jaskowski utworzono 10 listopada 2018 utworzono 10 listopada 2018 (edytowane) Maszyna chodzi 24/7 ale czasem wita mnie system po resecie, wykluczam aktualizacje i zaplanowane działania Windowsa. Bedę wdzięczny za rzucenie okiem. OTL Spoiler OTL logfile created on: 10.11.2018 14:01:53 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\janek\Downloads 64bit- Enterprise Edition (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.17134.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy 15,95 Gb Total Physical Memory | 13,56 Gb Available Physical Memory | 84,99% Memory free 18,33 Gb Paging File | 15,38 Gb Available in Paging File | 83,93% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 237,94 Gb Total Space | 44,44 Gb Free Space | 18,68% Space Free | Partition Type: NTFS Drive D: | 447,13 Gb Total Space | 291,72 Gb Free Space | 65,24% Space Free | Partition Type: NTFS Computer Name: DESKTOP-DOSSHEQ | User Name: janek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2018.11.10 13:48:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\janek\Downloads\OTL.exe PRC - [2018.10.25 18:13:34 | 003,130,184 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\OriginWebHelperService.exe PRC - [2018.10.21 12:38:44 | 000,662,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe PRC - [2018.10.18 20:08:18 | 000,073,048 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome Remote Desktop\71.0.3578.15\remoting_host.exe PRC - [2018.10.02 08:49:54 | 000,649,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe PRC - [2018.08.13 23:27:08 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2015.05.29 05:33:26 | 002,023,424 | ---- | M] (CMedia) -- C:\Program Files\ASUS Xonar DGX Audio\Customapp\AsusAudioCenter.exe PRC - [2008.07.11 08:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012.06.06 02:56:50 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS Xonar DGX Audio\Customapp\VmixP8.dll MOD - [2008.07.11 08:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2018.10.21 13:41:26 | 001,364,992 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\bcastdvruserservice.dll -- (BcastDVRUserService) SRV:[b]64bit:[/b] - [2018.10.21 08:45:50 | 000,885,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV:[b]64bit:[/b] - [2018.10.21 08:20:48 | 003,397,120 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2018.10.21 08:18:54 | 000,395,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthAvctpSvc.dll -- (BthAvctpSvc) SRV:[b]64bit:[/b] - [2018.10.21 08:16:45 | 000,514,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BTAGService.dll -- (BTAGService) SRV:[b]64bit:[/b] - [2018.10.21 08:16:03 | 000,847,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2018.10.21 08:14:53 | 000,632,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc) SRV:[b]64bit:[/b] - [2018.10.21 08:14:45 | 000,311,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc) SRV:[b]64bit:[/b] - [2018.10.21 08:14:29 | 000,453,632 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc) SRV:[b]64bit:[/b] - [2018.10.21 08:14:17 | 001,373,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc) SRV:[b]64bit:[/b] - [2018.10.10 23:48:38 | 000,767,016 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem) SRV:[b]64bit:[/b] - [2018.10.10 21:04:15 | 000,773,160 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService) SRV:[b]64bit:[/b] - [2018.10.10 21:04:15 | 000,773,160 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem) SRV:[b]64bit:[/b] - [2018.09.20 04:40:17 | 003,090,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2018.09.08 04:26:46 | 000,784,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc) SRV:[b]64bit:[/b] - [2018.09.08 04:24:55 | 001,457,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc) SRV:[b]64bit:[/b] - [2018.09.08 04:24:26 | 000,463,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2018.08.28 07:45:57 | 000,713,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc) SRV:[b]64bit:[/b] - [2018.08.09 05:25:14 | 000,392,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WaaSMedicSvc.dll -- (WaaSMedicSvc) SRV:[b]64bit:[/b] - [2018.08.03 04:41:01 | 000,061,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost) SRV:[b]64bit:[/b] - [2018.08.03 04:15:02 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service) SRV:[b]64bit:[/b] - [2018.08.03 04:09:14 | 001,395,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker) SRV:[b]64bit:[/b] - [2018.07.15 01:56:49 | 004,737,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe -- (Sense) SRV:[b]64bit:[/b] - [2018.07.14 05:23:08 | 000,760,888 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService) SRV:[b]64bit:[/b] - [2018.07.14 04:54:10 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall) SRV:[b]64bit:[/b] - [2018.07.14 04:53:02 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc) SRV:[b]64bit:[/b] - [2018.07.14 04:52:39 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2018.07.14 04:50:54 | 001,359,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc) SRV:[b]64bit:[/b] - [2018.07.14 04:50:19 | 000,949,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2018.07.06 07:58:32 | 000,091,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker) SRV:[b]64bit:[/b] - [2018.06.15 05:41:49 | 000,235,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2018.06.15 05:41:36 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc) SRV:[b]64bit:[/b] - [2018.06.15 05:40:59 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV:[b]64bit:[/b] - [2018.06.15 05:40:51 | 001,487,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\InstallService.dll -- (InstallService) SRV:[b]64bit:[/b] - [2018.06.15 05:39:52 | 000,684,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2018.06.08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum) SRV:[b]64bit:[/b] - [2018.06.08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository) SRV:[b]64bit:[/b] - [2018.06.08 10:00:02 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc) SRV:[b]64bit:[/b] - [2018.06.08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer) SRV:[b]64bit:[/b] - [2018.06.08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc) SRV:[b]64bit:[/b] - [2018.06.08 09:55:25 | 002,248,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2018.06.08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2018.05.20 12:31:30 | 001,456,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WpcDesktopMonSvc.dll -- (WpcMonSvc) SRV:[b]64bit:[/b] - [2018.05.20 12:25:35 | 000,835,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc) SRV:[b]64bit:[/b] - [2018.04.28 15:23:35 | 000,826,776 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient) SRV:[b]64bit:[/b] - [2018.04.12 16:56:42 | 000,125,952 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\CaptureService.dll -- (CaptureService) SRV:[b]64bit:[/b] - [2018.04.12 16:56:38 | 001,189,376 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService) SRV:[b]64bit:[/b] - [2018.04.12 16:56:37 | 000,604,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\assignedaccessmanagersvc.dll -- (AssignedAccessManagerSvc) SRV:[b]64bit:[/b] - [2018.04.12 16:56:34 | 000,197,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo) SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,427,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService) SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,400,896 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,824,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication) SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,590,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter) SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,121,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:41 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:39 | 000,219,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:38 | 000,671,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2018.04.12 00:34:37 | 000,303,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:37 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2018.04.12 00:34:34 | 001,273,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:33 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:33 | 000,153,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:25 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 001,027,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager) SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 000,081,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2018.04.12 00:34:23 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,335,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,089,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicePickerUserSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (CaptureService_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BluetoothUserService_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BcastDVRUserService_315bb) SRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,750,080 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,195,584 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,712,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice) SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 001,495,040 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 001,220,096 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,582,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,345,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,281,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,280,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,241,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,176,128 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,096,768 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,044,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 001,248,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,376,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,048,640 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager) SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker) SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 001,308,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave) SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode) SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,059,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xbgmsvc.exe -- (xbgm) SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:07 | 001,115,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager) SRV:[b]64bit:[/b] - [2018.04.12 00:34:07 | 000,092,160 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate) SRV:[b]64bit:[/b] - [2018.04.12 00:34:06 | 001,033,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC) SRV:[b]64bit:[/b] - [2018.04.12 00:34:06 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 001,148,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,411,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vac.dll -- (VacSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,199,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LanguageOverlayServer.dll -- (LxpSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,163,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SgrmBroker.exe -- (SgrmBroker) SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:02 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll -- (BluetoothUserService) SRV:[b]64bit:[/b] - [2018.04.12 00:34:02 | 000,063,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 002,197,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2018.04.12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2018.04.10 22:05:00 | 000,324,608 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc) SRV:[b]64bit:[/b] - [2018.04.03 14:45:30 | 003,606,120 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe -- (Disc Soft Lite Bus Service) SRV:[b]64bit:[/b] - [2018.03.30 00:00:00 | 000,195,784 | ---- | M] (WinAbility® Software Corporation) [Auto | Running] -- C:\Program Files\Folder Guard\FG64.exe -- (Folder Guard) SRV:[b]64bit:[/b] - [2018.03.10 19:20:00 | 000,495,616 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe -- (ssh-agent) SRV - [2018.11.08 20:02:08 | 001,684,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2018.11.01 