Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-10-2016
Ran by Jakub (administrator) on KUBA-PC (27-10-2016 16:00:16)
Running from C:\Users\Jakub\Desktop
Loaded Profiles: Jakub (Available Profiles: Jakub)
Platform: Windows 8.1 Pro (Update) (X64) Language: Angielski (Wielka Brytania)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Microsoft) C:\Program Files (x86)\Gigabyte\CloudStation\HomeCloud\GCloud.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Innovative Solutions) C:\Program Files (x86)\Innovative Solutions\DriverMax\innostp.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Windows\System32\PnkBstrA.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\TimeMgmtDaemon.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Gigabyte Technology CO.) C:\Program Files\Gigabyte\SmartRecovery2\RPMDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
() C:\Users\Jakub\AppData\Local\Uwmjmedia\Windows_Activaton.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\AlarmClock.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft) C:\Program Files (x86)\Gigabyte\CloudStation\HomeCloud\HCLOUD.exe
() C:\Program Files (x86)\Gigabyte\CloudStation\RemoteControl\grckm.exe
() C:\Program Files (x86)\Gigabyte\CloudStation\RemoteOC\ubssrv_oc_only.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Valve Corporation) E:\Programy\Steam\Steam.exe
(Valve Corporation) E:\Programy\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.46\opera.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1842624 2016-09-30] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8822016 2016-06-03] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\MBCfg64.dll [38528 2013-07-03] (Creative Technology Ltd.)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-09-13] (LogMeIn Inc.)
HKLM-x32\...\Run: [Sound Blaster X-Fi MB 3] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe [2112512 2015-06-12] (Creative Technology Ltd)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [EaseUS Cleanup] => "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\CleanUpUI.exe" 10 300
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\Gigabyte\SmartRecovery2\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>)
HKLM-x32\...\RunOnce: [SIV] => C:\Program Files (x86)\Gigabyte\SIV\sivro.exe [12096 2015-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [Steam] => "D:\Programy\Steam\steam.exe" -silent
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [svchost0] => C:\Program Files (x86)\badu\uc.exe
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [DriverMax_RESTART] => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [9550296 2016-10-10] (Innovative Solutions)
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [Uwmjmedia] => C:\Users\Jakub\AppData\Local\Uwmjmedia\Windows_Activaton.exe [128486 2016-10-24] ()
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [Uhldmedia] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Jakub\AppData\Local\Uwmjmedia\vtpjosvd.dll
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [Ulpjmedia] => regsvr32.exe C:\Users\Jakub\AppData\Local\Ulpjmedia\tcxtyxkl.dll <===== ATTENTION
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\...\Run: [lmqqopxoxh] => explorer "hxxp://granena.ru/?utm_source=uoua03n&utm_content=e739009bccd5f1e6d71a91bff5994529&utm_term=A50C996D087A84E18AEE6AEE806A3805&utm_d=20161026" <===== ATTENTION
HKU\S-1-5-18\...\Run: [] => 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-09-14]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\Gigabyte\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{2699C06E-AD45-403C-96E5-A06039587EF6}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4E1B4EDC-3238-4B93-8BB6-7D27BEDEB836}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AC671CC0-450E-467C-A394-9D05FAD0F503}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D62CF15F-3A39-43F9-876F-45E27FB27C94}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-529898959-3016096094-2671212967-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-529898959-3016096094-2671212967-1001 -> DefaultScope {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-529898959-3016096094-2671212967-1001 -> {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms}
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

FireFox:
========
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-529898959-3016096094-2671212967-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jakub\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)

Opera: 
=======
OPR StartupUrls: "hxxp://granena.ru/?utm_content=31b5cebd524a9af6c7a772dca81815e9&utm_source=startpm&utm_term=A50C996D087A84E18AEE6AEE806A3805&utm_d=20161026"
OPR Extension: (uBlock Origin) - C:\Users\Jakub\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2016-10-26]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2016-09-24] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2016-09-24] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [406016 2011-09-14] (Creative Technology Ltd) [File not signed]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [227104 2016-09-15] (EasyAntiCheat Ltd)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [File not signed]
R2 GCloud; C:\Program Files (x86)\GIGABYTE\CloudStation\HomeCloud\GCloud.exe [12800 2014-03-27] (Microsoft) [File not signed]
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2621448 2016-09-13] (LogMeIn Inc.)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2015-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-08-31] (LogMeIn, Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-22] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-09-30] (NVIDIA Corporation)
S3 Origin Client Service; E:\Programy\Origin\OriginClientService.exe [2142728 2016-10-26] (Electronic Arts)
S2 Origin Web Helper Service; E:\Programy\Origin\OriginWebHelperService.exe [2209296 2016-10-26] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-09-16] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-16] ()
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [File not signed]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [524800 2014-11-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)
R2 GhFlt; C:\Windows\system32\drivers\ghflt.sys [16856 2016-09-14] ()
S3 GPCIDrv; C:\Program Files (x86)\Gigabyte\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2014-08-11] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2016-09-14] ()
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-08-31] (LogMeIn Inc.)
