016-04-23 05:03 - 02193408 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-06-12 12:12 - 2016-04-23 05:03 - 00704000 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-06-12 12:12 - 2016-04-23 05:03 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-06-12 12:12 - 2016-04-23 03:10 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-06-12 12:12 - 2016-04-18 23:30 - 00002186 _____ C:\Windows\system32\AppxProvisioning.xml
2016-06-12 12:12 - 2016-04-02 05:17 - 00297072 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-06-12 12:12 - 2016-04-02 05:14 - 00757192 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-06-12 12:12 - 2016-04-02 05:14 - 00305296 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-06-12 12:12 - 2016-04-02 04:25 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2016-06-12 12:12 - 2016-03-29 10:41 - 00875992 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-06-12 12:12 - 2016-03-29 10:41 - 00771120 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-06-12 12:12 - 2016-03-29 10:41 - 00228696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-06-12 12:12 - 2016-03-29 10:38 - 01051584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-06-12 12:12 - 2016-03-29 10:38 - 00927072 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-06-12 12:12 - 2016-03-29 10:33 - 00084216 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2016-06-12 12:12 - 2016-03-29 10:28 - 00535080 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-06-12 12:12 - 2016-03-29 10:21 - 00922456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-06-12 12:12 - 2016-03-29 10:20 - 00856928 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-06-12 12:12 - 2016-03-29 10:19 - 00296488 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-06-12 12:12 - 2016-03-29 09:41 - 00051128 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-06-12 12:12 - 2016-03-29 09:34 - 00153952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-06-12 12:12 - 2016-03-29 09:26 - 00073872 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-06-12 12:12 - 2016-03-29 09:25 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-06-12 12:12 - 2016-03-29 09:24 - 00294752 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-12 12:12 - 2016-03-29 09:24 - 00063008 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-06-12 12:12 - 2016-03-29 09:23 - 00069744 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-06-12 12:12 - 2016-03-29 08:46 - 00771424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-06-12 12:12 - 2016-03-29 08:42 - 00287072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-06-12 12:12 - 2016-03-29 08:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2016-06-12 12:12 - 2016-03-29 08:28 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-06-12 12:12 - 2016-03-29 08:20 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2016-06-12 12:12 - 2016-03-29 08:20 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2016-06-12 12:12 - 2016-03-29 08:20 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2016-06-12 12:12 - 2016-03-29 08:20 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-06-12 12:12 - 2016-03-29 08:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2016-06-12 12:12 - 2016-03-29 08:14 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-06-12 12:12 - 2016-03-29 08:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2016-06-12 12:12 - 2016-03-29 08:11 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-06-12 12:12 - 2016-03-29 08:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-06-12 12:12 - 2016-03-29 08:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-06-12 12:12 - 2016-03-29 08:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2016-06-12 12:12 - 2016-03-29 08:08 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-06-12 12:12 - 2016-03-29 08:08 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-06-12 12:12 - 2016-03-29 08:06 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-06-12 12:12 - 2016-03-29 08:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-06-12 12:12 - 2016-03-29 08:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2016-06-12 12:12 - 2016-03-29 08:05 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-06-12 12:12 - 2016-03-29 08:05 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-06-12 12:12 - 2016-03-29 08:05 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-06-12 12:12 - 2016-03-29 08:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2016-06-12 12:12 - 2016-03-29 08:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-06-12 12:12 - 2016-03-29 08:02 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-06-12 12:12 - 2016-03-29 08:00 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2016-06-12 12:12 - 2016-03-29 07:53 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-06-12 12:12 - 2016-03-29 07:53 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-06-12 12:12 - 2016-03-29 07:53 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-06-12 12:12 - 2016-03-29 07:52 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-06-12 12:12 - 2016-03-29 07:52 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-06-12 12:12 - 2016-03-29 07:52 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-06-12 12:12 - 2016-03-29 07:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-06-12 12:12 - 2016-03-29 07:47 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-06-12 12:12 - 2016-03-29 07:44 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-06-12 12:12 - 2016-03-29 07:43 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2016-06-12 12:12 - 2016-03-29 07:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-06-12 12:12 - 2016-03-29 07:41 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-06-12 12:12 - 2016-03-29 07:40 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-06-12 12:12 - 2016-03-29 07:39 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-06-12 12:12 - 2016-03-29 07:39 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2016-06-12 12:12 - 2016-03-29 07:36 - 00649728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-06-12 12:12 - 2016-03-29 07:34 - 00682496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-06-12 12:12 - 2016-03-29 07:32 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-06-12 12:12 - 2016-03-29 07:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-06-12 12:12 - 2016-03-29 07:32 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-06-12 12:12 - 2016-03-29 07:29 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-06-12 12:12 - 2016-03-29 07:27 - 00162816 _____ C:\Windows\system32\MTF.dll
2016-06-12 12:12 - 2016-03-29 07:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-06-12 12:12 - 2016-03-29 07:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-06-12 12:12 - 2016-03-29 07:26 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-06-12 12:12 - 2016-03-29 07:26 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-06-12 12:12 - 2016-03-29 07:25 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-06-12 12:12 - 2016-03-29 07:23 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-06-12 12:12 - 2016-03-29 07:18 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-06-12 12:12 - 2016-03-29 07:13 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-06-12 12:12 - 2016-03-29 07:06 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2016-06-12 12:12 - 2016-03-29 07:04 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2016-06-12 12:12 - 2016-03-29 06:55 - 00614912 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-06-12 12:12 - 2016-03-29 06:46 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-06-12 12:12 - 2016-03-29 06:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-06-12 12:12 - 2016-03-29 06:36 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\ncbservice.dll
2016-06-12 12:12 - 2016-03-29 06:32 - 00742400 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-06-12 12:12 - 2016-03-29 06:30 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-06-12 12:12 - 2016-03-29 06:25 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-06-12 12:12 - 2016-03-29 06:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-06-12 12:12 - 2016-03-29 06:24 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-06-12 12:12 - 2016-03-29 06:21 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-06-12 12:09 - 2016-06-15 21:40 - 00400040 ____C (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-06-12 11:47 - 2016-06-12 12:09 - 00000000 ___DC C:\Users\katar\AppData\Local\MicrosoftEdge
2016-06-12 11:45 - 2016-06-16 21:38 - 00002407 ____C C:\Users\katar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-06-12 11:45 - 2016-06-12 14:28 - 00000000 __RDC C:\Users\katar\OneDrive
2016-06-12 11:44 - 2016-06-12 11:44 - 00000000 ___DC C:\Users\katar\AppData\Local\Comms
2016-06-12 11:43 - 2016-06-12 11:43 - 00000000 ___DC C:\Users\katar\AppData\Local\Publishers
2016-06-12 11:43 - 2016-06-12 11:43 - 00000000 ___DC C:\Users\katar\AppData\Local\ActiveSync
2016-06-12 11:41 - 2016-06-19 10:24 - 01845594 ____C C:\Windows\system32\PerfStringBackup.INI
2016-06-12 11:41 - 2016-06-16 23:16 - 00000000 ___DC C:\Users\katar\AppData\Local\Packages
2016-06-12 11:41 - 2016-06-12 20:45 - 00000000 _SHDC C:\Users\katar\AppData\Local\VirtualStore
2016-06-12 11:41 - 2016-06-12 14:22 - 00000000 ___DC C:\Users\katar\AppData\Roaming\Adobe
2016-06-12 11:41 - 2016-06-12 11:41 - 00000000 ___DC C:\Users\katar\AppData\Local\TileDataLayer
2016-06-12 11:40 - 2016-06-16 23:12 - 00000000 ___DC C:\Users\katar
2016-06-12 11:40 - 2016-06-12 11:40 - 00000020 __SHC C:\Users\katar\ntuser.ini
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Ustawienia lokalne
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Szablony
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Moje dokumenty
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Menu Start
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Documents\Moje wideo
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Documents\Moje obrazy
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Documents\Moja muzyka
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\Dane aplikacji
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\AppData\Local\Historia
2016-06-12 11:40 - 2016-06-12 11:40 - 00000000 _SHDL C:\Users\katar\AppData\Local\Dane aplikacji
2016-06-12 11:30 - 2016-06-12 21:06 - 00000000 ___DC C:\Windows\Panther
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Szablony
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Menu Start
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Szablony
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Pulpit
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Menu Start
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Dokumenty
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2016-06-12 10:36 - 2016-06-12 10:36 - 00000000 _SHDL C:\Documents and Settings

