Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 18-02-2017 01 Uruchomiony przez Omega (administrator) DESKTOP-0IS17U3 (20-02-2017 01:46:32) Uruchomiony z C:\Users\Omega\Downloads Załadowane profile: Omega (Dostępne profile: defaultuser0 & Omega) Platform: Windows 10 Pro Wersja 1607 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeHost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (EaseUS) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\epm0.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\Main.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804360 2016-03-22] (NVIDIA Corporation) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM-x32\...\Run: [Kryptel Shredder] => C:\Program Files (x86)\Kryptel\Shredder.exe [3241616 2016-11-05] (Inv Softworks LLC) HKU\S-1-5-21-4795137-2353357709-2078424037-1001\...\Run: [SharewareOnSale Notifier] => C:\ProgramData\SharewareOnSale Notifier\SharewareOnSale Notifier.exe [1008816 2017-02-19] () HKU\S-1-5-21-4795137-2353357709-2078424037-1001\...\Run: [IVONA Reader] => C:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe [1524584 2010-10-07] (IVO Software Sp. z o.o.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{93d3442a-8dfe-4d75-8101-89a0e84d9669}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-02-19] (AO Kaspersky Lab) BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-02-19] (AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-02-19] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-02-19] (AO Kaspersky Lab) FireFox: ======== FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-02-19] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-19] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-19] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default [2017-02-20] CHR Extension: (Prezentacje Google) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-19] CHR Extension: (Dokumenty Google) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-19] CHR Extension: (Dysk Google) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-19] CHR Extension: (YouTube) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-19] CHR Extension: (Adblock Plus) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-19] CHR Extension: (Arkusze Google) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-19] CHR Extension: (Kaspersky Protection) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2017-02-19] CHR Extension: (Dokumenty Google offline) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-19] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-19] CHR Extension: (Gmail) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-19] CHR Extension: (Chrome Media Router) - C:\Users\Omega\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-19] CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab) S4 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373728 2016-11-30] (Intel Corporation) S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab) R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-11-21] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [101368 2015-12-14] (ASUS Corporation) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab) R3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () R3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [15968 2014-11-18] () R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () S3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [266512 2015-07-15] (Intel Corporation) R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2017-02-19] (Highresolution Enterprises [www.highrez.co.uk]) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [191312 2016-06-26] (AO Kaspersky Lab) R1 klhk; C:\Windows\System32\drivers\klhk.sys [435032 2016-09-08] (AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [182360 2017-02-20] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1019616 2017-02-19] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [57424 2017-02-19] (AO Kaspersky Lab) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab) R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project) R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [218920 2017-02-19] (AO Kaspersky Lab) R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [85984 2017-02-19] () R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [245512 2017-02-19] (AO Kaspersky Lab) R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [104720 2017-02-19] (AO Kaspersky Lab) R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [164888 2017-02-19] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [134880 2017-02-19] (AO Kaspersky Lab) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab) R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-02-19] (Malwarebytes) R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [110536 2017-02-19] (Malwarebytes) R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-02-19] (Malwarebytes) R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-19] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [91584 2017-02-20] (Malwarebytes) S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2016-07-16] (Intel Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-05-14] (Realsil Semiconductor Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-02-20 01:46 - 2017-02-20 01:46 - 00015104 _____ C:\Users\Omega\Downloads\FRST.txt 2017-02-20 01:46 - 2017-02-20 01:46 - 00000000 ____D C:\FRST 2017-02-20 01:45 - 2017-02-20 01:46 - 02422784 _____ (Farbar) C:\Users\Omega\Downloads\FRST64.exe 2017-02-20 00:19 - 2017-02-20 00:20 - 00001237 _____ C:\Users\Public\Desktop\Kerish Doctor 2016.lnk 2017-02-20 00:19 - 2017-02-20 00:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor 2017-02-20 00:19 - 2017-02-20 00:19 - 00000000 ____D C:\ProgramData\Kerish Products 2017-02-20 00:19 - 2016-08-09 09:35 - 00059880 _____ (Kerish Products) C:\Windows\SysWOW64\GPUTemp.dll 2017-02-20 00:05 - 2017-02-20 00:06 - 01239008 _____ C:\Users\Omega\Downloads\SlimDrivers-25819-dp.exe 2017-02-19 20:48 - 2017-02-19 20:48 - 00000017 _____ C:\Users\Omega\AppData\Local\resmon.resmoncfg 2017-02-19 20:44 - 2017-02-19 20:44 - 02253416 _____ C:\Users\Omega\Downloads\SharewareOnSale_Giveaway_Kryptel_hub (1).exe 2017-02-19 20:44 - 2017-02-19 20:44 - 00000000 ____D C:\Users\Omega\AppData\Roaming\Inv Softworks 2017-02-19 19:00 - 2017-02-19 19:00 - 00001146 _____ C:\Users\Public\Desktop\Kryptel.lnk 2017-02-19 19:00 - 2017-02-19 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kryptel 2017-02-19 19:00 - 2017-02-19 19:00 - 00000000 ____D C:\Program Files (x86)\Kryptel 2017-02-19 13:43 - 2017-02-19 13:43 - 00000000 ____D C:\Users\Omega\AppData\Local\PeerDistRepub 2017-02-19 13:30 - 2017-02-19 13:30 - 00000000 ____D C:\Windows\pss 2017-02-19 13:17 - 2017-02-19 13:18 - 02196000 _____ C:\Users\Omega\Downloads\SharewareOnSale_Giveaway_Aug-28-2016_Kerish_Doctor_2016_hub.exe 2017-02-19 12:52 - 2017-02-19 12:52 - 00021179 _____ C:\Users\Omega\Downloads\Expressivo 1.3.2 full PL ( Jacek Ewa Agata ) Crack Dodatki Firewall