04:41:52 | 000,216,528 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2018.10.29 02:09:34 | 000,774,272 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe -- (EasyAntiCheat) SRV - [2018.10.25 18:13:34 | 003,130,184 | ---- | M] (Electronic Arts) [Auto | Running] -- C:\Program Files (x86)\Origin\OriginWebHelperService.exe -- (Origin Web Helper Service) SRV - [2018.10.25 18:13:26 | 002,269,504 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service) SRV - [2018.10.23 07:33:13 | 003,917,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe -- (WdNisSvc) SRV - [2018.10.23 07:33:13 | 000,114,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe -- (WinDefend) SRV - [2018.10.21 08:19:01 | 000,567,048 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV - [2018.10.18 20:08:18 | 000,073,048 | ---- | M] (Google Inc.) [Auto | Running] -- C:\Program Files (x86)\Google\Chrome Remote Desktop\71.0.3578.15\remoting_host.exe -- (chromoting) SRV - [2018.10.10 01:49:36 | 007,361,312 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService) SRV - [2018.10.09 09:42:08 | 000,335,872 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2018.10.02 08:49:54 | 000,649,712 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer) SRV - [2018.08.13 23:27:08 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2018.08.03 04:06:01 | 001,000,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker) SRV - [2018.06.15 05:46:52 | 000,593,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV - [2018.06.15 05:43:37 | 001,110,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService) SRV - [2018.06.08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository) SRV - [2018.06.08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc) SRV - [2018.04.12 00:35:22 | 000,312,832 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV - [2018.04.12 00:34:57 | 000,138,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV - [2018.04.12 00:34:45 | 000,965,632 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc) SRV - [2018.04.12 00:34:45 | 000,072,192 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate) SRV - [2018.04.12 00:34:45 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2018.04.12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2018.10.23 07:33:13 | 000,328,696 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2018.10.23 07:33:13 | 000,060,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2018.10.23 07:33:13 | 000,046,184 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2018.10.21 08:47:51 | 000,076,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice) DRV:[b]64bit:[/b] - [2018.10.21 08:46:42 | 000,611,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2018.10.21 08:19:52 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf) DRV:[b]64bit:[/b] - [2018.10.21 08:19:37 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2018.10.21 08:19:29 | 000,228,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat) DRV:[b]64bit:[/b] - [2018.10.21 08:17:38 | 000,787,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi) DRV:[b]64bit:[/b] - [2018.10.12 16:37:20 | 020,337,064 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\nv_dispi.inf_amd64_f4187dc256a67a6b\nvlddmkm.sys -- (nvlddmkm) DRV:[b]64bit:[/b] - [2018.10.01 19:49:02 | 000,227,856 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2018.08.21 12:07:40 | 000,030,792 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms) DRV:[b]64bit:[/b] - [2018.08.09 05:55:01 | 000,230,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2018.08.03 04:47:12 | 000,128,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus) DRV:[b]64bit:[/b] - [2018.08.03 04:40:48 | 000,228,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000) DRV:[b]64bit:[/b] - [2018.08.03 04:40:43 | 000,566,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2018.08.03 04:39:58 | 000,075,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2018.08.03 04:17:05 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid) DRV:[b]64bit:[/b] - [2018.07.30 20:14:43 | 000,069,544 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2018.07.14 04:55:22 | 000,414,720 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt) DRV:[b]64bit:[/b] - [2018.06.15 08:10:52 | 000,048,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs) DRV:[b]64bit:[/b] - [2018.06.15 06:08:16 | 001,921,944 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2018.06.15 06:08:14 | 000,072,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT) DRV:[b]64bit:[/b] - [2018.06.15 06:08:05 | 000,945,568 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1) DRV:[b]64bit:[/b] - [2018.06.15 05:44:07 | 000,295,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip) DRV:[b]64bit:[/b] - [2018.06.08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2018.06.08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2018.05.20 13:33:14 | 000,105,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2018.05.06 10:06:38 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup) DRV:[b]64bit:[/b] - [2018.05.06 09:51:31 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus) DRV:[b]64bit:[/b] - [2018.05.06 09:51:29 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus) DRV:[b]64bit:[/b] - [2018.04.28 05:29:42 | 000,382,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2018.04.24 18:29:24 | 000,065,792 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvhci.sys -- (nvvhci) DRV:[b]64bit:[/b] - [2018.04.12 16:56:41 | 000,037,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2018.04.12 16:56:39 | 000,304,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt) DRV:[b]64bit:[/b] - [2018.04.12 16:56:39 | 000,152,064 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\smbdirect.sys -- (smbdirect) DRV:[b]64bit:[/b] - [2018.04.12 16:56:38 | 000,040,344 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver) DRV:[b]64bit:[/b] - [2018.04.12 16:56:37 | 000,057,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter) DRV:[b]64bit:[/b] - [2018.04.12 16:56:34 | 000,030,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2018.04.12 16:56:33 | 000,162,712 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr) DRV:[b]64bit:[/b] - [2018.04.12 16:56:33 | 000,143,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs) DRV:[b]64bit:[/b] - [2018.04.12 16:56:33 | 000,127,384 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm) DRV:[b]64bit:[/b] - [2018.04.12 16:56:32 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,119,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda) DRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,091,544 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam) DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afunix.sys -- (afunix) DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2018.04.12 00:34:28 | 000,254,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2018.04.12 00:34:25 | 000,088,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,175,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx) DRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,034,208 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2018.04.12 00:34:20 | 000,217,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2018.04.12 00:34:20 | 000,209,816 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr) DRV:[b]64bit:[/b] - [2018.04.12 00:34:15 | 000,021,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys -- (WdmCompanionFilter) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,282,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,154,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,152,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,151,960 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,082,944 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,075,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,067,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,039,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101) DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,169,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,092,056 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bindflt.sys -- (bindflt) DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,082,432 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt) DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,082,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,055,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,128,000 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,063,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SgrmAgent.sys -- (SgrmAgent) DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,058,272 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate) DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS) DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv) DRV:[b]64bit:[/b] - [2018.04.12 00:33:58 | 000,030,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,140,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,127,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,055,808 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,039,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk) DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,434,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,287,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,097,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,054,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,018,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy) DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,144,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys) DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,098,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea) DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,029,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea) DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,028,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys) DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 001,836,952 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,885,144 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAVC.sys -- (iaStorAVC) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,842,648 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,526,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,505,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,321,432 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,305,560 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,156,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,108,952 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,105,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimm.sys -- (nvdimm) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,079,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,064,920 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,061,848 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,058,776 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,056,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,038,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,033,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hvcrash.sys -- (hvcrash) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,033,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,032,152 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,031,128 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,016,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 003,419,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 001,135,520 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,533,912 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,259,480 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,177,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,145,920 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e2xw10x64.sys -- (KillerEth) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,145,816 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ItSas35i.sys -- (ItSas35i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,128,408 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,124,312 