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-19 18:38 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\AppReadiness
2016-06-19 11:38 - 2015-10-30 06:39 - 00000000 ___DC C:\Windows\CbsTemp
2016-06-19 10:24 - 2016-04-27 05:06 - 00818302 ____C C:\Windows\system32\perfh015.dat
2016-06-19 10:24 - 2016-04-27 05:06 - 00157970 ____C C:\Windows\system32\perfc015.dat
2016-06-19 10:24 - 2015-10-30 06:47 - 00000000 ___DC C:\Windows\INF
2016-06-19 10:19 - 2016-04-27 05:30 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2016-06-19 04:30 - 2015-10-30 06:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-06-18 17:08 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\NDF
2016-06-18 13:49 - 2015-10-30 06:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-16 00:32 - 2015-10-30 06:48 - 00000000 ____D C:\Windows\rescache
2016-06-15 18:37 - 2016-04-27 05:35 - 00000000 _RHDC C:\Users\Public\AccountPictures
2016-06-15 01:59 - 2015-10-30 06:48 - 00000000 __SDC C:\Windows\system32\DiagSvcs
2016-06-15 01:59 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\bcastdvr
2016-06-15 01:59 - 2015-10-30 06:48 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-06-14 19:33 - 2015-10-30 06:49 - 00828408 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-06-14 19:33 - 2015-10-30 06:49 - 00176632 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-06-13 07:08 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\AppCompat
2016-06-12 21:10 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\MUI
2016-06-12 14:23 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\setup
2016-06-12 13:33 - 2016-04-27 05:19 - 00000000 ___DC C:\Program Files\Windows Journal
2016-06-12 13:33 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\WinBioPlugIns
2016-06-12 13:33 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\oobe
2016-06-12 13:33 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\appraiser
2016-06-12 13:33 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\Provisioning
2016-06-12 13:33 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\PolicyDefinitions
2016-06-12 13:32 - 2015-10-30 06:48 - 00015703 ____C C:\Windows\system32\OEMDefaultAssociations.xml
2016-06-12 11:41 - 2015-10-30 06:48 - 00000000 ___DC C:\Windows\system32\WinBioDatabase
2016-06-12 11:30 - 2015-10-30 06:48 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-06-12 10:36 - 2015-10-30 06:48 - 00000000 ___DC C:\Program Files\Windows NT
2016-06-12 10:34 - 2015-10-30 06:13 - 00000000 ___DC C:\Windows\system32\Sysprep

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-12 10:30

==================== Koniec  FRST.txt ============================