ALLPlayer 3.1.torrent 2017-02-19 12:39 - 2017-02-19 12:42 - 00000000 ____D C:\Users\Omega\AppData\Roaming\IVONA Reader 2017-02-19 12:39 - 2017-02-19 12:39 - 00000000 ___RD C:\Users\Omega\Documents\IVONA Reader Podcasts 2017-02-19 12:39 - 2017-02-19 12:39 - 00000000 ___RD C:\Users\Omega\Documents\IVONA Reader Documents 2017-02-19 12:37 - 2017-02-19 12:39 - 00000000 ____D C:\Program Files (x86)\IVONA 2017-02-19 12:36 - 2017-02-19 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVONA 2017-02-19 12:32 - 2017-02-19 12:32 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-02-19 12:30 - 2017-02-19 12:30 - 00000000 ____D C:\Users\Omega\AppData\Local\VS Revo Group 2017-02-19 12:29 - 2017-02-19 12:29 - 00000000 ____D C:\ProgramData\VS Revo Group 2017-02-19 12:29 - 2017-02-19 12:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2017-02-19 12:29 - 2017-02-19 12:29 - 00000000 ____D C:\Program Files\VS Revo Group 2017-02-19 12:29 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys 2017-02-19 11:28 - 2017-02-19 13:08 - 00000794 _____ C:\Users\Omega\Desktop\klmx.txt 2017-02-19 01:11 - 2017-02-19 01:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.5 2017-02-19 01:10 - 2017-02-19 01:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-02-19 01:10 - 2017-02-19 01:10 - 00000000 ____D C:\Program Files\7-Zip 2017-02-19 01:10 - 2017-02-19 01:10 - 00000000 ____D C:\Program Files (x86)\EaseUS 2017-02-19 01:10 - 2015-04-16 11:26 - 03428488 _____ C:\Windows\system32\BootMan.exe 2017-02-19 01:10 - 2015-04-16 11:15 - 02536072 _____ C:\Windows\SysWOW64\BootMan.exe 2017-02-19 01:10 - 2014-11-18 14:46 - 00021088 _____ C:\Windows\SysWOW64\EuEpmGdi.dll 2017-02-19 01:10 - 2014-11-18 14:46 - 00017504 _____ C:\Windows\system32\EuEpmGdi.dll 2017-02-19 01:10 - 2014-11-18 14:39 - 00018528 _____ C:\Windows\system32\epmntdrv.sys 2017-02-19 01:10 - 2014-11-18 14:39 - 00015968 _____ C:\Windows\SysWOW64\epmntdrv.sys 2017-02-19 01:10 - 2014-11-18 14:39 - 00010848 _____ C:\Windows\system32\EuGdiDrv.sys 2017-02-19 01:10 - 2014-11-18 14:39 - 00010208 _____ C:\Windows\SysWOW64\EuGdiDrv.sys 2017-02-19 01:10 - 2014-11-18 14:38 - 00101984 _____ C:\Windows\system32\setupempdrvx64.exe 2017-02-19 01:10 - 2014-11-18 14:38 - 00088160 _____ C:\Windows\SysWOW64\setupempdrv03.exe 2017-02-19 00:44 - 2017-02-19 18:59 - 00000000 ____D C:\ProgramData\SharewareOnSale Notifier 2017-02-19 00:42 - 2017-02-19 00:43 - 00000000 ____D C:\Windows\system32\MRT 2017-02-19 00:42 - 2017-02-19 00:42 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-02-19 00:42 - 2016-08-09 09:35 - 00059880 _____ (Kerish Products) C:\Windows\system32\GPUTemp.dll 2017-02-19 00:41 - 2017-02-19 00:48 - 36662496 _____ (Kerish Products ) C:\Users\Omega\Downloads\Kerish Doctor 2016.exe 2017-02-19 00:41 - 2017-02-19 00:41 - 00015008 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\Windows\system32\Drivers\inpoutx64.sys 2017-02-19 00:41 - 2011-01-20 01:07 - 00098304 _____ (Highresolution Enterprises) C:\Windows\SysWOW64\inpout32.dll 2017-02-19 00:40 - 2017-02-19 00:40 - 00001278 _____ C:\Users\Omega\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk 2017-02-19 00:40 - 2017-02-19 00:40 - 00000000 ____D C:\Users\Omega\AppData\Roaming\GRETECH 2017-02-19 00:40 - 2017-02-19 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player 2017-02-19 00:40 - 2017-02-19 00:40 - 00000000 ____D C:\Program Files (x86)\GRETECH 2017-02-19 00:38 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll 2017-02-19 00:38 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll 2017-02-19 00:38 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2017-02-19 00:38 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2017-02-19 00:38 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll 2017-02-19 00:38 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll 2017-02-19 00:38 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-02-19 00:38 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2017-02-19 00:38 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll 2017-02-19 00:38 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll 2017-02-19 00:38 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2017-02-19 00:38 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2017-02-19 00:38 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2017-02-19 00:38 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2017-02-19 00:38 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll 2017-02-19 00:38 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll 2017-02-19 00:38 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2017-02-19 00:38 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2017-02-19 00:38 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-02-19 00:38 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll 2017-02-19 00:38 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll 2017-02-19 00:38 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-02-19 00:38 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-02-19 00:38 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll 2017-02-19 00:38 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll 2017-02-19 00:38 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe 2017-02-19 00:38 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe 2017-02-19 00:38 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll 2017-02-19 00:38 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll 2017-02-19 00:38 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-02-19 00:38 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2017-02-19 00:38 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVP9DEC.dll 2017-02-19 00:38 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll 2017-02-19 00:38 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-02-19 00:38 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-02-19 00:38 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2017-02-19 00:38 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-02-19 00:38 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll 2017-02-19 00:38 - 2016-12-14 05:44 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys 2017-02-19 00:38 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll 2017-02-19 00:38 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2017-02-19 00:38 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2017-02-19 00:38 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2017-02-19 00:38 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2017-02-19 00:38 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll 2017-02-19 00:38 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll 2017-02-19 00:38 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll 2017-02-19 00:38 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-02-19 00:38 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2017-02-19 00:38 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2017-02-19 00:38 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-02-19 