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,107,416 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,083,360 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,082,848 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,082,328 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\megasas35i.sys -- (megasas35i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,075,160 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,064,408 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,063,904 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,027,032 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM) DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,174,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,118,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,091,648 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,088,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,036,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio) DRV:[b]64bit:[/b] - [2018.03.30 00:00:00 | 000,105,888 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\Folder Guard\FGUARD64.sys -- (FGUARD64) DRV:[b]64bit:[/b] - [2016.09.06 13:59:26 | 000,204,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2015.06.02 10:23:06 | 002,735,616 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmudaxp.sys -- (cmudaxp) DRV - [2018.10.12 16:37:20 | 020,337,064 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_f4187dc256a67a6b\nvlddmkm.sys -- (nvlddmkm) DRV - [2018.04.12 00:34:58 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix) DRV - [2018.04.12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum) DRV - [2018.04.12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus) DRV - [2013.11.21 09:22:10 | 000,115,448 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = D6 AB 4E CB 2B E6 D3 01 [binary data] IE - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error. IE - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "PL" FF - prefs.js..browser.search.region: "PL" FF - prefs.js..browser.startup.homepage: "https://www.google.pl/" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.6: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 63.0.1\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 63.0.1\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.9.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.9.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2018.05.06 09:34:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Extensions [2018.05.06 09:34:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\SystemExtensionsDev [2018.09.18 17:39:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\browser-extension-data [2018.11.10 13:45:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\browser-extension-data\{00000f2a-7cde-4f20-83ed-434fcb420d71} [2018.11.10 14:00:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\browser-extension-data\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2018.09.18 17:39:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\browser-extension-data\fxmonitor@mozilla.org [2018.09.08 00:50:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\browser-extension-data\screenshots@mozilla.org [2018.10.31 21:42:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\Firefox\Profiles\efkscxgs.default\extensions [2018.07.09 16:47:08 | 000,152,774 | ---- | M] () (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\firefox\profiles\efkscxgs.default\extensions\{00000f2a-7cde-4f20-83ed-434fcb420d71}.xpi [2018.05.29 06:23:02 | 001,168,032 | ---- | M] () (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\firefox\profiles\efkscxgs.default\extensions\{bbb0df11-b3d0-4423-8100-393ed4458ce3}.xpi [2018.10.31 12:41:34 | 000,222,617 | ---- | M] () (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\firefox\profiles\efkscxgs.default\extensions\{c3c10168-4186-445c-9c5b-63f12b8e2c87}.xpi [2018.10.31 21:42:26 | 001,187,197 | ---- | M] () (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\firefox\profiles\efkscxgs.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018.10.03 19:43:07 | 000,049,152 | ---- | M] () (No name found) -- C:\Users\janek\AppData\Roaming\mozilla\firefox\profiles\efkscxgs.default\storage\default\https+++www.flixbus.pl\idb\3584543524w_olrpk_bsouxb-xpirle.sqlite [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckblfoghkjhaclegefojbgllenffajdc\1.3_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl\1.17.4_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\70.0.3538.21_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl\0.9.5.7_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.7_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6918.723.0.0_0\ CHR - Extension: No name found = C:\Users\janek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\7018.903.0.0_0\ O1 HOSTS File: ([2018.03.24 20:19:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Microsoft OneDrive for Business Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788] C:\WINDOWS\Syswow64\cmicnfgp.dll (C-Media Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX] C:\WINDOWS\syswow64\HsMgr.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX64] C:\WINDOWS\system\HsMgr64.exe () O4:[b]64bit:[/b] - HKLM..\Run: [FG_Monitor] C:\Program Files\Folder Guard\FG64.exe (WinAbility® Software Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Logitech Download Assistant] C:\WINDOWS\SysNative\LogiLDA.dll (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [SecurityHealth] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd) O4 - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001..\Run: [Plays] "C:\Users\janek\AppData\Local\Plays\update.exe" --processStart "Plays.exe" File not found O4 - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001..\Run: [qBittorrent] C:\Program Files (x86)\qBittorrent\qbittorrent.exe () O4 - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-21-1000625825-2706868552-3366255526-1001..\Run: [Viber] C:\Users\janek\AppData\Local\Viber\Viber.exe (Viber Media S.Ã r.l.) O4 - HKU\.DEFAULT..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe File not found O4 - HKU\S-1-5-18..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe File not found O4 - HKU\S-1-5-19..\RunOnce: [WAB Migrate] C:\Program Files (x86)\Windows Mail\wab.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [WAB Migrate] C:\Program Files (x86)\Windows Mail\wab.exe (Microsoft Corporation) O4 - Startup: C:\Users\janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk = C:\Program Files\ShareX\ShareX.exe (ShareX Team) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.61 62.179.1.63 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{e1bea73a-3a54-470c-a067-d83cbfac84f7}: DhcpNameServer = 62.179.1.61 62.179.1.63 O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - c:\windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2018.11.10 13:58:18 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2018.11.10 13:58:18 | 000,000,000 | ---D | C] -- C:\rsit [2018.11.09 07:08:34 | 000,133,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe [2018.11.08 17:26:18 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Roaming\qBittorrent [2018.11.08 17:26:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent [2018.11.08 17:26:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\qBittorrent [2018.11.07 18:11:21 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Local\Viber [2018.11.05 18:19:58 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes [2018.11.05 18:18:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2018.11.04 23:30:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Folder Guard [2018.11.04 23:30:48 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Local\Folder Guard [2018.11.04 23:29:48 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Folder Guard [2018.11.04 23:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Folder Guard [2018.11.04 23:21:46 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Local\ApplicationHistory [2018.11.04 23:21:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\URTTEMP [2018.11.03 15:18:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\directx [2018.11.03 15:11:10 | 040,254,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll [2018.11.03 15:11:10 | 035,298,072 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll [2018.11.03 15:11:10 | 035,151,944 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll [2018.11.03 15:11:10 | 019,705,728 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll [2018.11.03 15:11:10 | 015,907,200 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll [2018.11.03 15:11:10 | 013,202,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll [2018.11.03 15:11:10 | 004,937,960 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll [2018.11.03 15:11:10 | 004,310,600 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll [2018.11.03 15:11:10 | 001,997,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll [2018.11.03 15:11:10 | 001,508,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll [2018.11.03 15:11:10 | 001,471,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFThevc.dll [2018.11.03 15:11:10 | 001,462,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll [2018.11.03 15:11:10 | 001,455,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll [2018.11.03 15:11:10 | 001,167,376 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll [2018.11.03 15:11:10 | 001,151,960 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFThevc.dll [2018.11.03 15:11:10 | 001,145,512 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll [2018.11.03 15:11:10 | 001,122,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll [2018.11.03 15:11:10 | 000,822,552 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmcumd.dll [2018.11.03 15:11:10 | 000,794,416 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll [2018.11.03 15:11:10 | 000,750,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll [2018.11.03 15:11:10 | 000,637,456 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll [2018.11.03 15:11:10 | 000,631,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll [2018.11.03 15:11:10 | 000,608,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll [2018.11.03 15:11:10 | 000,522,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll [2018.11.03 15:07:57 | 000,000,000 | ---D | C] -- C:\NVIDIA [2018.11.03 14:45:23 | 007,519,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2018.11.03 14:45:23 | 006,569,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2018.11.03 14:45:22 | 025,855,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2018.11.03 14:45:17 | 022,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2018.11.03 14:45:17 | 009,089,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2018.11.03 14:45:16 | 007,432,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2018.11.03 14:45:16 | 005,602,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StartTileData.dll [2018.11.03 14:45:16 | 004,710,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2018.11.03 14:45:16 | 001,540,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppVEntSubsystems32.dll [2018.11.03 14:45:15 | 016,592,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2018.11.03 14:45:15 | 008,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll [2018.11.03 14:45:15 | 007,577,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2018.11.03 14:45:14 | 012,501,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2018.11.03 14:45:14 | 006,039,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2018.11.03 14:45:14 | 003,397,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2018.11.03 14:45:13 | 005,777,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2018.11.03 14:45:13 | 004,384,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll [2018.11.03 14:45:12 | 013,572,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2018.11.03 14:45:11 | 013,873,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2018.11.03 14:45:11 | 006,661,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll [2018.11.03 14:45:11 | 004,393,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2018.11.03 