R3 KillerEth; C:\Windows\system32\DRIVERS\e2xw7x64.sys [134296 2016-02-12] (Qualcomm Atheros, Inc.)
S3 L1C; C:\Windows\system32\DRIVERS\e22w7x64.sys [161648 2012-06-29] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-09-30] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [46016 2016-10-22] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-09-02] (NVIDIA Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U4 ALSysIO; \??\C:\Users\Jakub\AppData\Local\Temp\ALSysIO64.sys [X]
U4 cpuz140; \??\C:\Users\Jakub\AppData\Local\Temp\cpuz140\cpuz140_x64.sys [X]
U3 kxldqpow; \??\C:\Users\Jakub\AppData\Local\Temp\kxldqpow.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 16:00 - 2016-10-27 16:00 - 00018691 _____ C:\Users\Jakub\Desktop\FRST.txt
2016-10-27 15:53 - 2016-10-27 16:00 - 00000000 ____D C:\FRST
2016-10-27 15:53 - 2016-10-27 15:53 - 00007470 _____ C:\Users\Jakub\Desktop\rejestr.txt
2016-10-27 15:34 - 2016-10-27 15:34 - 1444692693 _____ C:\Windows\MEMORY.DMP
2016-10-27 15:34 - 2016-10-27 15:34 - 00417744 _____ C:\Windows\Minidump\102716-32906-01.dmp
2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Windows\Minidump
2016-10-27 14:30 - 2016-10-27 14:30 - 02407936 _____ (Farbar) C:\Users\Jakub\Desktop\FRST64.exe
2016-10-27 14:30 - 2016-10-27 14:30 - 00380928 _____ C:\Users\Jakub\Desktop\ddorqb0y.exe
2016-10-27 11:44 - 2016-10-22 07:22 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-10-27 11:43 - 2016-10-27 11:43 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-10-27 11:43 - 2016-09-09 20:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-10-27 11:43 - 2016-09-09 20:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-10-27 11:43 - 2016-09-09 20:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-10-27 11:43 - 2016-09-09 20:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-10-27 11:42 - 2016-10-27 11:43 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-10-27 11:42 - 2016-10-22 09:20 - 40125496 _____ C:\Windows\system32\nvcompiler.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 35224120 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 34701368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 28136504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 17426520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 17338976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 14017984 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-10-27 11:42 - 2016-10-22 09:20 - 10910184 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 10772640 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 10324072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 09112272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 08912488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 08715728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 03627968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 03193400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437563.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437563.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 01037368 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00975416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00944184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00896056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00894760 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00683824 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00573072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00521096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00439864 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00435904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00407248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00170688 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00124352 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2016-10-27 11:42 - 2016-10-22 09:20 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2016-10-26 18:24 - 2016-10-26 18:24 - 03910208 _____ C:\Users\Jakub\Desktop\adwcleaner_6.030.exe
2016-10-26 17:58 - 2016-10-26 17:58 - 00000000 ____D C:\Users\Jakub\AppData\Local\Вoйти в Интeрнет
2016-10-26 17:56 - 2016-10-27 15:57 - 00000000 ____D C:\Users\Jakub\AppData\Local\svshost
2016-10-26 17:56 - 2016-10-26 17:56 - 00003498 _____ C:\Windows\System32\Tasks\svshost
2016-10-26 17:55 - 2016-10-26 17:55 - 00000000 ____D C:\Users\Jakub\AppData\LocalLow\Unity
2016-10-26 17:55 - 2016-10-26 17:55 - 00000000 ____D C:\Users\Jakub\AppData\Local\Поиcк в Интeрнете
2016-10-26 17:55 - 2016-10-26 17:55 - 00000000 ____D C:\Users\Jakub\AppData\Local\Unity
2016-10-26 17:53 - 2016-10-26 17:53 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Macromedia
2016-10-26 17:35 - 2016-10-26 17:35 - 00000000 ____D C:\Users\Jakub\AppData\Local\Ulpjmedia
2016-10-26 17:34 - 2016-10-26 17:34 - 00016714 _____ C:\Windows\System32\Tasks\1019595965
2016-10-26 17:34 - 2016-10-26 17:34 - 00000000 ___HD C:\ProgramData\1019595965
2016-10-26 17:33 - 2016-10-26 17:34 - 00000000 ____D C:\Users\Jakub\AppData\Local\Uwmjmedia
2016-10-26 17:29 - 2016-10-27 15:45 - 00003462 _____ C:\Windows\System32\Tasks\Application Starter - f1375f225883e83d52e8db9690775c3c
2016-10-26 17:29 - 2016-10-26 17:29 - 05743968 _____ (Innovative Solutions ) C:\Users\Jakub\Downloads\drivermax.exe
2016-10-26 17:29 - 2016-10-26 17:29 - 00001250 _____ C:\Users\Jakub\Desktop\DriverMax.lnk
2016-10-26 17:29 - 2016-10-26 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2016-10-26 17:23 - 2016-10-26 17:23 - 00000702 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent uaktualnienia do systemu Windows 10.lnk