00:38 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-02-19 00:38 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll 2017-02-19 00:38 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2017-02-19 00:38 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-02-19 00:38 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-02-19 00:38 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll 2017-02-19 00:38 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-02-19 00:38 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-02-19 00:38 - 2016-12-09 11:29 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll 2017-02-19 00:38 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2017-02-19 00:38 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-02-19 00:38 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2017-02-19 00:38 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2017-02-19 00:38 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe 2017-02-19 00:38 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe 2017-02-19 00:38 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi 2017-02-19 00:38 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe 2017-02-19 00:38 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2017-02-19 00:38 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll 2017-02-19 00:38 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-02-19 00:38 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2017-02-19 00:38 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll 2017-02-19 00:38 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-02-19 00:38 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll 2017-02-19 00:38 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll 2017-02-19 00:38 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll 2017-02-19 00:38 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll 2017-02-19 00:38 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2017-02-19 00:38 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2017-02-19 00:38 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll 2017-02-19 00:38 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2017-02-19 00:38 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll 2017-02-19 00:38 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-02-19 00:38 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll 2017-02-19 00:38 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2017-02-19 00:38 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll 2017-02-19 00:38 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll 2017-02-19 00:38 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll 2017-02-19 00:38 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll 2017-02-19 00:38 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll 2017-02-19 00:38 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll 2017-02-19 00:38 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll 2017-02-19 00:38 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-02-19 00:38 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys 2017-02-19 00:38 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2017-02-19 00:38 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2017-02-19 00:38 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2017-02-19 00:38 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-02-19 00:38 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys 2017-02-19 00:38 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2017-02-19 00:38 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2017-02-19 00:38 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe 2017-02-19 00:38 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll 2017-02-19 00:38 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll 2017-02-19 00:38 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2017-02-19 00:38 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2017-02-19 00:38 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe 2017-02-19 00:38 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys 2017-02-19 00:38 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2017-02-19 00:38 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll 2017-02-19 00:38 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll 2017-02-19 00:38 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll 2017-02-19 00:38 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll 2017-02-19 00:38 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-02-19 00:38 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll 2017-02-19 00:38 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll 2017-02-19 00:38 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll 2017-02-19 00:38 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2017-02-19 00:38 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe 2017-02-19 00:38 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2017-02-19 00:38 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2017-02-19 00:38 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2017-02-19 00:38 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2017-02-19 00:38 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2017-02-19 00:38 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll 2017-02-19 00:38 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll 2017-02-19 00:38 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2017-02-19 00:38 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2017-02-19 00:38 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll 2017-02-19 00:38 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll 2017-02-19 00:38 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll 2017-02-19 00:38 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2017-02-19 00:38 - 2016-11-11 10:07 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll 2017-02-19 00:38 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll 2017-02-19 00:38 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll 2017-02-19 00:38 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2017-02-19 00:38 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2017-02-19 00:38 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2017-02-19 00:38 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2017-02-19 00:38 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2017-02-19 00:38 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2017-02-19 00:38 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2017-02-19 00:38 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll 2017-02-19 00:38 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-02-19 00:38 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll 2017-02-19 00:38 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll 2017-02-19 00:38 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2017-02-19 00:38 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2017-02-19 00:38 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll 2017-02-19 00:38 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll 2017-02-19 00:38 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll 2017-02-19 00:38 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll 2017-02-19 00:38 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll 2017-02-19 00:38 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll 2017-02-19 00:38 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll 2017-02-19 00:38 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2017-02-19 00:38 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2017-02-19 00:38 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2017-02-19 00:38 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2017-02-19 00:38 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-02-19 00:38 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll 2017-02-19 00:38 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll 2017-02-19 00:38 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll 2017-02-19 00:38 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll 2017-02-19 00:38 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll 2017-02-19 00:38 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll 2017-02-19 00:38 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll 2017-02-19 00:38 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll 2017-02-19 00:38 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll 2017-02-19 00:38 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2017-02-19 00:38 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll 2017-02-19 00:38 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2017-02-19 00:38 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2017-02-19 00:38 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll 2017-02-19 00:38 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll 2017-02-19 00:37 - 2017-02-19 00:54 - 00000000 ____D C:\ESD 2017-02-19 00:37 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-02-19 00:37 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll 2017-02-19 00:37 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2017-02-19 00:37 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll 2017-02-19 00:37 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe 2017-02-19 00:37 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2017-02-19 00:37 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe 2017-02-19 00:37 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll 2017-02-19 00:37 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll 2017-02-19 00:37 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll 2017-02-19 00:37 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll 2017-02-19 00:37 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll 2017-02-19 00:37 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll 2017-02-19 00:37 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll 2017-02-19 00:37 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll 2017-02-19 00:37 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll 2017-02-19 00:37 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe 2017-02-19 00:37 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll 2017-02-19 00:37 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll 2017-02-19 00:37 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe 2017-02-19 00:37 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-02-19 00:37 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll 2017-02-19 00:37 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll 2017-02-19 00:37 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll 2017-02-19 00:37 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2017-02-19 00:37 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll 2017-02-19 00:37 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll 2017-02-19 00:37 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-02-19 00:37 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll 2017-02-19 00:37 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll 2017-02-19 00:37 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2017-02-19 00:37 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll 2017-02-19 00:37 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2017-02-19 00:37 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe 2017-02-19 00:37 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll 2017-02-19 00:37 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2017-02-19 00:37 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2017-02-19 00:37 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll 2017-02-19 00:37 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll 2017-02-19 00:37 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2017-02-19 00:37 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2017-02-19 00:37 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe 2017-02-19 00:37 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-02-19 00:37 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll 2017-02-19 00:37 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll 2017-02-19 00:37 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll 2017-02-19 00:37 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2017-02-19 00:37 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2017-02-19 00:37 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2017-02-19 00:37 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll 2017-02-19 00:37 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll 2017-02-19 00:37 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2017-02-19 00:37 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe 2017-02-19 00:37 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2017-02-19 00:37 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2017-02-19 00:37 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll 2017-02-19 00:37 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll 2017-02-19 00:37 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll 2017-02-19 00:37 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2017-02-19 00:37 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 02169184 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 01669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 01400160 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe 2017-02-19 00:37 - 2016-12-14 06:33 - 01054048 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00992096 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe 2017-02-19 00:37 - 2016-12-14 06:33 - 00813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00779616 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00752992 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00571744 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00513376 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll 2017-02-19 00:37 - 2016-12-14 06:33 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe 2017-02-19 00:37 - 2016-12-14 06:33 - 00190816 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe 2017-02-19 00:37 - 2016-12-14 06:26 - 01469792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll 2017-02-19 00:37 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe 2017-02-19 00:37 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2017-02-19 00:37 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2017-02-19 00:37 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll 2017-02-19 00:37 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2017-02-19 00:37 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll 2017-02-19 00:37 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-02-19 00:37 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2017-02-19 00:37 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll 2017-02-19 00:37 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2017-02-19 00:37 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll 2017-02-19 00:37 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-02-19 00:37 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-02-19 00:37 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys 2017-02-19 00:37 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll 2017-02-19 00:37 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-02-19 00:37 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-02-19 00:37 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll 2017-02-19 00:37 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll 2017-02-19 00:37 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll 2017-02-19 00:37 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-02-19 00:37 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll 2017-02-19 00:37 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll 2017-02-19 00:37 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll 2017-02-19 00:37 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2017-02-19 00:37 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll 2017-02-19 00:37 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2017-02-19 00:37 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll 2017-02-19 00:37 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-02-19 00:37 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll 2017-02-19 00:37 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll 2017-02-19 00:37 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll 2017-02-19 00:37 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll 2017-02-19 00:37 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys 2017-02-19 00:37 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2017-02-19 00:37 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2017-02-19 00:37 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll 2017-02-19 00:37 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2017-02-19 00:37 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-02-19 00:37 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2017-02-19 00:37 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-02-19 00:37 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2017-02-19 00:37 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2017-02-19 00:37 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll 2017-02-19 00:37 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-02-19 00:37 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-02-19 00:37 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2017-02-19 00:37 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys 2017-02-19 00:37 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2017-02-19 00:37 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll 2017-02-19 00:37 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll 2017-02-19 00:37 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-02-19 00:37 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll 2017-02-19 00:37 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll 2017-02-19 00:37 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2017-02-19 00:37 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2017-02-19 00:37 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-02-19 00:37 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2017-02-19 00:37 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-02-19 00:37 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll 2017-02-19 00:37 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2017-02-19 00:37 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2017-02-19 00:37 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-02-19 00:37 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2017-02-19 00:37 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2017-02-19 00:37 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2017-02-19 00:37 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll 2017-02-19 00:37 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-02-19 00:37 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll 2017-02-19 00:37 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll 2017-02-19 00:37 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-02-19 00:37 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll 2017-02-19 00:37 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-02-19 00:37 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll 2017-02-19 00:37 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll 2017-02-19 00:37 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll 2017-02-19 00:37 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe 2017-02-19 00:37 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll 2017-02-19 00:37 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll 2017-02-19 00:37 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll 2017-02-19 00:37 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll 2017-02-19 00:37 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-02-19 00:37 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll 2017-02-19 00:37 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2017-02-19 00:37 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll 2017-02-19 00:37 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-02-19 00:37 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2017-02-19 00:37 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2017-02-19 00:37 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll 2017-02-19 00:37 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2017-02-19 00:37 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll 2017-02-19 00:37 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2017-02-19 00:37 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2017-02-19 00:37 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2017-02-19 00:37 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2017-02-19 00:37 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll 2017-02-19 00:37 