14:45:11 | 003,649,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2018.11.03 14:45:11 | 003,392,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2018.11.03 14:45:11 | 003,283,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2018.11.03 14:45:11 | 002,738,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2018.11.03 14:45:11 | 001,826,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll [2018.11.03 14:45:10 | 003,212,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll [2018.11.03 14:45:10 | 002,966,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2018.11.03 14:45:10 | 002,368,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll [2018.11.03 14:45:10 | 002,267,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntSubsystems64.dll [2018.11.03 14:45:10 | 001,221,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2018.11.03 14:45:10 | 001,035,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2018.11.03 14:45:09 | 002,892,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2018.11.03 14:45:09 | 002,700,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2018.11.03 14:45:09 | 002,487,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2018.11.03 14:45:09 | 002,258,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2018.11.03 14:45:09 | 002,224,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2018.11.03 14:45:09 | 001,668,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdprt.dll [2018.11.03 14:45:09 | 001,516,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll [2018.11.03 14:45:09 | 001,373,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll [2018.11.03 14:45:09 | 001,029,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2018.11.03 14:45:09 | 000,607,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2018.11.03 14:45:08 | 002,172,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2018.11.03 14:45:08 | 001,946,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2018.11.03 14:45:08 | 001,639,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2018.11.03 14:45:08 | 001,589,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll [2018.11.03 14:45:08 | 001,456,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2018.11.03 14:45:08 | 001,364,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll [2018.11.03 14:45:08 | 001,180,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll [2018.11.03 14:45:08 | 001,127,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nettrace.dll [2018.11.03 14:45:08 | 001,034,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2018.11.03 14:45:08 | 000,894,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2018.11.03 14:45:08 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2018.11.03 14:45:08 | 000,808,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2018.11.03 14:45:08 | 000,743,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintRenderAPIHost.DLL [2018.11.03 14:45:08 | 000,717,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_StorageSense.dll [2018.11.03 14:45:08 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll [2018.11.03 14:45:08 | 000,611,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spaceport.sys [2018.11.03 14:45:08 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2018.11.03 14:45:08 | 000,505,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TextInputFramework.dll [2018.11.03 14:45:08 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvrcp.dll [2018.11.03 14:45:07 | 002,405,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll [2018.11.03 14:45:07 | 001,551,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2018.11.03 14:45:07 | 001,535,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2018.11.03 14:45:07 | 001,257,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2018.11.03 14:45:07 | 001,189,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll [2018.11.03 14:45:07 | 001,140,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2018.11.03 14:45:07 | 001,130,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll [2018.11.03 14:45:07 | 001,098,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll [2018.11.03 14:45:07 | 001,062,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2018.11.03 14:45:07 | 000,982,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2018.11.03 14:45:07 | 000,793,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2018.11.03 14:45:07 | 000,790,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe [2018.11.03 14:45:07 | 000,787,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys [2018.11.03 14:45:07 | 000,766,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2018.11.03 14:45:07 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdh.dll [2018.11.03 14:45:07 | 000,662,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe [2018.11.03 14:45:07 | 000,660,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2018.11.03 14:45:07 | 000,632,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpsvc.dll [2018.11.03 14:45:07 | 000,622,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdh.dll [2018.11.03 14:45:07 | 000,566,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2018.11.03 14:45:07 | 000,560,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys [2018.11.03 14:45:07 | 000,514,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BTAGService.dll [2018.11.03 14:45:07 | 000,497,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Enumeration.dll [2018.11.03 14:45:07 | 000,461,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Activities.dll [2018.11.03 14:45:07 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpusersvc.dll [2018.11.03 14:45:07 | 000,424,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Enumeration.dll [2018.11.03 14:45:07 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll [2018.11.03 14:45:07 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll [2018.11.03 14:45:07 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll [2018.11.03 14:45:07 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll [2018.11.03 14:45:07 | 000,272,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll [2018.11.03 14:45:07 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafBth.dll [2018.11.03 14:45:07 | 000,269,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll [2018.11.03 14:45:07 | 000,185,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll [2018.11.03 14:45:07 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageComponentsInstaller.dll [2018.11.03 14:45:07 | 000,175,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spacedump.sys [2018.11.03 14:45:07 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\officecsp.dll [2018.11.03 14:45:07 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ofdeploy.exe [2018.11.03 14:45:07 | 000,076,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvservice.sys [2018.11.03 14:45:07 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll [2018.11.03 14:45:06 | 001,124,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdprt.dll [2018.11.03 14:45:06 | 001,121,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll [2018.11.03 14:45:06 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll [2018.11.03 14:45:06 | 000,885,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll [2018.11.03 14:45:06 | 000,868,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll [2018.11.03 14:45:06 | 000,796,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2018.11.03 14:45:06 | 000,761,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nshwfp.dll [2018.11.03 14:45:06 | 000,735,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2018.11.03 14:45:06 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\osk.exe [2018.11.03 14:45:06 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nshwfp.dll [2018.11.03 14:45:06 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll [2018.11.03 14:45:06 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2018.11.03 14:45:06 | 000,567,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll [2018.11.03 14:45:06 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll [2018.11.03 14:45:06 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nltest.exe [2018.11.03 14:45:06 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe [2018.11.03 14:45:06 | 000,463,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll [2018.11.03 14:45:06 | 000,413,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2018.11.03 14:45:06 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll [2018.11.03 14:45:06 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2018.11.03 14:45:06 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll [2018.11.03 14:45:06 | 000,396,304 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll [2018.11.03 14:45:06 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll [2018.11.03 14:45:06 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvctpSvc.dll [2018.11.03 14:45:06 | 000,368,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\thumbcache.dll [2018.11.03 14:45:06 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe [2018.11.03 14:45:06 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll [2018.11.03 14:45:06 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll [2018.11.03 14:45:06 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wisp.dll [2018.11.03 14:45:06 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scecli.dll [2018.11.03 14:45:06 | 000,236,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll [2018.11.03 14:45:06 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll [2018.11.03 14:45:06 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winnat.sys [2018.11.03 14:45:06 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll [2018.11.03 14:45:06 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wisp.dll [2018.11.03 14:45:06 | 000,221,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeManagerObj.dll [2018.11.03 14:45:06 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scecli.dll [2018.11.03 14:45:06 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2018.11.03 14:45:06 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll [2018.11.03 14:45:06 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2018.11.03 14:45:06 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll [2018.11.03 14:45:06 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spacebridge.dll [2018.11.03 14:45:06 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spacebridge.dll [2018.11.03 14:45:06 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2018.11.03 14:45:06 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2018.11.03 14:45:06 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2018.11.03 14:45:06 | 000,135,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll [2018.11.03 14:45:06 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll [2018.11.03 14:45:06 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys [2018.11.03 14:45:06 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dab.dll [2018.11.03 14:45:06 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\INETRES.dll [2018.11.03 14:45:06 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2018.11.03 14:45:06 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvrcpAppSvc.dll [2018.11.03 14:45:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vhf.sys [2018.11.03 14:45:06 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspisrv.dll [2018.11.03 14:45:06 | 000,023,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hvsicontainerservice.dll [2018.11.02 21:11:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\xlive [2018.11.02 21:11:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2018.11.02 21:11:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE [2018.11.02 21:11:45 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_7.dll [2018.11.02 21:11:45 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_7.dll [2018.11.02 21:11:45 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_7.dll [2018.11.02 21:11:45 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_7.dll [2018.11.02 21:11:45 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_5.dll [2018.11.02 21:11:45 