2016-10-26 17:23 - 2016-10-26 17:23 - 00000690 _____ C:\Users\Jakub\Desktop\Asystent uaktualnienia do systemu Windows 10.lnk
2016-10-26 17:23 - 2016-10-26 17:23 - 00000000 ___HD C:\$GetCurrent
2016-10-26 17:23 - 2016-10-26 17:23 - 00000000 ____D C:\Windows10Upgrade
2016-10-26 14:30 - 2016-10-26 15:03 - 00000000 ____D C:\Users\Jakub\Documents\ETS2MP
2016-10-26 14:05 - 2016-10-26 14:05 - 00000591 _____ C:\Users\Public\Desktop\Euro Truck Simulator 2 Multiplayer.lnk
2016-10-26 14:05 - 2016-10-26 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TruckersMP
2016-10-26 14:03 - 2016-10-26 14:03 - 43087459 _____ C:\Users\Jakub\Downloads\client_21022.zip
2016-10-26 11:19 - 2016-10-26 11:19 - 00001925 ____H C:\Windows\EPMBatch.ept
2016-10-26 11:19 - 2016-10-26 11:19 - 00000000 ____D C:\Local Disk D_102620161119
2016-10-25 22:09 - 2016-10-25 22:10 - 00000028 _____ C:\Windows\OutLog.txt
2016-10-25 21:11 - 2016-10-25 21:11 - 00003640 _____ C:\Windows\System32\Tasks\Traffic Exchange Updater
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 OnGuard
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 On Guard
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 OG
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 Guardian
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 Guard
2016-10-25 21:11 - 2016-10-25 21:11 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2
2016-10-25 21:11 - 2016-10-25 21:11 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange Guardian
2016-10-25 21:11 - 2016-10-25 21:11 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange Guard
2016-10-25 21:11 - 2016-10-25 21:11 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange
2016-10-25 21:07 - 2016-10-25 21:07 - 00003654 _____ C:\Windows\System32\Tasks\Online Application Updater
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 OnGuard
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 On Guard
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 OG
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 Guardian
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 Guard
2016-10-25 21:07 - 2016-10-25 21:07 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2
2016-10-25 21:07 - 2016-10-25 21:07 - 00003590 _____ C:\Windows\System32\Tasks\Online Application Guardian
2016-10-25 21:07 - 2016-10-25 21:07 - 00003590 _____ C:\Windows\System32\Tasks\Online Application Guard
2016-10-25 21:07 - 2016-10-25 21:07 - 00003590 _____ C:\Windows\System32\Tasks\Online Application
2016-10-25 20:47 - 2016-10-25 22:10 - 00000000 _____ C:\Windows\BcdLog.txt
2016-10-25 20:43 - 2016-10-25 20:43 - 00004332 _____ C:\Users\Jakub\Downloads\EASEUS Partition Master Keys Only.zip
2016-10-25 20:34 - 2016-10-25 20:34 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-10-25 18:14 - 2016-10-27 14:23 - 00000000 ____D C:\AdwCleaner
2016-10-25 18:11 - 2016-10-25 18:22 - 00000000 ____D C:\Windows\system32\appmgmt
2016-10-25 18:06 - 2016-10-25 18:06 - 00003566 _____ C:\Windows\System32\Tasks\{41037E4F-9826-41BC-B46B-5AF5BB46688B}
2016-10-25 18:04 - 2016-10-25 18:04 - 00000000 ____D C:\ProgramData\Microleaves
2016-10-25 18:01 - 2016-10-25 21:07 - 00000000 ____D C:\Program Files (x86)\Microleaves
2016-10-25 18:01 - 2016-10-25 18:01 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Mozilla
2016-10-25 18:01 - 2016-10-25 18:01 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microleaves
2016-10-25 18:00 - 2016-10-25 18:01 - 01897572 _____ C:\Users\Jakub\AppData\Roaming\Cof-Ity.bin
2016-10-25 18:00 - 2016-10-25 18:00 - 07214592 _____ C:\Users\Jakub\AppData\Roaming\agent.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 01912093 _____ C:\Users\Jakub\AppData\Roaming\Voltnix.tst
2016-10-25 18:00 - 2016-10-25 18:00 - 00710656 _____ C:\Users\Jakub\AppData\Roaming\Voltnix.exe
2016-10-25 18:00 - 2016-10-25 18:00 - 00190394 _____ C:\Users\Jakub\AppData\Roaming\Lot-Touch.bin
2016-10-25 18:00 - 2016-10-25 18:00 - 00140288 _____ C:\Users\Jakub\AppData\Roaming\Installer.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 00126464 _____ C:\Users\Jakub\AppData\Roaming\noah.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 00070704 _____ C:\Users\Jakub\AppData\Roaming\Config.xml
2016-10-25 18:00 - 2016-10-25 18:00 - 00018432 _____ C:\Users\Jakub\AppData\Roaming\Main.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 00016224 _____ C:\Users\Jakub\AppData\Roaming\InstallationConfiguration.xml
2016-10-25 18:00 - 2016-10-25 18:00 - 00005568 _____ C:\Users\Jakub\AppData\Roaming\md.xml
2016-10-25 17:12 - 2016-10-25 17:12 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\ODIN
2016-10-25 17:11 - 2016-10-25 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transcend
2016-10-25 17:11 - 2016-10-25 17:11 - 00000000 ____D C:\Program Files (x86)\Transcend
2016-10-23 16:04 - 2016-10-23 16:04 - 02374893 _____ C:\Users\Jakub\Downloads\modapi_20160910.zip
2016-10-23 14:06 - 2016-10-23 14:06 - 00001390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-10-23 14:06 - 2016-10-23 14:06 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\WMM
2016-10-23 14:05 - 2016-10-23 14:05 - 00001321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-10-23 14:05 - 2016-10-23 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker
2016-10-23 14:05 - 2016-10-23 14:05 - 00000000 ____D C:\Program Files (x86)\Windows Movie Maker
2016-10-23 14:05 - 2016-10-23 14:05 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-10-23 13:51 - 2016-10-23 13:51 - 00000566 _____ C:\Users\Jakub\Documents\starburn.txt
2016-10-23 13:51 - 2016-10-23 13:51 - 00000000 ____D C:\ProgramData\Wondershare
2016-10-23 13:50 - 2016-10-23 13:50 - 00000000 ____D C:\Users\Jakub\AppData\Local\Wondershare