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2017-02-19 00:37 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll 2017-02-19 00:37 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll 2017-02-19 00:37 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2017-02-19 00:37 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll 2017-02-19 00:37 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll 2017-02-19 00:37 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys 2017-02-19 00:37 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll 2017-02-19 00:37 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll 2017-02-19 00:37 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe 2017-02-19 00:37 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll 2017-02-19 00:37 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll 2017-02-19 00:37 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll 2017-02-19 00:37 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll 2017-02-19 00:37 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll 2017-02-19 00:37 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll 2017-02-19 00:37 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll 2017-02-19 00:37 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll 2017-02-19 00:37 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll 2017-02-19 00:37 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe 2017-02-19 00:37 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll 2017-02-19 00:37 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll 2017-02-19 00:37 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2017-02-19 00:37 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll 2017-02-19 00:37 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll 2017-02-19 00:37 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-02-19 00:37 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll 2017-02-19 00:37 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll 2017-02-19 00:37 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl 2017-02-19 00:37 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll 2017-02-19 00:37 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2017-02-19 00:37 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll 2017-02-19 00:37 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-02-19 00:37 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll 2017-02-19 00:37 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll 2017-02-19 00:37 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll 2017-02-19 00:37 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-02-19 00:37 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll 2017-02-19 00:37 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll 2017-02-19 00:37 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll 2017-02-19 00:37 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll 2017-02-19 00:37 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll 2017-02-19 00:37 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll 2017-02-19 00:37 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2017-02-19 00:37 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll 2017-02-19 00:37 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2017-02-19 00:37 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll 2017-02-19 00:37 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-02-19 00:37 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-02-19 00:37 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll 2017-02-19 00:37 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2017-02-19 00:37 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2017-02-19 00:37 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll 2017-02-19 00:37 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2017-02-19 00:37 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-02-19 00:37 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-02-19 00:37 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll 2017-02-19 00:37 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll 2017-02-19 00:37 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2017-02-19 00:37 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll 2017-02-19 00:37 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll 2017-02-19 00:37 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2017-02-19 00:37 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-02-19 00:37 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll 2017-02-19 00:37 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2017-02-19 00:37 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2017-02-19 00:37 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2017-02-19 00:37 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2017-02-19 00:37 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2017-02-19 00:37 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll 2017-02-19 00:37 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll 2017-02-19 00:37 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll 2017-02-19 00:37 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2017-02-19 00:37 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe 2017-02-19 00:37 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe 2017-02-19 00:37 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe 2017-02-19 00:37 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll 2017-02-19 00:37 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll 2017-02-19 00:37 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll 2017-02-19 00:37 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll 2017-02-19 00:37 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll 2017-02-19 00:37 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe 2017-02-19 00:37 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll 2017-02-19 00:37 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-02-19 00:37 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll 2017-02-19 00:37 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll 2017-02-19 00:37 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll 2017-02-19 00:37 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll 2017-02-19 00:37 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe 2017-02-19 00:37 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl 2017-02-19 00:37 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll 2017-02-19 00:37 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll 2017-02-19 00:37 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll 2017-02-19 00:37 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll 2017-02-19 00:37 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll 2017-02-19 00:37 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll 2017-02-19 00:37 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll 2017-02-19 00:37 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll 2017-02-19 00:37 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2017-02-19 00:37 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll 2017-02-19 00:37 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll 2017-02-19 00:37 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-02-19 00:37 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll 2017-02-19 00:37 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2017-02-19 00:37 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-02-19 00:37 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2017-02-19 00:37 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2017-02-19 00:37 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-02-19 00:37 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2017-02-19 00:37 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2017-02-19 00:36 - 2017-02-19 00:36 - 00000000 ___HD C:\$Windows.