Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 28-09-2016
Uruchomiony przez Patryk (administrator)  PATRYK-PC (28-09-2016 14:48:10)
Uruchomiony z C:\Users\Patryk\Desktop
Załadowane profile: Patryk (Dostępne profile: Patryk)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Valve Corporation) D:\Program Files\Steam\Steam.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
() C:\Users\Patryk\Desktop\idle_master\IdleMaster.exe
() C:\Users\Patryk\Desktop\idle_master\steam-idle.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1842744 2016-09-17] (NVIDIA Corporation)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1889192 2016-09-28] (QIHU 360 SOFTWARE CO. LIMITED)
GroupPolicy\User: Ograniczenia <======= UWAGA
GroupPolicyScripts: Ograniczenia <======= UWAGA
GroupPolicyScripts\User: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{FB6FE2AF-16FC-4EF9-B76F-5EE80122C2C4}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={c4e3f66d-5c9f-43f7-a35f-b96d04379692}&mid=3a1b8b7ead7747cf8d727baffee09606-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=avg&coid=avgtbavg&cmpid=0516pit&pr=fr&d=2016-09-15 18:04:56&v=4.3.5.160&pid=wtu&sg=&sap=hp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={c4e3f66d-5c9f-43f7-a35f-b96d04379692}&mid=3a1b8b7ead7747cf8d727baffee09606-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=avg&coid=avgtbavg&cmpid=0516pit&pr=fr&d=2016-09-15 18:04:56&v=4.3.5.160&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-928142227-810867722-3577759665-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/
SearchScopes: HKLM -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM-x32 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-928142227-810867722-3577759665-1000 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-928142227-810867722-3577759665-1000 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-928142227-810867722-3577759665-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={C4E3F66D-5C9F-43F7-A35F-B96D04379692}&mid=3a1b8b7ead7747cf8d727baffee09606-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0516pit&pr=fr&d=2016-09-15 18:04:56&v=4.3.5.160&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-15] (Oracle Corporation)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2016-09-28] (Qihu 360 Software Co., Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-15] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2016-09-15] (Qihu 360 Software Co., Ltd.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-15] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-07-30] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-928142227-810867722-3577759665-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR DefaultSearchKeyword: Default -> t
CHR Profile: C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default [2016-09-28]
CHR Extension: (Prezentacje Google) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-30]
CHR Extension: (Dokumenty Google) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-30]
CHR Extension: (Dysk Google) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-30]
CHR Extension: (YouTube) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-30]
CHR Extension: (Steam Inventory Helper) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-09-13]
CHR Extension: (Arkusze Google) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-30]
CHR Extension: (Dokumenty Google offline) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-30]
CHR Extension: (AdBlock) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-09-21]
CHR Extension: (Steam Trader Helper) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoahihokddepjlegpenefeaahdkojog [2016-07-30]
CHR Extension: (Refresh Monkey) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljngnafhejmefmijjoedbclkadhacebd [2016-07-30]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-30]
CHR Extension: (Oddshot) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnoeeagkgpkplnhmnnlgodjnjgckhja [2016-09-21]
CHR Extension: (Material Simple Dark Grey) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookepigabmicjpgfnmncjiplegcacdbm [2016-07-30]
CHR Extension: (Gmail) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-30]
CHR Extension: (Chrome Media Router) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-21]
CHR HKLM-x32\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1440264 2016-09-22] ()
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458808 2016-09-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458808 2016-09-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-09-17] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files\Origin\OriginClientService.exe [2122248 2016-07-31] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [189112 2016-09-15] (Power Admin LLC)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [926632 2016-09-28] (QIHU 360 SOFTWARE CO. LIMITED)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" [X]
S2 MBAMService; "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [151784 2016-09-15] (360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2016-09-28] (360.cn)
R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2016-09-28] (360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [330472 2016-09-28] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2016-09-15] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [391392 2016-09-15] (360.cn)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [188864 2016-09-15] (360.cn)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-16] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2016-09-17] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2016-07-31] (Duplex Secure Ltd.)