2016-10-23 13:49 - 2016-10-23 14:02 - 00000000 ____D C:\Users\Jakub\Documents\Wondershare Filmora
2016-10-23 13:47 - 2016-10-23 13:49 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-10-22 12:41 - 2016-09-13 01:48 - 00085680 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-22 12:41 - 2016-09-09 15:38 - 01629184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 01226752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-22 12:41 - 2016-09-09 15:38 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-21 23:48 - 2016-10-21 23:48 - 00000000 ____D C:\Users\Jakub\AppData\LocalLow\Giant Army
2016-10-21 19:34 - 2016-10-22 09:20 - 00492560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-10-21 19:34 - 2016-10-20 00:48 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-10-21 19:34 - 2016-10-20 00:48 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-10-21 19:34 - 2016-10-20 00:48 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-10-21 19:34 - 2016-10-18 23:23 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437557.dll
2016-10-21 19:34 - 2016-10-18 23:23 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437557.dll
2016-10-21 19:34 - 2016-10-18 23:23 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-10-21 19:34 - 2016-10-18 23:23 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-10-20 22:33 - 2016-10-20 22:33 - 00000000 ____D C:\Windows\%LOCALAPPDATA%
2016-10-20 22:03 - 2016-08-11 15:12 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-10-20 22:03 - 2016-08-11 15:12 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-10-20 22:03 - 2016-08-11 15:12 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-10-20 22:03 - 2016-08-11 15:11 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-10-20 22:03 - 2016-08-11 15:11 - 00678592 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-10-20 22:03 - 2016-08-11 15:11 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-10-20 21:59 - 2016-10-01 02:22 - 07444312 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-10-20 21:59 - 2016-09-30 09:55 - 25765376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-10-20 21:59 - 2016-09-30 08:25 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-10-20 21:59 - 2016-09-30 08:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-10-20 21:59 - 2016-09-30 08:12 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-10-20 21:59 - 2016-09-30 08:09 - 06048256 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-10-20 21:59 - 2016-09-30 07:47 - 20306944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-10-20 21:59 - 2016-09-30 07:42 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-10-20 21:59 - 2016-09-30 07:41 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-10-20 21:59 - 2016-09-30 07:38 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-10-20 21:59 - 2016-09-30 07:33 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-10-20 21:59 - 2016-09-30 07:33 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-10-20 21:59 - 2016-09-30 07:32 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-10-20 21:59 - 2016-09-30 07:32 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-10-20 21:59 - 2016-09-30 07:31 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-10-20 21:59 - 2016-09-30 07:21 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-10-20 21:59 - 2016-09-30 07:17 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-10-20 21:59 - 2016-09-30 07:12 - 04608512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-10-20 21:59 - 2016-09-30 07:11 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-10-20 21:59 - 2016-09-30 07:06 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-10-20 21:59 - 2016-09-30 07:05 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-10-20 21:59 - 2016-09-30 07:05 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-10-20 21:59 - 2016-09-30 07:05 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-10-20 21:59 - 2016-09-30 07:03 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-10-20 21:59 - 2016-09-30 06:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-10-20 21:59 - 2016-09-30 06:46 - 02444288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-10-20 21:59 - 2016-09-30 06:43 - 01312768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-10-20 21:59 - 2016-09-30 06:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-10-20 21:59 - 2016-09-17 20:16 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-10-20 21:59 - 2016-09-17 19:53 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-10-20 21:59 - 2016-09-17 19:21 - 00089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2016-10-20 21:59 - 2016-09-17 19:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-10-20 21:59 - 2016-09-17 19:02 - 01446400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-10-20 21:59 - 2016-09-14 03:53 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-10-20 21:59 - 2016-09-14 03:53 - 01523208 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-10-20 21:59 - 2016-09-14 03:53 - 01490112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-10-20 21:59 - 2016-09-14 03:53 - 01358952 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-10-20 21:59 - 2016-09-13 00:03 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-10-20 21:59 - 2016-09-12 23:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2016-10-20 21:59 - 2016-09-10 00:52 - 00921944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-10-20 21:59 - 2016-09-10 00:14 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-10-20 21:59 - 2016-09-09 16:17 - 04170752 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-10-20 21:59 - 2016-09-09 16:15 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2016-10-20 21:59 - 2016-09-09 16:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2016-10-20 21:59 - 2016-09-09 16:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-10-20 21:59 - 2016-09-09 16:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-10-20 21:59 - 2016-09-09 16:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2016-10-20 21:59 - 2016-09-09 15:38 - 00446124 _____ C:\Windows\system32\ApnDatabase.xml