~WS 2017-02-19 00:36 - 2017-02-19 00:36 - 00000000 ____D C:\$WINDOWS.~BT 2017-02-19 00:33 - 2017-02-19 00:36 - 18316400 _____ (Microsoft Corporation) C:\Users\Omega\Downloads\MediaCreationTool.exe 2017-02-19 00:31 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2017-02-19 00:31 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2017-02-19 00:20 - 2017-02-20 00:58 - 00091584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-02-19 00:20 - 2017-02-19 20:57 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-02-19 00:20 - 2017-02-19 20:57 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-02-19 00:20 - 2017-02-19 20:57 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-02-19 00:20 - 2017-02-19 00:20 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys 2017-02-19 00:20 - 2017-02-19 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-02-19 00:20 - 2017-02-19 00:20 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-19 00:20 - 2017-02-19 00:20 - 00000000 ____D C:\Program Files\Malwarebytes 2017-02-19 00:20 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-02-19 00:18 - 2017-02-19 00:19 - 55566792 _____ (Malwarebytes ) C:\Users\Omega\Downloads\mb3-setup-consumer-3.0.6.1469.exe 2017-02-19 00:18 - 2017-02-19 00:18 - 00002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-02-19 00:17 - 2017-02-19 00:54 - 00000000 ____D C:\Users\Omega\AppData\Local\Google 2017-02-19 00:17 - 2017-02-19 00:18 - 00000000 ____D C:\Program Files (x86)\Google 2017-02-19 00:17 - 2017-02-19 00:17 - 01129376 _____ (Google Inc.) C:\Users\Omega\Downloads\ChromeSetup.exe 2017-02-19 00:17 - 2017-02-19 00:17 - 00003566 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2017-02-19 00:17 - 2017-02-19 00:17 - 00003442 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2017-02-19 00:11 - 2017-02-19 12:50 - 00000052 _____ C:\Users\Omega\Desktop\hsl.txt 2017-02-19 00:04 - 2017-02-19 00:04 - 00245512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys 2017-02-19 00:03 - 2017-02-19 00:03 - 00218920 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys 2017-02-19 00:03 - 2017-02-19 00:03 - 00164888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys 2017-02-19 00:03 - 2017-02-19 00:03 - 00104720 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys 2017-02-19 00:03 - 2017-02-19 00:03 - 00085984 _____ C:\Windows\system32\Drivers\klupd_klif_kimul.sys 2017-02-18 23:58 - 2017-02-19 12:32 - 00000000 __SHD C:\Users\Omega\IntelGraphicsProfiles 2017-02-18 23:58 - 2017-02-18 23:58 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2017-02-18 23:58 - 2017-02-18 23:58 - 00000000 ____D C:\Program Files\Intel 2017-02-18 23:58 - 2017-02-18 23:58 - 00000000 ____D C:\Program Files (x86)\Intel 2017-02-18 23:58 - 2017-02-18 23:58 - 00000000 _____ C:\Windows\system32\GfxValDisplayLog.bin 2017-02-18 23:57 - 2017-02-18 23:57 - 00000000 ____D C:\Users\Omega\AppData\Roaming\Macromedia 2017-02-18 23:56 - 2017-02-18 23:56 - 00000000 ____D C:\Users\Omega\AppData\Local\NVIDIA 2017-02-18 23:56 - 2017-02-18 23:56 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-18 23:56 - 2017-02-18 23:56 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-02-18 23:56 - 2016-11-30 21:59 - 00099848 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 06367288 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 02990016 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 00945600 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2017-02-18 23:56 - 2016-02-15 08:25 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2017-02-18 23:56 - 2016-02-15 08:25 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2017-02-18 23:56 - 2016-02-11 16:36 - 06172297 _____ C:\Windows\system32\nvcoproc.bin 2017-02-18 23:55 - 2017-02-20 01:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2017-02-18 23:55 - 2017-02-19 00:02 - 01019616 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2017-02-18 23:55 - 2017-02-18 23:57 - 00000000 ____D C:\Program Files\Common Files\AV 2017-02-18 23:55 - 2017-02-18 23:56 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-02-18 23:55 - 2017-02-18 23:55 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-02-18 23:55 - 2017-02-18 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection 2017-02-18 23:55 - 2017-02-18 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2017-02-18 23:55 - 2017-02-18 23:55 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2017-02-18 23:55 - 2016-09-08 13:18 - 00435032 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2017-02-18 23:55 - 2016-06-26 15:14 - 00191312 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2017-02-18 23:55 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2017-02-18 23:54 - 2017-02-19 00:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2017-02-18 23:54 - 2017-02-18 23:54 - 00361511 _____ C:\Windows\system32\Drivers\RTWAVES40.dat 2017-02-18 23:54 - 2017-02-18 23:54 - 00006786 _____ C:\Windows\system32\Drivers\rtwavesEFX.dat 2017-02-18 23:54 - 2017-02-18 23:54 - 00003260 _____ C:\Windows\System32\Tasks\RtHDVBg_ListenToDevice 2017-02-18 23:54 - 2017-02-18 23:54 - 00003202 _____ C:\Windows\System32\Tasks\RtHDVBg 2017-02-18 23:54 - 2017-02-18 23:54 - 00003194 _____ C:\Windows\System32\Tasks\RTKCPL 2017-02-18 23:54 - 2017-02-18 23:54 - 00002626 _____ C:\Windows\system32\Drivers\rtwavesMFX.dat 2017-02-18 23:54 - 2017-02-18 23:54 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2017-02-18 23:54 - 2017-02-18 23:54 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2017-02-18 23:54 - 2017-02-18 23:54 - 00000000 ____D C:\Users\Omega\AppData\Local\MicrosoftEdge 2017-02-18 23:54 - 2017-02-18 23:54 - 00000000 ____D C:\Program Files\Realtek 2017-02-18 23:53 - 2017-02-18 23:53 - 00000000 ____D C:\Users\Omega\AppData\Local\Comms 2017-02-18 23:52 - 2017-02-19 20:57 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture 2017-02-18 23:51 - 2017-02-18 23:51 - 00003628 _____ C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher 2017-02-18 23:51 - 2017-02-18 23:51 - 00000000 ____D C:\Windows\SysWOW64\sda 2017-02-18 23:51 - 2017-02-18 23:51 - 00000000 ____D C:\Program Files\DIFX 2017-02-18 23:50 - 2017-02-18 23:50 - 