U3 a1hd1x6a; C:\Windows\System32\Drivers\a1hd1x6a.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)
S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [X]
U2 StartMenuReviverService; Brak ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-28 14:48 - 2016-09-28 14:48 - 00015818 _____ C:\Users\Patryk\Desktop\FRST.txt
2016-09-28 14:45 - 2016-09-28 14:48 - 00000000 ____D C:\FRST
2016-09-28 14:45 - 2016-09-28 14:45 - 02404352 _____ (Farbar) C:\Users\Patryk\Desktop\FRST64.exe
2016-09-28 14:11 - 2016-09-28 14:11 - 15976154 _____ C:\Users\Patryk\Downloads\xhamster.com_6231323_cum_inside_stocking_top.mp4
2016-09-28 13:54 - 2016-09-28 13:55 - 10351989 _____ C:\Users\Patryk\Downloads\xhamster.com_2371354_deborah_wells_footjob_and_cum_on_nylons.mp4
2016-09-28 13:53 - 2016-09-28 13:53 - 02628005 _____ C:\Users\Patryk\Downloads\xhamster.com_1818428_slow_cum_load_on_sexy_nylon_stockings_feet.mp4
2016-09-28 13:51 - 2016-09-28 14:05 - 225164732 _____ C:\Users\Patryk\Downloads\xhamster.com_5442500_sexy_legs_heels_and_feet_in_nylons_pantyhose_on_train_720p.mp4
2016-09-28 13:51 - 2016-09-28 13:51 - 61468658 _____ C:\Users\Patryk\Downloads\xhamster.com_5585974_candid_feet_pantyhose_nylon_and_bare_in_the_park_720p.mp4
2016-09-28 13:40 - 2016-09-28 13:40 - 21353098 _____ C:\Users\Patryk\Downloads\xhamster.com_6257183_cum_inside_white_stockings.mp4
2016-09-28 13:40 - 2016-09-28 13:40 - 02937538 _____ C:\Users\Patryk\Downloads\xhamster.com_5776644_stocking_top_in_airplane_480p.mp4
2016-09-28 13:39 - 2016-09-28 13:40 - 28140883 _____ C:\Users\Patryk\Downloads\xhamster.com_6253158_great_cum_on_black_stockings.mp4
2016-09-28 13:35 - 2016-09-28 13:38 - 165631851 _____ C:\Users\Patryk\Downloads\xhamster.com_6505642_blonde_teen_gets_cum_on_tan_stockings_top_480p.mp4
2016-09-28 13:31 - 2016-09-28 13:34 - 164813191 _____ C:\Users\Patryk\Downloads\xhamster.com_6454914_fabulous_cum_on_stockings_top_480p.mp4
2016-09-28 13:24 - 2016-09-28 13:24 - 61628273 _____ C:\Users\Patryk\Downloads\xhamster.com_6234997_cock_inside_nylon_stocking_while_fucking.mp4
2016-09-27 20:01 - 2016-09-27 20:01 - 00000000 ____D C:\Users\Patryk\AppData\Local\IdleMaster
2016-09-27 20:00 - 2016-09-27 20:00 - 00000000 ____D C:\Users\Patryk\Desktop\idle_master
2016-09-25 14:36 - 2016-09-25 14:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\LogMeIn
2016-09-25 14:36 - 2016-09-25 14:36 - 00000000 ____D C:\ProgramData\LogMeIn
2016-09-24 15:40 - 2016-09-24 15:40 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\NVIDIA
2016-09-24 15:34 - 2016-09-24 15:39 - 00000000 ____D C:\Users\Patryk\AppData\Local\NVIDIA
2016-09-24 15:34 - 2016-09-24 15:34 - 00003836 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00003836 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00003786 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00003774 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00003598 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00003538 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-24 15:34 - 2016-09-24 15:34 - 00001412 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-09-24 15:34 - 2016-09-17 03:42 - 01842744 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 01450040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 00106040 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 00095800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-09-24 15:34 - 2016-09-17 03:42 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-09-24 15:34 - 2016-09-17 00:40 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-09-22 16:57 - 2016-09-22 16:57 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-09-22 16:57 - 2016-09-22 16:57 - 00000000 ____D C:\Program Files\Realtek
2016-09-22 16:56 - 2016-09-22 16:56 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-09-22 16:56 - 2015-06-18 18:45 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-09-22 16:56 - 2015-06-18 17:59 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-09-22 16:56 - 2015-06-17 19:47 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-09-22 16:56 - 2015-06-17 14:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-09-22 16:56 - 2015-06-15 17:39 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-09-22 16:56 - 2015-05-26 11:59 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-09-22 16:56 - 2015-05-25 15:18 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-09-22 16:56 - 2015-05-18 14:47 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-09-22 16:56 - 2015-05-15 19:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-09-22 16:56 - 2015-05-15 16:32 - 01316056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-09-22 16:56 - 2014-11-11 13:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-09-22 16:56 - 2014-06-09 10:59 - 00560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-09-22 16:56 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-09-22 16:56 - 2014-01-08 15:25 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2016-09-22 16:56 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-09-22 16:56 - 2012-06-08 16:21 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2016-09-22 16:56 - 2012-06-08 16:21 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2016-09-22 16:56 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-09-22 16:56 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-09-22 16:56 - 2011-12-16 14:57 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2016-09-22 16:56 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-09-22 16:56 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-09-22 16:56 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-09-22 16:56 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-09-22 16:56 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-09-22 16:56 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-09-22 16:56 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-09-22 16:56 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2016-09-22 16:55 - 2015-05-27 17:38 - 02825944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2016-09-21 21:05 - 2016-09-21 21:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2016-09-21 20:44 - 2016-09-22 15:43 - 00000000 ____D C:\Users\Patryk\Desktop\RS 2k16 by pomidor