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_5.dll [2018.11.02 21:11:44 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_43.dll [2018.11.02 21:11:44 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_43.dll [2018.11.02 21:11:44 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_43.dll [2018.11.02 21:11:44 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_43.dll [2018.11.02 21:11:44 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_43.dll [2018.11.02 21:11:44 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_43.dll [2018.11.02 21:11:44 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_43.dll [2018.11.02 21:11:44 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_43.dll [2018.11.02 21:11:44 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_43.dll [2018.11.02 21:11:44 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_43.dll [2018.11.02 21:11:43 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_6.dll [2018.11.02 21:11:43 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_6.dll [2018.11.02 21:11:43 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_5.dll [2018.11.02 21:11:43 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_5.dll [2018.11.02 21:11:43 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_6.dll [2018.11.02 21:11:43 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_5.dll [2018.11.02 21:11:43 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_6.dll [2018.11.02 21:11:43 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_5.dll [2018.11.02 21:11:43 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_4.dll [2018.11.02 21:11:43 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_4.dll [2018.11.02 21:11:43 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_7.dll [2018.11.02 21:11:43 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_7.dll [2018.11.02 21:11:42 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_42.dll [2018.11.02 21:11:42 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_42.dll [2018.11.02 21:11:42 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_42.dll [2018.11.02 21:11:42 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_42.dll [2018.11.02 21:11:42 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_42.dll [2018.11.02 21:11:42 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_42.dll [2018.11.02 21:11:41 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_42.dll [2018.11.02 21:11:41 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_41.dll [2018.11.02 21:11:41 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_42.dll [2018.11.02 21:11:41 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_41.dll [2018.11.02 21:11:41 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_42.dll [2018.11.02 21:11:41 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_41.dll [2018.11.02 21:11:41 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_42.dll [2018.11.02 21:11:41 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_41.dll [2018.11.02 21:11:40 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_41.dll [2018.11.02 21:11:40 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_41.dll [2018.11.02 21:11:40 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_4.dll [2018.11.02 21:11:40 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_4.dll [2018.11.02 21:11:40 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_4.dll [2018.11.02 21:11:40 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_4.dll [2018.11.02 21:11:40 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_3.dll [2018.11.02 21:11:40 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_3.dll [2018.11.02 21:11:40 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_6.dll [2018.11.02 21:11:40 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_6.dll [2018.11.02 21:11:39 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_40.dll [2018.11.02 21:11:39 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_40.dll [2018.11.02 21:11:39 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_40.dll [2018.11.02 21:11:39 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_40.dll [2018.11.02 21:11:39 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_40.dll [2018.11.02 21:11:39 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_3.dll [2018.11.02 21:11:39 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_3.dll [2018.11.02 21:11:39 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_40.dll [2018.11.02 21:11:39 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_3.dll [2018.11.02 21:11:39 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_3.dll [2018.11.02 21:11:39 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_2.dll [2018.11.02 21:11:39 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_2.dll [2018.11.02 21:11:38 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_39.dll [2018.11.02 21:11:38 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll [2018.11.02 21:11:38 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_39.dll [2018.11.02 21:11:38 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_2.dll [2018.11.02 21:11:38 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_2.dll [2018.11.02 21:11:38 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll [2018.11.02 21:11:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_2.dll [2018.11.02 21:11:38 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_2.dll [2018.11.02 21:11:38 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_1.dll [2018.11.02 21:11:38 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_1.dll [2018.11.02 21:11:38 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_5.dll [2018.11.02 21:11:38 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_5.dll [2018.11.02 21:11:37 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_39.dll [2018.11.02 21:11:37 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll [2018.11.02 21:11:37 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_1.dll [2018.11.02 21:11:37 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_1.dll [2018.11.02 21:11:37 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_1.dll [2018.11.02 21:11:37 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_1.dll [2018.11.02 21:11:37 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_0.dll [2018.11.02 21:11:37 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_0.dll [2018.11.02 21:11:37 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_4.dll [2018.11.02 21:11:37 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_4.dll [2018.11.02 21:11:36 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_38.dll [2018.11.02 21:11:36 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_38.dll [2018.11.02 21:11:36 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_38.dll [2018.11.02 21:11:36 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_38.dll [2018.11.02 21:11:36 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_38.dll [2018.11.02 21:11:36 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_0.dll [2018.11.02 21:11:36 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_0.dll [2018.11.02 21:11:36 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_38.dll [2018.11.02 21:11:36 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_0.dll [2018.11.02 21:11:36 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_0.dll [2018.11.02 21:11:35 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_37.dll [2018.11.02 21:11:35 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_37.dll [2018.11.02 21:11:35 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_37.dll [2018.11.02 21:11:35 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_37.dll [2018.11.02 21:11:35 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_37.dll [2018.11.02 21:11:35 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_37.dll [2018.11.02 21:11:35 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_10.dll [2018.11.02 21:11:35 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_10.dll [2018.11.02 21:11:35 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_3.dll [2018.11.02 21:11:35 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_3.dll [2018.11.02 21:11:34 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_36.dll [2018.11.02 21:11:34 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_36.dll [2018.11.02 21:11:34 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_36.dll [2018.11.02 21:11:34 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_36.dll [2018.11.02 21:11:34 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_36.dll [2018.11.02 21:11:34 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_36.dll [2018.11.02 21:11:33 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_35.dll [2018.11.02 21:11:33 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_35.dll [2018.11.02 21:11:33 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_35.dll [2018.11.02 21:11:33 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_35.dll [2018.11.02 21:11:33 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_35.dll [2018.11.02 21:11:33 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_35.dll [2018.11.02 21:11:33 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_9.dll [2018.11.02 21:11:33 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_9.dll [2018.11.02 21:11:32 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_34.dll [2018.11.02 21:11:32 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_34.dll [2018.11.02 21:11:32 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_34.dll [2018.11.02 21:11:32 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_34.dll [2018.11.02 21:11:32 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_8.dll [2018.11.02 21:11:32 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_8.dll [2018.11.02 21:11:32 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_2.dll [2018.11.02 21:11:32 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_2.dll [2018.11.02 21:11:31 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_34.dll [2018.11.02 21:11:31 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_34.dll [2018.11.02 21:11:31 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_33.dll [2018.11.02 21:11:31 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_33.dll [2018.11.02 21:11:31 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_33.dll [2018.11.02 21:11:31 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_33.dll [2018.11.02 21:11:31 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_7.dll [2018.11.02 21:11:31 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_7.dll [2018.11.02 21:11:31 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_3.dll [2018.11.02 21:11:31 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_3.dll [2018.11.02 21:11:30 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_33.dll [2018.11.02 21:11:30 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_33.dll [2018.11.02 21:11:30 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10.dll [2018.11.02 21:11:30 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10.dll [2018.11.02 21:11:30 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_6.dll [2018.11.02 21:11:30 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_5.dll [2018.11.02 21:11:30 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_6.dll [2018.11.02 21:11:30 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_5.dll [2018.11.02 21:11:29 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_32.dll [2018.11.02 21:11:29 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_31.dll [2018.11.02 21:11:29 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_32.dll [2018.11.02 21:11:29 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_31.dll [2018.11.02 21:11:29 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_4.dll [2018.11.02 21:11:29 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_3.dll [2018.11.02 21:11:29 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_4.dll [2018.11.02 21:11:29 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_3.dll [2018.11.02 21:11:29 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_1.dll [2018.11.02 21:11:29 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_1.dll [2018.11.02 21:11:28 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_2.dll [2018.11.02 21:11:28 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_1.dll [2018.11.02 21:11:28 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_2.dll [2018.11.02 21:11:28 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_1.dll [2018.11.02 21:11:28 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_2.dll [2018.11.02 21:11:28 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_1.dll [2018.11.02 21:11:28 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_2.dll [2018.11.02 21:11:28 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_1.dll [2018.11.02 21:11:26 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_30.dll [2018.11.02 21:11:26 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_30.dll [2018.11.02 21:11:25 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_29.dll [2018.11.02 21:11:25 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_28.dll [2018.11.02 21:11:25 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_29.dll [2018.11.02 21:11:25 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_28.dll [2018.11.02 21:11:25 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_0.dll [2018.11.02 21:11:25 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_0.dll [2018.11.02 21:11:25 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_0.dll [2018.11.02 21:11:25 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_0.dll [2018.11.02 21:11:24 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_25.dll [2018.11.02 21:11:24 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_27.dll [2018.11.02 21:11:24 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_26.dll [2018.11.02 21:11:24 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_25.dll [2018.11.02 21:11:24 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_27.dll [2018.11.02 21:11:24 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_26.dll [2018.11.02 21:11:23 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_24.dll [2018.11.02 21:11:23 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_24.dll [2018.10.29 12:42:09 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Roaming\EasyAntiCheat [2018.10.29 12:42:08 | 000,000,000 | ---D | C] -- C:\Users\janek\Documents\My Games [2018.10.29 12:39:42 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Local\Ubisoft Game Launcher [2018.10.29 12:39:42 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft [2018.10.29 12:39:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2018.10.28 10:37:33 | 000,000,000 | ---D | C] -- C:\Users\janek\Documents\Battlefield 1 [2018.10.28 07:55:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 1 [2018.10.28 07:55:05 | 000,000,000 | -H-D | C] -- C:\Program Files\Common FilesEAInstaller [2018.10.18 15:41:55 | 000,000,000 | ---D | C] -- C:\Users\janek\AppData\Local\OneDrive [2018.10.13 14:38:30 | 002,017,888 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6441634.dll [2018.10.13 14:38:30 | 001,468,464 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6441634.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2018.11.10 10:54:51 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2018.11.09 07:11:45 | 001,790,646 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2018.11.09 07:11:45 | 000,791,560 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat [2018.11.09 07:11:45 | 000,708,090 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2018.11.09 07:11:45 | 000,156,652 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat [2018.11.09 07:11:45 | 000,136,392 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2018.11.09 07:05:26 | 2556,477,439 | -HS- | M] () -- C:\hiberfil.sys [2018.11.09 07:05:26 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys [2018.11.04 23:21:46 | 000,000,093 | ---- | M] () -- C:\Users\janek\AppData\Local\fusioncache.dat [2018.11.04 23:21:37 | 001,789,738 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI [2018.11.03 15:01:38 | 000,335,808 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2018.10.23 07:33:13 | 000,328,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdFilter.sys [2018.10.23 07:33:13 | 000,060,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdNisDrv.sys [2018.10.23 07:33:13 | 000,046,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdBoot.sys [2018.10.21 14:04:54 | 002,267,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntSubsystems64.dll [2018.10.21 14:00:32 | 001,516,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll [2018.10.21 14:00:31 | 000,790,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe [2018.10.21 14:00:23 | 000,396,304 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll [2018.10.21 14:00:18 | 001,639,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2018.10.21 13:59:51 | 000,766,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2018.10.21 13:59:43 | 000,236,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll [2018.10.21 13:46:50 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2018.10.21 13:46:24 | 013,572,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2018.10.21 13:46:11 | 004,393,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2018.10.21 13:45:43 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll [2018.10.21 13:44:40 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\INETRES.dll [2018.10.21 13:44:02 | 000,623,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\osk.exe [2018.10.21 13:43:46 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageComponentsInstaller.dll [2018.10.21 13:43:27 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wisp.dll [2018.10.21 13:43:17 | 000,345,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll [2018.10.21 13:42:54 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll [2018.10.21 13:42:41 | 001,127,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nettrace.dll [2018.10.21 13:42:28 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll [2018.10.21 13:42:11 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdh.dll [2018.10.21 13:42:05 | 000,592,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll [2018.10.21 13:41:58 | 003,649,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2018.10.21 13:41:39 | 001,180,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll [2018.10.21 13:41:26 | 001,364,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll [2018.10.21 13:41:09 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe [2018.10.21 13:40:34 | 000,463,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe [2018.10.21 12:41:22 | 001,540,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppVEntSubsystems32.dll [2018.10.21 12:41:11 | 000,023,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hvsicontainerservice.dll [2018.10.21 12:38:53 | 000,660,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2018.10.21 12:38:51 | 000,221,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeManagerObj.dll [2018.10.21 12:38:44 | 000,662,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe [2018.10.21 12:28:38 | 012,501,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2018.10.21 12:23:57 | 000,622,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdh.dll [2018.10.21 12:23:49 | 002,892,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2018.10.21 12:23:40 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll [2018.10.21 12:22:14 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wisp.dll [2018.10.21 12:22:09 | 002,405,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll [2018.10.21 10:29:22 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll [2018.10.21 09:44:20 | 000,868,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll [2018.10.21 08:54:06 | 001,035,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2018.10.21 08:53:32 | 000,272,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll [2018.10.21 08:53:32 | 000,269,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll [2018.10.21 08:48:21 | 005,602,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StartTileData.dll [2018.10.21 08:47:58 | 001,221,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2018.10.21 08:47:56 | 000,566,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2018.10.21 08:47:51 | 000,076,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvservice.sys [2018.10.21 08:47:48 | 001,029,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2018.10.21 08:47:47 | 001,062,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2018.10.21 08:47:45 | 000,135,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll [2018.10.21 08:47:14 | 000,368,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\thumbcache.dll [2018.10.21 08:46:59 | 000,497,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Enumeration.dll [2018.10.21 08:46:42 | 000,611,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spaceport.sys [2018.10.21 08:46:40 | 000,717,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_StorageSense.dll [2018.10.21 08:46:20 | 007,432,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2018.10.21 08:46:20 | 000,560,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys [2018.10.21 08:46:12 | 007,519,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2018.10.21 08:46:07 | 009,089,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2018.10.21 08:46:00 | 000,413,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2018.10.21 08:45:56 | 000,982,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2018.10.21 08:45:55 | 003,283,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2018.10.21 08:45:55 | 001,257,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2018.10.21 08:45:53 | 000,793,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2018.10.21 08:45:50 | 001,946,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2018.10.21 08:45:50 | 000,885,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll [2018.10.21 08:45:48 | 000,607,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2018.10.21 08:45:47 | 001,098,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll [2018.10.21 08:45:47 | 000,175,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spacedump.sys [2018.10.21 08:45:46 | 001,140,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2018.10.21 08:45:44 | 001,456,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2018.10.21 08:45:38 | 000,185,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll [2018.10.21 08:30:11 | 025,855,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2018.10.21 08:28:11 | 016,592,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2018.10.21 08:22:53 | 004,384,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll [2018.10.21 08:22:19 | 008,189,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll [2018.10.21 08:22:06 | 004,710,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2018.10.21 08:21:26 | 001,589,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll [2018.10.21 08:21:01 | 003,392,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2018.10.21 08:20:48 | 003,397,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2018.10.21 08:20:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll [2018.10.21 08:20:27 | 000,424,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Enumeration.dll [2018.10.21 08:20:14 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spacebridge.dll [2018.10.21 08:20:02 | 000,141,312 | ---- | M] () -- C:\WINDOWS\SysNative\DataStoreCacheDumpTool.exe [2018.10.21 08:19:52 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vhf.sys [2018.10.21 08:19:48 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspisrv.dll [2018.10.21 08:19:47 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ofdeploy.exe [2018.10.21 08:19:37 | 000,137,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2018.10.21 08:19:37 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys [2018.10.21 08:19:29 | 006,039,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2018.10.21 08:19:29 | 000,228,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winnat.sys [2018.10.21 08:19:27 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nltest.exe [2018.10.21 08:19:24 