2016-10-20 21:59 - 2016-09-08 22:41 - 00121176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-10-20 21:59 - 2016-09-08 16:00 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-10-20 21:59 - 2016-09-08 16:00 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-10-20 21:59 - 2016-09-08 00:07 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-20 21:59 - 2016-09-07 23:59 - 01754112 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-10-20 21:59 - 2016-09-07 23:59 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-20 21:59 - 2016-09-07 23:57 - 01560064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-20 21:59 - 2016-09-07 23:56 - 01491456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-10-20 21:59 - 2016-09-03 20:20 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll
2016-10-20 21:59 - 2016-09-03 20:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll
2016-10-20 21:59 - 2016-09-03 19:21 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsidsc.dll
2016-10-20 21:59 - 2016-09-03 19:18 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
2016-10-20 21:59 - 2016-09-03 18:12 - 00512512 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-10-20 21:59 - 2016-09-03 18:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-10-20 21:59 - 2016-09-03 17:58 - 00397824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-10-20 21:59 - 2016-09-02 16:05 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-10-20 21:59 - 2016-09-02 16:05 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2016-10-20 21:59 - 2016-09-01 16:33 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-10-20 21:59 - 2016-09-01 16:33 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-10-20 21:59 - 2016-09-01 16:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2016-10-20 21:59 - 2016-08-31 19:22 - 03754496 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-10-20 21:59 - 2016-08-31 18:33 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-10-20 21:59 - 2016-08-30 16:11 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-10-20 21:59 - 2016-08-30 04:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-10-20 21:59 - 2016-08-30 04:18 - 00871936 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-10-20 21:59 - 2016-08-30 04:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2016-10-20 21:59 - 2016-08-30 04:03 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2016-10-20 21:59 - 2016-08-25 22:50 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-10-20 21:59 - 2016-08-25 21:40 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-10-20 21:59 - 2016-08-22 15:34 - 01628672 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-20 21:59 - 2016-08-13 02:05 - 09323008 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-10-20 21:59 - 2016-08-13 02:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifibus.sys
2016-10-20 21:59 - 2016-08-13 02:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
2016-10-20 21:59 - 2016-08-13 02:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
2016-10-20 21:59 - 2016-08-13 00:35 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-10-20 21:59 - 2016-08-13 00:19 - 09323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-10-20 21:59 - 2016-08-12 23:47 - 15431168 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-10-20 21:59 - 2016-08-12 23:17 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2016-10-20 21:59 - 2016-08-12 22:52 - 13317120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-10-20 21:59 - 2016-08-12 03:58 - 02315496 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-10-20 21:59 - 2016-08-12 03:58 - 01946176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-10-20 21:59 - 2016-08-11 20:33 - 00096256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\parport.sys
2016-10-20 21:59 - 2016-08-11 20:33 - 00083456 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-10-20 21:59 - 2016-08-11 20:33 - 00023040 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\serenum.sys
2016-10-20 21:59 - 2016-08-11 19:17 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-10-20 21:59 - 2016-08-11 07:46 - 00420184 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-10-20 21:59 - 2016-08-03 17:42 - 01317888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-10-20 21:59 - 2016-08-03 17:36 - 01102848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2016-10-20 21:59 - 2016-08-03 17:36 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-10-20 21:59 - 2016-08-03 17:33 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-10-20 21:59 - 2016-07-30 19:12 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-10-20 21:59 - 2016-07-30 18:36 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-10-20 21:59 - 2016-07-26 15:40 - 00162850 _____ C:\Windows\SysWOW64\C_932.NLS
2016-10-20 21:59 - 2016-07-26 15:40 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-10-20 21:59 - 2016-07-23 20:18 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-10-20 21:59 - 2016-07-23 20:12 - 00954880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-10-20 21:59 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2016-10-20 21:59 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2016-10-20 21:59 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2016-10-20 21:59 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2016-10-20 21:58 - 2015-12-16 19:11 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-10-20 21:58 - 2015-12-16 18:51 - 00868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-10-20 21:58 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-10-20 21:58 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZST.DLL