2016-09-21 20:42 - 2016-09-22 15:42 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Audacity
2016-09-21 20:40 - 2016-09-21 20:40 - 00001019 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-09-21 20:40 - 2016-09-21 20:40 - 00001007 _____ C:\Users\Public\Desktop\Audacity.lnk
2016-09-21 20:40 - 2016-09-21 20:40 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-09-21 17:35 - 2016-09-17 00:30 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-09-21 17:32 - 2016-09-17 02:46 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 35180992 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 34809912 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 28214840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 17270984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 14118336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-21 17:32 - 2016-09-17 02:46 - 10868288 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 10746872 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 10287344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 09090952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 08877480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 08684304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 03595832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 03161024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437290.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437290.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 01020472 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00956864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00943672 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00895032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00688784 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00521096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00437696 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00435904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00409296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00179952 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00157464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-21 17:32 - 2016-09-17 02:46 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-20 17:09 - 2016-09-20 17:10 - 00285264 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-17 18:01 - 2016-09-20 16:01 - 00063616 _____ C:\Users\Patryk\AppData\Local\GDIPFONTCACHEV1.DAT
2016-09-16 19:46 - 2016-09-17 00:50 - 00000000 ____D C:\ProgramData\360Quarant
2016-09-16 19:23 - 2016-09-16 19:23 - 00000000 _RSHD C:\360SANDBOX
2016-09-16 18:06 - 2016-09-16 18:06 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\360TotalSecurity
2016-09-16 18:05 - 2016-09-28 14:38 - 00000000 ____D C:\Users\Patryk\AppData\LocalLow\360WD
2016-09-16 18:05 - 2016-09-28 14:26 - 00001077 _____ C:\Users\Public\Desktop\360 Total Security.lnk
2016-09-16 18:05 - 2016-09-28 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
2016-09-16 18:05 - 2016-09-28 08:52 - 00330472 _____ (360.cn) C:\Windows\system32\Drivers\360Box64.sys
2016-09-16 18:05 - 2016-09-28 08:52 - 00086248 _____ (360.cn) C:\Windows\system32\Drivers\360AvFlt.sys
2016-09-16 18:05 - 2016-09-17 01:20 - 00000000 ____D C:\ProgramData\360safe
2016-09-16 18:05 - 2016-09-16 19:46 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\360safe
2016-09-16 18:05 - 2016-09-16 19:25 - 00000000 ____D C:\ProgramData\360TotalSecurity
2016-09-16 18:05 - 2016-09-15 03:30 - 00391392 _____ (360.cn) C:\Windows\system32\Drivers\360fsflt.sys
2016-09-16 18:05 - 2016-09-15 03:30 - 00188864 _____ (360.cn) C:\Windows\system32\Drivers\BAPIDRV64.SYS
2016-09-16 18:05 - 2016-09-15 03:30 - 00151784 _____ (360.cn) C:\Windows\system32\Drivers\360AntiHacker64.sys
2016-09-16 18:05 - 2016-09-15 03:30 - 00040520 _____ (360.cn) C:\Windows\system32\Drivers\360Camera64.sys
2016-09-16 18:01 - 2016-09-16 19:49 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-16 18:01 - 2016-09-16 18:01 - 01284909 _____ C:\Windows\unins000.exe
2016-09-16 18:01 - 2016-09-16 18:01 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-16 17:41 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-16 17:40 - 2016-07-30 16:46 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-16 17:40 - 2016-07-30 16:01 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-09-16 17:40 - 2016-07-30 01:56 - 25810432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-16 17:40 - 2016-07-30 01:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-16 17:40 - 2016-07-30 01:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-16 17:40 - 2016-07-30 01:32 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-16 17:40 - 2016-07-30 01:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-16 17:40 - 2016-07-30 01:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-16 17:40 - 2016-07-30 01:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-16 17:40 - 2016-07-30 01:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-16 17:40 - 2016-07-30 01:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-16 17:40 - 2016-07-30 01:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-16 17:40 - 2016-07-30 01:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-16 17:40 - 2016-07-30 01:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-16 17:40 - 2016-07-30 01:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-16 17:40 - 2016-07-30 01:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-16 17:40 - 2016-07-30 01:18 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-16 17:40 - 2016-07-30 01:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-16 17:40 - 2016-07-30 01:07 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-16 17:40 - 2016-07-30 01:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-16 17:40 - 2016-07-30 01:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-16 17:40 - 2016-07-30 00:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-16 17:40 - 2016-07-30 00:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-16 17:40 - 2016-07-30 00:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-16 17:40 - 2016-07-30 00:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-16 17:40 - 2016-07-30 00:52 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-09-16 17:40 - 2016-07-30 00:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-09-16 17:40 - 2016-07-30 00:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-09-16 17:40 - 2016-07-30 00:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-09-16 17:40 - 2016-07-30 00:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-16 17:40 - 2016-07-30 00:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-09-16 17:40 - 2016-07-30 00:48 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-09-16 17:40 - 2016-07-30 00:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-09-16 17:40 - 2016-07-30 00:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-09-16 17:40 - 2016-07-30 00:43 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-09-16 17:40 - 2016-07-30 00:42 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-09-16 17:40 - 2016-07-30 00:42 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-09-16 17:40 - 2016-07-30 00:42 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-09-16 17:40 - 2016-07-30 00:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-16 17:40 - 2016-07-30 00:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-16 17:40 - 2016-07-30 00:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-16 17:40 - 2016-07-30 00:36 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-16 17:40 - 2016-07-30 00:34 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-09-16 17:40 - 2016-07-30 00:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-09-16 17:40 - 2016-07-30 00:29 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-09-16 17:40 - 2016-07-30 00:27 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-09-16 17:40 - 2016-07-30 00:26 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-09-16 17:40 - 2016-07-30 00:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-09-16 17:40 - 2016-07-30 00:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-16 17:40 - 2016-07-30 00:23 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-09-16 17:40 - 2016-07-30 00:17 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-09-16 17:40 - 2016-07-30 00:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-09-16 17:40 - 2016-07-30 00:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-09-16 17:40 - 2016-07-29 23:58 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-16 17:40 - 2016-07-29 23:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-09-16 17:40 - 2016-07-29 23:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-09-16 17:39 - 2016-07-30 01:31 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-16 17:39 - 2016-07-30 01:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-16 17:39 - 2016-07-30 00:54 - 20343296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-16 17:39 - 2016-07-30 00:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-16 17:39 - 2016-07-30 00:31 - 15411712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-16 17:39 - 2016-07-30 00:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-09-16 17:39 - 2016-07-30 00:15 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-09-16 17:39 - 2016-07-30 00:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-09-16 17:39 - 2016-07-30 00:09 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-16 17:39 - 2016-07-29 23:52 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-09-16 17:37 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-16 17:37 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-16 17:37 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-16 17:37 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-16 17:37 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-09-16 17:37 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-09-16 17:37 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-09-16 17:37 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-16 17:37 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-16 17:37 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-16 17:37 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-16 17:37 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-09-16 17:37 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-16 17:37 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-09-16 17:35 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-09-16 17:35 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-09-16 17:28 - 2015-12-20 20:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-09-16 17:28 - 2015-12-20 20:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-09-16 17:28 - 2015-12-20 16:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-09-16 17:25 - 2015-12-11 20:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-09-16 17:25 - 2015-11-16 22:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-09-16 17:24 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-09-16 17:24 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-09-16 17:24 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-09-16 17:24 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-09-16 17:24 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-09-16 17:24 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-09-16 17:24 - 2015-12-08 23:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-09-16 17:24 - 2015-12-08 23:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-09-16 17:24 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-09-16 17:24 - 2015-12-08 23:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-09-16 17:24 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-09-16 17:24 - 2015-12-08 21:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-16 17:24 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-09-16 17:24 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-09-16 17:24 - 2015-12-08 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-16 17:24 - 2015-12-08 21:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-16 17:24 - 2015-12-08 20:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-09-16 17:24 - 2015-12-08 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-09-16 17:24 - 2015-12-08 20:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-09-16 17:24 - 2015-11-10 20:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-09-16 17:24 - 2015-11-10 20:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-09-16 17:24 - 2015-11-10 20:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-16 17:24 - 2015-11-10 20:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-09-16 17:24 - 2015-11-10 20:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-09-16 17:21 - 2015-01-07 05:15 - 00104896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2016-09-16 17:21 - 2015-01-07 03:49 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-09-16 17:21 - 2015-01-07 03:48 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-09-16 17:20 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-09-16 17:20 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-09-16 17:20 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-09-16 17:20 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-09-16 17:20 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-09-16 17:19 - 2016-09-16 17:19 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2016-09-16 17:13 - 2016-09-16 18:00 - 00000000 __SHD C:\$360Section
2016-09-16 16:10 - 2016-09-16 16:10 - 00000000 ____D C:\Windows\Tasks\360Disabled
2016-09-16 15:59 - 2016-09-28 08:52 - 00086248 _____ (360.cn) C:\Windows\SysWOW64\Drivers\360AvFlt.sys
2016-09-16 15:59 - 2016-09-16 15:59 - 00000000 ____D C:\Program Files (x86)\360
2016-09-15 20:05 - 2016-09-16 17:53 - 00000351 _____ C:\prefs.js
2016-09-15 20:05 - 2016-09-15 20:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-15 19:54 - 2016-09-15 19:54 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TuneUp Software
2016-09-15 19:53 - 2016-09-16 15:55 - 00000000 ___HD C:\$AVG
2016-09-15 19:52 - 2016-09-16 15:56 - 00000000 ____D C:\ProgramData\MFAData
2016-09-15 19:50 - 2016-09-15 19:53 - 00000000 ____D C:\ProgramData\Avg
2016-09-15 17:30 - 2016-09-15 17:30 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Sun
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\Users\Patryk\AppData\LocalLow\Sun
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\Users\Patryk\.oracle_jre_usage
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\ProgramData\Oracle
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-09-15 17:30 - 2016-09-15 17:30 - 00000000 ____D C:\Program Files\Java
2016-09-15 14:56 - 2016-09-25 12:55 - 00000000 ____D C:\Users\Patryk\AppData\Local\NVIDIA Corporation
2016-09-15 14:54 - 2016-09-28 11:10 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-15 14:54 - 2016-09-24 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-15 14:53 - 2016-09-24 15:34 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-15 14:53 - 2016-09-24 15:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-15 14:53 - 2016-09-17 00:57 - 06385720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 02475064 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 01364024 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-09-15 14:53 - 2016-09-17 00:57 - 00546752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-09-15 14:53 - 2016-09-17 00:57 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-09-15 14:53 - 2016-09-16 09:40 - 07379415 _____ C:\Windows\system32\nvcoproc.bin
2016-09-15 14:53 - 2016-08-26 01:28 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-09-15 14:53 - 2016-08-26 01:28 - 00203320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 19854064 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 17464952 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 14353512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 03917840 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 03458608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-09-15 14:52 - 2016-09-17 02:46 - 00039730 _____ C:\Windows\system32\nvinfo.pb
2016-09-15 14:52 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-15 14:52 - 2016-08-26 01:28 - 01588688 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-09-15 14:52 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-15 14:52 - 2016-08-26 01:28 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-09-15 14:52 - 2016-08-26 01:28 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-09-15 14:52 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-15 14:52 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-15 14:51 - 2016-09-24 15:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-15 13:53 - 2016-09-16 18:01 - 00002903 _____ C:\Windows\unins000.dat