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll [2018.10.21 08:19:23 | 000,463,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll [2018.10.21 08:19:21 | 000,209,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2018.10.21 08:19:20 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll [2018.10.21 08:19:19 | 006,569,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2018.10.21 08:19:13 | 001,130,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll [2018.10.21 08:19:07 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvrcpAppSvc.dll [2018.10.21 08:19:06 | 002,487,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2018.10.21 08:19:04 | 000,808,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2018.10.21 08:19:01 | 000,567,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll [2018.10.21 08:19:00 | 000,505,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TextInputFramework.dll [2018.10.21 08:18:54 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvctpSvc.dll [2018.10.21 08:18:54 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\officecsp.dll [2018.10.21 08:18:50 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dab.dll [2018.10.21 08:18:45 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll [2018.10.21 08:18:43 | 000,894,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2018.10.21 08:18:36 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll [2018.10.21 08:18:27 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scecli.dll [2018.10.21 08:18:26 | 000,273,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll [2018.10.21 08:18:22 | 000,761,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nshwfp.dll [2018.10.21 08:18:21 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2018.10.21 08:18:12 | 000,461,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Activities.dll [2018.10.21 08:18:11 | 002,738,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2018.10.21 08:17:40 | 000,764,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\NfcCx.dll [2018.10.21 08:17:38 | 007,577,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2018.10.21 08:17:38 | 000,787,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys [2018.10.21 08:17:38 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthAvrcp.dll [2018.10.21 08:17:35 | 002,172,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2018.10.21 08:17:25 | 000,625,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll [2018.10.21 08:17:19 | 001,826,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll [2018.10.21 08:17:13 | 001,668,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdprt.dll [2018.10.21 08:17:02 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafBth.dll [2018.10.21 08:16:45 | 000,514,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BTAGService.dll [2018.10.21 08:16:32 | 002,368,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll [2018.10.21 08:16:16 | 001,535,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2018.10.21 08:16:06 | 000,323,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll [2018.10.21 08:16:03 | 000,847,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2018.10.21 08:15:54 | 003,212,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll [2018.10.21 08:15:41 | 001,551,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2018.10.21 08:15:11 | 000,401,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll [2018.10.21 08:15:03 | 000,743,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintRenderAPIHost.DLL [2018.10.21 08:14:53 | 000,632,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpsvc.dll [2018.10.21 08:14:52 | 002,224,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2018.10.21 08:14:51 | 000,796,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2018.10.21 08:14:45 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll [2018.10.21 08:14:36 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2018.10.21 08:14:29 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpusersvc.dll [2018.10.21 08:14:25 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2018.10.21 08:14:24 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2018.10.21 08:14:17 | 001,373,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll [2018.10.21 08:11:41 | 022,017,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2018.10.21 08:09:34 | 013,873,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2018.10.21 08:07:07 | 006,661,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll [2018.10.21 08:02:55 | 002,700,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2018.10.21 08:02:52 | 002,966,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2018.10.21 08:02:21 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spacebridge.dll [2018.10.21 08:01:15 | 001,189,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll [2018.10.21 08:01:02 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll [2018.10.21 08:00:29 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll [2018.10.21 08:00:23 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scecli.dll [2018.10.21 07:59:48 | 002,258,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2018.10.21 07:59:19 | 005,777,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2018.10.21 07:59:18 | 000,602,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nshwfp.dll [2018.10.21 07:59:14 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2018.10.21 07:58:54 | 000,608,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2018.10.21 07:58:13 | 001,124,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdprt.dll [2018.10.21 07:58:04 | 000,230,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll [2018.10.21 07:56:23 | 000,735,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2018.10.21 06:59:27 | 000,001,314 | ---- | M] () -- C:\WINDOWS\SysNative\tcbres.wim [2018.10.12 16:38:18 | 000,978,312 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1-999-0-0-0.dll [2018.10.12 16:38:18 | 000,978,312 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1.dll [2018.10.12 16:38:18 | 000,845,184 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1-999-0-0-0.dll [2018.10.12 16:38:18 | 000,845,184 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1.dll [2018.10.12 16:38:18 | 000,268,168 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo-1-999-0-0-0.exe [2018.10.12 16:38:18 | 000,268,168 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo.exe [2018.10.12 16:38:18 | 000,243,616 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-999-0-0-0.exe [2018.10.12 16:38:18 | 000,243,616 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe [2018.10.12 16:37:16 | 000,631,664 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll [2018.10.12 16:37:16 | 000,522,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll [2018.10.12 16:37:14 | 001,455,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll [2018.10.12 16:37:12 | 001,122,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll [2018.10.12 16:37:04 | 001,997,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll [2018.10.12 16:37:02 | 001,508,112 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll [2018.10.12 16:37:02 | 001,468,464 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6441634.dll [2018.10.12 16:37:00 | 002,017,888 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6441634.dll [2018.10.12 16:36:58 | 000,750,256 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll [2018.10.12 16:36:58 | 000,608,488 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll [2018.10.12 16:36:54 | 004,937,960 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll [2018.10.12 16:36:54 | 004,310,600 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll [2018.10.12 16:36:44 | 040,254,128 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll [2018.10.12 16:36:36 | 035,151,944 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll [2018.10.12 13:36:54 | 015,907,200 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll [2018.10.12 13:36:50 | 013,202,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll [2018.10.12 13:36:42 | 035,298,072 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll [2018.10.12 13:36:34 | 029,973,400 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll [2018.10.12 13:36:28 | 000,822,552 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmcumd.dll [2018.10.12 13:36:16 | 001,167,376 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll [2018.10.12 13:36:14 | 000,914,552 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvfatbinaryLoader.dll [2018.10.12 13:36:12 | 000,794,416 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll [2018.10.12 13:36:10 | 000,637,456 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll [2018.10.12 13:36:08 | 001,471,392 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFThevc.dll [2018.10.12 13:36:06 | 001,151,960 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFThevc.dll [2018.10.12 13:36:04 | 001,462,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll [2018.10.12 13:36:02 | 001,145,512 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll [2018.10.12 13:35:20 | 019,705,728 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll [2018.10.12 13:35:16 | 016,984,816 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll [2018.10.12 13:35:12 | 004,990,000 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll [2018.10.12 13:35:10 | 004,249,528 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2018.11.04 23:21:46 | 000,000,093 | ---- | C] () -- C:\Users\janek\AppData\Local\fusioncache.dat [2018.11.04 23:21:37 | 001,789,738 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI [2018.11.03 15:11:10 | 000,978,312 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1-999-0-0-0.dll [2018.11.03 15:11:10 | 000,978,312 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1.dll [2018.11.03 15:11:10 | 000,845,184 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1-999-0-0-0.dll [2018.11.03 15:11:10 | 000,845,184 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1.dll [2018.11.03 15:11:10 | 000,268,168 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo-1-999-0-0-0.exe [2018.11.03 15:11:10 | 000,268,168 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo.exe [2018.11.03 15:11:10 | 000,243,616 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-999-0-0-0.exe [2018.11.03 15:11:10 | 000,243,616 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe [2018.11.03 14:45:06 | 000,141,312 | ---- | C] () -- C:\WINDOWS\SysNative\DataStoreCacheDumpTool.exe [2018.11.03 14:45:06 | 000,001,314 | ---- | C] () -- C:\WINDOWS\SysNative\tcbres.wim [2018.08.02 19:14:14 | 000,019,520 | ---- | C] () -- C:\WINDOWS\wincache.dat [2018.06.13 07:47:03 | 002,841,312 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll [2018.06.03 17:32:19 | 000,003,271 | ---- | C] () -- C:\Users\janek\AppData\Local\recently-used.xbel [2018.06.03 15:27:21 | 000,000,080 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc [2018.06.03 15:20:26 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat [2018.05.06 13:39:05 | 000,143,360 | ---- | C] () -- C:\WINDOWS\SysWow64\VmixP8.dll [2018.05.06 13:39:05 | 000,000,049 | ---- | C] () -- C:\WINDOWS\SysWow64\cmasiop.ini [2018.05.06 13:39:04 | 000,047,616 | ---- | C] () -- C:\WINDOWS\Cmicnfgp.ini.cfl [2018.05.06 13:39:03 | 000,004,817 | ---- | C] () -- C:\WINDOWS\Cmicnfgp.ini.cfg [2018.05.06 13:39:03 | 000,001,051 | ---- | C] () -- C:\WINDOWS\Cmicnfgp.ini.imi [2018.05.06 13:39:03 | 000,000,594 | ---- | C] () -- C:\WINDOWS\cmudaxp.ini [2018.05.06 10:31:33 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2018.05.06 09:45:02 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\HsMgr.exe [2018.05.06 09:42:42 | 000,000,000 | ---- | C] () -- C:\ProgramData\DP45977C.lfl [2018.04.12 00:38:34 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2018.04.12 00:38:34 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2018.04.12 00:35:13 | 000,034,304 | ---- | C] () -- C:\WINDOWS\SysWow64\vmstaging.dll [2018.04.12 00:34:55 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2018.04.12 00:34:50 | 000,054,272 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2018.04.12 00:34:49 