00000000 ____D C:\ProgramData\SetupTPDriver 2017-02-18 23:50 - 2017-02-18 23:50 - 00000000 ____D C:\Program Files (x86)\ASUS 2017-02-18 23:48 - 2017-02-18 23:48 - 00000335 _____ C:\Users\Omega\Desktop\computer.lnk 2017-02-18 23:47 - 2017-02-19 13:50 - 00000000 ___RD C:\Users\Omega\OneDrive 2017-02-18 23:47 - 2017-02-18 23:47 - 00000000 ____D C:\Users\Omega\AppData\Roaming\Skype 2017-02-18 23:45 - 2017-02-20 01:11 - 00000000 ____D C:\Users\Omega 2017-02-18 23:45 - 2017-02-19 01:08 - 00000000 ____D C:\Users\Omega\AppData\Local\Packages 2017-02-18 23:45 - 2017-02-18 23:54 - 00000000 ____D C:\Users\Omega\AppData\Local\ConnectedDevicesPlatform 2017-02-18 23:45 - 2017-02-18 23:45 - 00000020 ___SH C:\Users\Omega\ntuser.ini 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Ustawienia lokalne 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Szablony 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Moje dokumenty 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Menu Start 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Documents\Moje wideo 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Documents\Moje obrazy 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Documents\Moja muzyka 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\Dane aplikacji 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\AppData\Local\Historia 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 _SHDL C:\Users\Omega\AppData\Local\Dane aplikacji 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 ____D C:\Users\Omega\AppData\Roaming\Adobe 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 ____D C:\Users\Omega\AppData\Local\VirtualStore 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 ____D C:\Users\Omega\AppData\Local\TileDataLayer 2017-02-18 23:45 - 2017-02-18 23:45 - 00000000 ____D C:\Users\Omega\AppData\Local\Publishers 2017-02-18 23:44 - 2017-02-18 23:45 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2017-02-18 23:44 - 2017-02-18 23:44 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore 2017-02-18 23:44 - 2017-02-18 23:44 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer 2017-02-18 23:44 - 2017-02-18 23:44 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform 2017-02-18 23:43 - 2017-02-18 23:43 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Ustawienia lokalne 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Szablony 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Moje dokumenty 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Menu Start 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Moje wideo 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Moje obrazy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Moja muzyka 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Historia 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Szablony 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Menu Start 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Szablony 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Pulpit 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Menu Start 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Dokumenty 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 _SHDL C:\ProgramData\Dane aplikacji 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 ____D C:\Windows\CSC 2017-02-18 23:43 - 2017-02-18 23:43 - 00000000 ____D C:\Users\defaultuser0 2017-02-18 23:41 - 2017-02-18 23:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2017-02-18 23:40 - 2017-02-19 00:54 - 00000000 ____D C:\Windows\Panther 2017-02-18 22:08 - 2017-02-18 23:30 - 00000000 _____ C:\Recovery.txt 2017-02-18 20:54 - 2017-02-18 20:54 - 00000762 _____ C:\Users\Omega\Desktop\Dokumenty — skrót.lnk 2017-02-18 20:53 - 2017-02-19 23:52 - 00000000 ____D C:\Users\Omega\Desktop\SKRT 2017-02-18 19:49 - 2017-02-19 19:09 - 00001434 _____ C:\Users\Omega\Desktop\tytul2.txt 2017-02-18 19:49 - 2017-01-13 21:09 - 00001256 _____ C:\Users\Omega\Desktop\tytul nazw.txt 2017-02-18 19:49 - 2017-01-03 16:22 - 00009100 _____ C:\Users\Omega\Desktop\notki zap.txt 2017-02-18 16:29 - 2017-02-18 16:29 - 00000000 ____D C:\Intel 2017-02-18 16:26 - 2017-02-18 16:26 - 00000000 ____D C:\UsbFix 2017-02-18 16:04 - 2017-02-18 16:04 - 00000000 _SHDL C:\Documents and Settings 2017-02-18 01:00 - 2017-02-20 00:19 - 00000000 ____D C:\Program Files (x86)\Kerish Doctor ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-02-19 21:03 - 2016-11-21 10:20 - 01656574 _____ C:\Windows\system32\PerfStringBackup.INI 2017-02-19 21:03 - 2016-11-21 09:34 - 00588636 _____ C:\Windows\system32\perfh015.dat 2017-02-19 21:03 - 2016-11-21 09:34 - 00116494 _____ C:\Windows\system32\perfc015.dat 2017-02-19 20:57 - 2016-11-21 10:10 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-02-19 20:57 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI 2017-02-19 20:36 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF 2017-02-19 18:54 - 2016-11-21 01:10 - 00000000 ____D C:\Windows\system32\SleepStudy 2017-02-19 17:19 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-19 09:23 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\appcompat 2017-02-19 01:16 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness 2017-02-19 01:05 - 2016-11-21 10:23 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-02-19 01:01 - 2016-11-21 01:10 - 00194256 _____ C:\Windows\system32\FNTCACHE.DAT 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Provisioning 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\PolicyDefinitions 2017-02-19 00:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr 2017-02-19 00:59 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism 2017-02-19 00:59 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep 2017-02-19 00:59 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism 2017-02-19 00:59 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing 2017-02-19 00:44 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp 2017-02-19 00:29 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll 2017-02-19 00:03 - 2016-09-08 13:18 - 00134880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys 2017-02-19 00:03 - 2016-09-08 13:18 - 00057424 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys 2017-02-18 23:56 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Help 2017-02-18 23:55 - 2016-07-16 12:47 - 00000000 ___HD C:\Windows\ELAMBKUP 2017-02-18 23:55 - 2016-07-16 07:04 - 00032768 _____ C:\Windows\system32\config\ELAM 2017-02-18 23:45 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase 2017-02-18 23:43 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT 2017-02-18 23:41 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-02-18 23:40 - 2016-07-16 12:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-02-19 20:48 - 2017-02-19 20:48 - 0000017 _____ () C:\Users\Omega\AppData\Local\resmon.resmoncfg 2017-02-18 23:54 - 2017-02-18 23:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-02-18 23:40 ==================== Koniec FRST.txt ============================