2016-09-14 15:31 - 2016-09-15 14:45 - 00189112 _____ (Power Admin LLC) C:\Windows\PAExec.exe
2016-09-13 18:53 - 2016-09-13 18:53 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\Drivers\hamachi.sys
2016-09-04 16:39 - 2016-09-27 14:43 - 00000000 ____D C:\Users\Patryk\Desktop\bru
2016-09-01 17:12 - 2016-09-27 14:16 - 00000000 ____D C:\Users\Patryk\Downloads\filmy
2016-08-31 20:46 - 2016-08-31 20:46 - 00000000 ____D C:\Users\Patryk\AppData\Local\OrionGame
2016-08-31 20:18 - 2016-08-31 20:18 - 00000000 ____D C:\Users\Patryk\AppData\Local\UnrealEngine
2016-08-31 14:38 - 2016-08-31 14:38 - 00000000 ____D C:\Users\Patryk\Documents\FLiNGTrainer
2016-08-31 14:37 - 2016-08-31 14:37 - 00000000 ____D C:\Users\Patryk\Desktop\TOMB.RAIDER.2k13.V1.01.732.1.PLUS11TRN.FLING
2016-08-31 14:27 - 2016-08-31 14:27 - 00000216 _____ C:\Users\Patryk\Desktop\Tomb Raider.url

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-28 14:48 - 2016-07-30 21:20 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TS3Client
2016-09-28 14:38 - 2016-07-30 18:27 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-28 11:18 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-28 11:18 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-28 11:10 - 2016-07-30 18:27 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-28 11:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-27 20:02 - 2011-04-12 15:21 - 00740196 _____ C:\Windows\system32\perfh015.dat
2016-09-27 20:02 - 2011-04-12 15:21 - 00155770 _____ C:\Windows\system32\perfc015.dat
2016-09-27 20:02 - 2009-07-14 07:13 - 01669606 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-27 20:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-27 13:54 - 2016-07-31 19:01 - 00000935 _____ C:\Users\Public\Desktop\SHU.lnk
2016-09-27 13:54 - 2016-07-31 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHU
2016-09-27 13:54 - 2016-07-31 19:00 - 00000000 ____D C:\Program Files (x86)\SHU
2016-09-27 13:53 - 2016-07-31 19:05 - 00000000 ____D C:\Users\Patryk\AppData\Local\SHU
2016-09-25 18:53 - 2016-08-21 18:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\Arma 3
2016-09-25 18:52 - 2016-08-21 18:32 - 00000000 ____D C:\Users\Patryk\AppData\Local\Arma 3 Launcher
2016-09-24 13:18 - 2016-07-30 18:27 - 00004054 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-09-24 13:12 - 2016-07-30 18:27 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-09-22 21:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-09-22 16:57 - 2016-07-30 19:13 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-09-22 16:56 - 2016-07-30 18:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-22 13:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-21 23:08 - 2016-07-30 21:53 - 00000000 ____D C:\Users\Patryk\AppData\Local\CrashDumps
2016-09-18 14:34 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-16 20:03 - 2016-08-01 16:21 - 00000000 ____D C:\Users\Patryk\AppData\Local\ElevatedDiagnostics
2016-09-16 17:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-09-16 17:13 - 2016-08-05 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoIt v3
2016-09-16 17:13 - 2016-07-31 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart File Advisor
2016-09-16 16:16 - 2016-08-22 22:37 - 00000000 ____D C:\Windows\Minidump
2016-09-16 16:16 - 2016-07-30 18:56 - 00000000 ____D C:\Windows\Panther
2016-09-16 16:15 - 2016-08-01 15:18 - 00004478 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-09-16 16:15 - 2016-07-30 23:12 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\uTorrent
2016-09-16 16:15 - 2016-07-30 21:44 - 00003446 _____ C:\Windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2016-09-16 16:15 - 2016-07-30 21:39 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Notepad++
2016-09-16 16:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-09-16 15:56 - 2016-07-30 21:44 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-15 20:25 - 2016-08-02 18:01 - 00000000 ____D C:\Users\Patryk\AppData\Local\DayZ
2016-09-15 17:30 - 2016-07-30 18:03 - 00000000 ____D C:\Users\Patryk
2016-09-15 14:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-15 14:09 - 2016-07-31 20:13 - 00000000 ____D C:\Program Files (x86)\Smart File Advisor
2016-09-15 10:19 - 2016-07-30 18:27 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-15 10:19 - 2016-07-30 18:27 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-05 20:41 - 2016-08-02 13:08 - 00000000 ____D C:\Users\Patryk\Documents\Euro Truck Simulator 2
2016-09-04 20:01 - 2016-07-31 20:41 - 00000000 ____D C:\Users\Patryk\Documents\My Games
2016-09-04 20:00 - 2016-08-20 14:05 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2016-08-31 20:18 - 2016-07-30 18:20 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-30 21:20 - 2016-07-30 21:24 - 00000000 ____D C:\Users\Patryk\Desktop\Pliki i wiadomości do pobrania

==================== Pliki w katalogu głównym wybranych folderów =======

2016-08-22 22:40 - 2016-08-22 22:40 - 0007602 _____ () C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg
2016-07-30 21:44 - 2016-07-30 21:52 - 0001265 _____ () C:\ProgramData\hpzinstall.log

Niektóre pliki w TEMP:
====================
C:\Users\Patryk\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Patryk\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Patryk\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-09-28 11:47

==================== Koniec  FRST.txt ============================