2016-10-20 21:58 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-10-20 21:58 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-10-20 21:58 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-10-20 21:58 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZST.DLL
2016-10-20 21:58 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-10-20 21:58 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-10-20 21:58 - 2015-10-22 18:21 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-10-20 21:58 - 2015-10-22 17:58 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-10-20 21:58 - 2015-10-22 16:08 - 00513456 _____ C:\Windows\SysWOW64\locale.nls
2016-10-20 21:58 - 2015-10-22 16:08 - 00513456 _____ C:\Windows\system32\locale.nls
2016-10-20 21:57 - 2016-10-27 14:30 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-10-20 21:57 - 2014-11-15 21:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-10-20 21:57 - 2014-11-15 08:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-10-20 21:57 - 2014-11-14 08:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-10-20 21:57 - 2014-11-14 07:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-10-20 21:57 - 2014-11-08 06:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2016-10-20 21:57 - 2014-11-08 05:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2016-10-20 21:57 - 2014-11-08 05:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2016-10-20 21:57 - 2014-11-08 05:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2016-10-20 21:57 - 2014-11-08 05:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2016-10-20 21:57 - 2014-11-08 05:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2016-10-20 21:57 - 2014-11-08 05:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2016-10-20 21:57 - 2014-11-08 05:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2016-10-20 21:57 - 2014-11-08 04:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2016-10-20 21:57 - 2014-11-08 04:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2016-10-20 21:57 - 2014-11-08 03:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2016-10-20 21:57 - 2014-11-08 03:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2016-10-20 21:57 - 2014-11-05 04:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2016-10-20 21:57 - 2014-11-05 04:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2016-10-20 21:57 - 2014-11-05 04:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-10-20 21:57 - 2014-11-05 03:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2016-10-20 21:57 - 2014-11-05 03:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2016-10-20 21:57 - 2014-11-05 03:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-10-20 21:57 - 2014-11-05 03:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-10-20 21:57 - 2014-11-05 03:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2016-10-20 21:57 - 2014-11-05 03:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-10-20 21:57 - 2014-11-04 21:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-10-20 21:57 - 2014-11-04 08:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-10-20 21:57 - 2014-11-04 07:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-10-20 21:57 - 2014-10-29 03:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2016-10-20 21:57 - 2014-10-29 03:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2016-10-20 21:57 - 2014-10-21 03:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2016-10-20 21:57 - 2014-10-21 03:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2016-10-20 21:57 - 2014-10-21 02:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2016-10-20 21:57 - 2014-10-21 02:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2016-10-20 21:57 - 2014-10-21 02:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2016-10-20 21:57 - 2014-10-21 02:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2016-10-20 21:57 - 2014-10-17 06:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2016-10-20 21:57 - 2014-10-17 05:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-10-20 21:56 - 2016-08-27 21:44 - 22360288 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-10-20 21:56 - 2016-08-27 21:44 - 02755504 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-10-20 21:56 - 2016-08-27 21:44 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-10-20 21:56 - 2016-08-27 20:26 - 19789232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-10-20 21:56 - 2016-08-27 20:26 - 02411048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-10-20 21:56 - 2016-08-27 20:26 - 00113656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-10-20 21:56 - 2016-08-27 18:33 - 02881536 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-10-20 21:56 - 2016-08-27 18:11 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-10-20 21:56 - 2016-08-27 18:09 - 14466560 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-10-20 21:56 - 2016-08-27 17:55 - 12879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-10-20 21:56 - 2016-08-21 00:24 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-10-20 21:56 - 2016-08-21 00:12 - 02463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-10-20 21:56 - 2015-06-10 00:39 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-10-20 21:56 - 2015-06-10 00:39 - 00053248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-10-20 21:56 - 2015-06-10 00:38 - 01201664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-10-20 21:56 - 2014-11-17 22:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2016-10-20 21:56 - 2014-11-14 08:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2016-10-20 00:35 - 2016-10-20 00:35 - 00018818 _____ C:\Windows\system32\results.xml
2016-10-17 06:50 - 2016-10-17 06:50 - 00017920 _____ (Embarcadero Technologies, Inc.) C:\Users\Jakub\AppData\Roaming\NsRandom.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 15:53 - 2016-09-20 18:04 - 00000000 ____D C:\Users\Jakub\AppData\Local\LogMeIn Hamachi
2016-10-27 15:51 - 2016-09-11 00:35 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-529898959-3016096094-2671212967-1001
2016-10-27 15:47 - 2016-09-14 22:21 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-10-27 15:47 - 2016-09-11 00:40 - 00000000 ____D C:\ProgramData\NVIDIA
2016-10-27 15:46 - 2016-09-11 00:48 - 00000000 __SHD C:\Users\Jakub\IntelGraphicsProfiles
2016-10-27 15:46 - 2016-09-11 00:35 - 00000000 ___DO C:\Users\Jakub\OneDrive
2016-10-27 15:45 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-27 15:34 - 2016-09-11 00:29 - 00000000 ____D C:\Users\Jakub
2016-10-27 15:32 - 2016-09-11 15:00 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Origin
2016-10-27 15:01 - 2016-09-11 21:40 - 00000000 ____D C:\Users\Jakub\AppData\Local\CrashDumps
2016-10-27 14:30 - 2016-09-11 00:37 - 00003844 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1473547039
2016-10-27 14:30 - 2016-09-11 00:36 - 00000000 ____D C:\Program Files (x86)\Opera
2016-10-27 14:27 - 2016-09-11 14:58 - 00000000 ____D C:\ProgramData\Origin
2016-10-27 14:24 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-10-27 11:46 - 2016-09-14 22:14 - 00000000 ____D C:\Users\Jakub\Documents\temp
2016-10-27 11:44 - 2016-09-11 00:40 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-27 11:44 - 2016-09-11 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-10-27 11:44 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-10-26 18:19 - 2016-09-11 00:39 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-26 17:53 - 2013-08-22 17:36 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-10-26 17:53 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-10-26 17:06 - 2016-09-11 11:16 - 00000000 ____D C:\Users\Jakub\Documents\Euro Truck Simulator 2
2016-10-26 13:33 - 2016-09-11 10:49 - 00000637 _____ C:\Users\Public\Desktop\Steam.lnk
2016-10-26 11:27 - 2016-09-16 20:25 - 00000000 ____D C:\Users\Jakub\Desktop\tymczas
2016-10-25 21:37 - 2016-09-12 15:59 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-25 18:18 - 2016-09-11 00:37 - 00000994 _____ C:\Users\Public\Desktop\Opera.lnk
2016-10-25 18:18 - 2016-09-11 00:30 - 00001009 _____ C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-10-25 18:13 - 2016-09-13 18:29 - 00000000 ____D C:\Users\Jakub\AppData\Local\Ubisoft Game Launcher
2016-10-25 18:01 - 2016-09-11 16:03 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\NVIDIA
2016-10-25 17:57 - 2016-09-20 13:15 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Stellarium
2016-10-23 22:29 - 2016-09-11 19:20 - 00000000 ____D C:\Users\Jakub\Desktop\modapi_20160910
2016-10-23 20:17 - 2016-09-11 22:00 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-10-23 20:17 - 2016-09-11 22:00 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-10-23 19:14 - 2016-09-11 12:48 - 00000946 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2016-10-23 19:12 - 2016-09-11 18:13 - 00000960 _____ C:\Users\Jakub\Desktop\Core Temp.lnk
2016-10-23 19:12 - 2016-09-11 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2016-10-23 19:12 - 2016-09-11 18:13 - 00000000 ____D C:\Program Files\Core Temp
2016-10-23 18:52 - 2016-09-24 09:51 - 00000000 ____D C:\Program Files\Google
2016-10-23 18:52 - 2016-09-24 09:50 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-23 18:52 - 2013-08-22 16:44 - 00337920 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-23 14:21 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-10-23 14:16 - 2016-09-11 15:06 - 00811014 _____ C:\Windows\system32\perfh015.dat
2016-10-23 14:16 - 2016-09-11 15:06 - 00167700 _____ C:\Windows\system32\perfc015.dat
2016-10-23 14:16 - 2016-09-11 00:30 - 00000000 ____D C:\Users\Jakub\AppData\Local\Packages
2016-10-23 14:16 - 2014-11-22 03:00 - 01828496 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-23 14:16 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-23 14:03 - 2016-09-24 09:50 - 00000000 ____D C:\Users\Jakub\AppData\Local\Google
2016-10-23 14:03 - 2016-09-11 00:36 - 00000000 __SHD C:\Users\Jakub\AppData\LocalLow\EmieUserList
2016-10-23 14:03 - 2016-09-11 00:36 - 00000000 __SHD C:\Users\Jakub\AppData\LocalLow\EmieSiteList
2016-10-23 13:41 - 2016-09-12 21:44 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-23 13:41 - 2014-11-22 07:15 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-10-22 12:56 - 2014-11-22 03:13 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-10-22 12:56 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-10-22 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-10-22 09:20 - 2016-09-11 00:45 - 19917400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-10-22 09:20 - 2016-09-11 00:45 - 14394528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-10-22 09:20 - 2016-09-11 00:45 - 03930688 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-10-22 09:20 - 2016-09-11 00:45 - 03469408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-10-22 09:20 - 2016-09-11 00:45 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2016-10-22 09:20 - 2016-06-07 03:13 - 00041344 _____ C:\Windows\system32\nvinfo.pb
2016-10-22 08:04 - 2016-09-11 00:42 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-10-22 08:04 - 2016-09-11 00:42 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-10-22 07:33 - 2016-09-11 00:40 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-10-21 23:21 - 2016-09-24 09:28 - 00189941 _____ C:\Windows\SysWOW64\bios.ini
2016-10-21 19:43 - 2016-09-11 12:34 - 00000000 ____D C:\Program Files\Rockstar Games
2016-10-21 19:43 - 2016-09-11 12:34 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-10-21 19:36 - 2016-09-11 00:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-21 19:36 - 2016-09-11 00:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-21 19:35 - 2016-09-11 00:40 - 00000000 ____D C:\Users\Jakub\AppData\Local\NVIDIA Corporation
2016-10-21 19:04 - 2016-09-11 00:40 - 00003780 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 19:04 - 2016-09-11 00:40 - 00001428 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-10-21 19:03 - 2016-09-22 15:51 - 00003592 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 19:03 - 2016-09-11 00:40 - 00003830 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 19:03 - 2016-09-11 00:40 - 00003830 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 19:03 - 2016-09-11 00:40 - 00003768 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 19:03 - 2016-09-11 00:40 - 00003532 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-21 09:17 - 2016-09-11 00:42 - 07500035 _____ C:\Windows\system32\nvcoproc.bin
2016-10-20 22:15 - 2016-09-11 00:52 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-10-20 22:10 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2016-10-20 22:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2016-10-20 22:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-10-20 22:03 - 2016-09-12 19:34 - 00000000 ____D C:\Windows\system32\MRT
2016-10-20 22:01 - 2016-09-12 19:34 - 143495576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-10-20 21:38 - 2016-09-24 09:42 - 00000000 ____D C:\Intel
2016-10-01 02:15 - 2016-09-12 21:49 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-01 02:15 - 2016-09-12 21:49 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-30 06:24 - 2016-09-11 00:40 - 01842624 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-09-30 06:24 - 2016-09-11 00:40 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-09-30 06:24 - 2016-09-11 00:40 - 01444288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-09-30 06:24 - 2016-09-11 00:40 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-09-30 06:24 - 2016-09-11 00:40 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll

==================== Files in the root of some directories =======

2016-06-17 08:54 - 2016-06-17 08:54 - 0003203 _____ () C:\Users\Jakub\AppData\Roaming\Adobe-Korea1-H-CID
2016-10-25 18:00 - 2016-10-25 18:00 - 7214592 _____ () C:\Users\Jakub\AppData\Roaming\agent.dat
2016-06-17 08:53 - 2016-06-17 08:53 - 0002864 _____ () C:\Users\Jakub\AppData\Roaming\close_normal.png
2016-10-25 18:00 - 2016-10-25 18:01 - 1897572 _____ () C:\Users\Jakub\AppData\Roaming\Cof-Ity.bin
2016-10-25 18:00 - 2016-10-25 18:00 - 0070704 _____ () C:\Users\Jakub\AppData\Roaming\Config.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0000294 _____ () C:\Users\Jakub\AppData\Roaming\Darker.blw
2016-06-17 08:53 - 2016-06-17 08:53 - 0003397 _____ () C:\Users\Jakub\AppData\Roaming\EUC-V
2016-06-17 08:53 - 2016-06-17 08:53 - 0001858 _____ () C:\Users\Jakub\AppData\Roaming\flat.xsl
2016-10-25 18:00 - 2016-10-25 18:00 - 0016224 _____ () C:\Users\Jakub\AppData\Roaming\InstallationConfiguration.xml
2016-10-25 18:00 - 2016-10-25 18:00 - 0140288 _____ () C:\Users\Jakub\AppData\Roaming\Installer.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 0190394 _____ () C:\Users\Jakub\AppData\Roaming\Lot-Touch.bin
2016-10-25 18:00 - 2016-10-25 18:00 - 0018432 _____ () C:\Users\Jakub\AppData\Roaming\Main.dat
2016-10-25 18:00 - 2016-10-25 18:00 - 0005568 _____ () C:\Users\Jakub\AppData\Roaming\md.xml
2016-10-25 18:00 - 2016-10-25 18:00 - 0126464 _____ () C:\Users\Jakub\AppData\Roaming\noah.dat
2016-10-17 06:50 - 2016-10-17 06:50 - 0017920 _____ (Embarcadero Technologies, Inc.) C:\Users\Jakub\AppData\Roaming\NsRandom.dll
2016-10-25 18:01 - 2016-10-25 18:01 - 0032038 _____ () C:\Users\Jakub\AppData\Roaming\uninstall_temp.ico
2016-10-25 18:00 - 2016-10-25 18:00 - 0710656 _____ () C:\Users\Jakub\AppData\Roaming\Voltnix.exe
2016-10-25 18:00 - 2016-10-25 18:00 - 1912093 _____ () C:\Users\Jakub\AppData\Roaming\Voltnix.tst
1997-08-03 09:00 - 1997-08-03 09:00 - 0061262 _____ () C:\Users\Jakub\AppData\Roaming\Zaptiah.N
2016-09-14 21:40 - 2016-09-14 21:40 - 0000000 _____ () C:\Users\Jakub\AppData\Local\Driver_LOM_8161Present.flag
2016-09-16 13:40 - 2016-09-16 13:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Jakub\AppData\Local\Temp\Browser_V5.6.14087.902_f_4674_(Build1608021049).exe
C:\Users\Jakub\AppData\Local\Temp\dBpEgD7N30FI.exe
C:\Users\Jakub\AppData\Local\Temp\g9AD3.tmp.exe
C:\Users\Jakub\AppData\Local\Temp\g9DD2.tmp.exe
C:\Users\Jakub\AppData\Local\Temp\libeay32.dll
C:\Users\Jakub\AppData\Local\Temp\msvcr120.dll
C:\Users\Jakub\AppData\Local\Temp\nsi39CC.tmp.exe
C:\Users\Jakub\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jakub\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Jakub\AppData\Local\Temp\nvStInst.exe
C:\Users\Jakub\AppData\Local\Temp\pJOKAXtJUEOl.exe
C:\Users\Jakub\AppData\Local\Temp\setup3.exe
C:\Users\Jakub\AppData\Local\Temp\sonarinst.exe
C:\Users\Jakub\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-21 20:30

==================== End of FRST.txt ============================