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2018.04.12 00:34:47 | 000,364,200 | ---- | C] () -- C:\WINDOWS\SysWow64\InputHost.dll [2018.04.12 00:34:46 | 003,575,808 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll [2018.04.12 00:34:46 | 000,025,600 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe [2018.04.12 00:34:45 | 000,329,216 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll [2018.04.12 00:34:45 | 000,223,232 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll [2018.04.12 00:34:45 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat [2018.04.12 00:34:45 | 000,111,616 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll [2018.04.12 00:34:45 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll [2018.04.12 00:34:36 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2018.04.12 00:34:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2018.08.11 19:29:32 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\windows.storage.dll -- [2018.10.21 08:46:20 | 007,432,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\windows.storage.dll -- [2018.10.21 08:19:29 | 006,039,560 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2018.04.12 00:34:40 | 000,973,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2018.04.12 00:34:55 | 000,785,408 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2018.04.12 00:34:40 | 000,524,288 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2018.06.02 17:18:43 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\.mono [2018.05.06 13:39:41 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\ASUS [2018.07.23 13:49:11 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Battle.net [2018.05.06 09:52:58 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\DAEMON Tools Lite [2018.05.10 16:47:53 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\discord [2018.05.06 10:06:38 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\DiskDefrag [2018.10.29 12:42:09 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\EasyAntiCheat [2018.11.09 07:05:01 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\EurekaLog [2018.08.11 19:34:40 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Fallout2 [2018.06.03 14:15:47 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Fatshark [2018.05.06 10:06:38 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\GlarySoft [2018.05.06 10:00:50 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\inkscape [2018.05.08 19:41:45 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\library_dir [2018.05.06 14:15:08 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\NapiProjekt [2018.06.02 17:20:31 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Obsidian Tools [2018.10.29 21:04:02 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Origin [2018.11.10 14:01:37 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Plays [2018.10.02 22:14:01 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\PlaysTV [2018.11.09 19:07:11 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\qBittorrent [2018.05.08 19:41:57 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Raptr [2018.06.03 14:15:47 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\REVOLT [2018.11.05 18:15:50 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Spotify [2018.05.06 09:51:00 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Thunderbird [2018.11.09 22:22:18 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\TS3Client [2018.09.16 15:07:47 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Twitch [2018.11.10 14:01:33 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\ViberPC [2018.05.06 11:16:14 | 000,000,000 | ---D | M] -- C:\Users\janek\AppData\Roaming\Wargaming.net [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 236 bytes -> C:\Users\janek\OneDrive:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.SyncRootIdentity < End of report > OTL EXTRAS Spoiler OTL Extras logfile created on: 10.11.2018 14:01:53 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\janek\Downloads 64bit- Enterprise Edition (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.17134.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy 15,95 Gb Total Physical Memory | 13,56 Gb Available Physical Memory | 84,99% Memory free 18,33 Gb Paging File | 15,38 Gb Available in Paging File | 83,93% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 237,94 Gb Total Space | 44,44 Gb Free Space | 18,68% Space Free | Partition Type: NTFS Drive D: | 447,13 Gb Total Space | 291,72 Gb Free Space | 65,24% Space Free | Partition Type: NTFS Computer Name: DESKTOP-DOSSHEQ | User Name: janek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [Browse with FastStone] -- "C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe" "%1" (FastStone Soft) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang () Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [Browse with FastStone] -- "C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe" "%1" (FastStone Soft) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" () Directory [napiprojekt0] -- "C:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang () Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP\663b216b-7a26-419c-b5b0-0d2ec55d89ed] "GUID" = 663b216b-7a26-419c-b5b0-0d2ec55d89ed "CALLINGBINARY" = C:\Users\janek\AppData\Local\Microsoft\OneDrive\OneDrive.exe -- (Microsoft Corporation) "NAMESPACE" = C:\Users\janek\OneDrive -- [2018.10.18 07:23:34 | 000,000,000 | R--D | M] "DISPLAYNAME" = OneDrive "EXEPATH" = C:\Users\janek\AppData\Local\Microsoft\OneDrive\OneDrive.exe -- (Microsoft Corporation) "USERSID" = S-1-5-21-1000625825-2706868552-3366255526-1001 "TYPE" = 0 "SIGNED" = 1 "FLAGS" = 0 "STATE" = 0 "RESTOREURL" = https://onedrive.live.com?v=restore&suggestedRestoreDate=2018-10-18T06:23:33Z 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 76 81 82 70 1E E5 D3 01 [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{183CBA0A-C89B-4E51-A145-D83D9785DECF}" = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{1BFEA258-77B4-469E-B265-831FA136B30F}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | "{43DEC578-C4E9-494C-BFCD-55BEF4651E50}" = lport=48010 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | "{4F3CC050-E948-4967-8B9B-8631C7DF5E3E}" = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | "{5CA35CAD-A847-47B6-AE30-1B71ABC9BA56}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{A8C80037-049A-4DD4-BBF7-9E967DC5E1A4}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{FD3DFE80-AC5E-4D60-81A0-F9BB43FB0040}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00147FBC-B919-4AFB-99DF-4E64DBCFC569}" = dir=in | name=dolby access | "{035974CD-0F59-415B-8229-9336120C1306}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{081C8814-FD38-4F14-953F-B6B7C8A8EC3F}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{0AEA01AD-190E-416C-AA99-5D30EC831933}" = dir=out | name=@{microsoft.getstarted_6.15.12641.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | "{0EDC1B4E-F85B-4B20-894A-2C76D9D164AF}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17133.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{1051A559-D5F8-43B9-8EF6-7D264B305E82}" = dir=out | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{112BE2CE-7D7D-483F-85AE-FCBC930A1E8A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | "{129AC707-AB79-46E0-A842-4EF01C64D0BA}" = dir=out | name=@{microsoft.zunevideo_10.18082.13811.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{15C6EF00-D0CD-4E28-95B3-01510FDA3F8D}" = dir=in | name=@{microsoft.oneconnect_5.1809.2571.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | "{175063B9-A2DA-40A5-A8AC-CCAAFA631F87}" = dir=out | name=@{microsoft.windowsmaps_5.1809.2762.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | "{1820A4E1-A4D0-4506-AC43-0D66A5142D9C}" = dir=out | name=@{microsoft.gethelp_10.1706.12921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | "{18DD4F6D-ADD1-4AA5-AA0E-3BD7ECCA6268}" = dir=in | name=@{microsoft.zunevideo_10.18082.13811.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{1B4FFF55-6306-4237-93CC-947E50EC35F2}" = dir=out | name=@{microsoft.windows.holographicfirstrun_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.holographicfirstrun/resources/pkgdisplayname} | "{22AA0190-02F3-4421-B6F0-D20CC250F99D}" = protocol=6 | dir=in | app=c:\program files (x86)\napiprojekt\napisy.exe | "{230AB229-9F8B-426F-A78F-DE845B2F4AA4}" = dir=out | name=shell input application | "{2354AB13-328A-40C8-98D8-9B8816B6C444}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{24AF5F1C-F6AA-4EEB-B8A4-B04E70B5D670}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{2A0A4444-D8BC-4DB3-A133-55F406E5347A}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{2B633157-087E-4B25-9ABB-14A3F185B136}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | "{2C66B172-4B53-4D33-AFE8-B19D8B50F977}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe | "{2D8BC413-6535-4723-9824-6D721D5F255B}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1805.2331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{2E658F15-AA3B-451E-83EC-96C05123B05D}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\rust\rust.exe | "{2EEF5827-3237-4704-A943-C90E03AE3668}" = protocol=6 | dir=in | app=c:\program files (x86)\qbittorrent\qbittorrent.exe | "{31D3C416-DA81-4EB8-AB47-A02776450135}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{34DB951D-6C0F-44DC-9E32-6F705EB05CCA}" = dir=out | name=@{microsoft.windows.photos_2018.18081.14710.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{359221AF-77B6-4253-BF4B-DCE44ACF56BF}" = dir=in | name=@{microsoft.microsoftofficehub_17.10314.31700.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{385A5505-4F1C-4C0A-BFC0-0288B399D217}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.11001.20083.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{38934BEF-71C9-467F-8C4E-9B4F7CD748BD}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | "{392EBA8F-9478-48C9-BF04-333E09AE7317}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | "{393D713E-C6C7-4279-976E-D25D9DC40EF5}" = dir=in | name=skype | "{3A002B77-65DF-44D5-8DD4-99A397604C64}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\execpubg.exe | "{3E011662-2B21-4951-80BC-F3F24C1B5B29}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | "{407F3071-A912-492D-A6A2-E7AD31D4F85F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\business tour\businesstour.exe | "{41604A47-678A-4C1F-8133-E27C7D52C442}" = dir=out | name=@{microsoft.windowscalculator_10.1809.2731.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | "{447139EE-F5F2-4AE7-AEF6-12A0149B0841}" = dir=in | name=microsoft sticky notes | "{4478D450-BBD7-4B9F-94EB-7A027FAC9201}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe | "{455309DD-7752-4731-914B-BBE9B1863C0B}" = dir=out | name=print 3d | "{46A98798-412C-4E7A-82E2-382B28856672}" = dir=out | name=xbox | "{4FA8DBB3-91BF-44F8-98C5-F8277D399D6A}" = dir=out | name=@{microsoft.windowscamera_2018.426.90.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} | "{525930C2-1C33-409F-8939-A56CE7106390}" = dir=in | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{540B7113-20AB-4F48-A0EC-3D9569A4C64B}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\rust\rust.exe | "{567E3C53-06E4-4AC8-862A-849F06D01253}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{5734D06C-E57B-4CBE-8742-2D24923460BA}" = dir=out | name=windows_ie_ac_001 | "{59D9B8B4-60A5-41E8-8AF2-B17AEA98980E}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.11001.20083.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{5ABAB924-8F9D-4870-A1C9-B620F08D00C3}" = dir=out | name=@{microsoft.zunemusic_10.18091.10321.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{5B5525B3-3583-4592-AF16-C9F6E28A30CE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe | "{6213794A-66FC-451F-8316-DFD02DDAC937}" = dir=out | name=@{microsoft.windowsstore_11810.1001.12.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{6D46AB6C-E802-41D1-926E-F12125A96B18}" = protocol=17 | dir=in | app=c:\program files (x86)\napiprojekt\napisy.exe | "{7064F3B9-D089-4EA6-A6EE-12437B50BBB7}" = dir=out | name=xbox gaming overlay | "{7148FCA5-EDCF-420E-AFBD-EC4524F42C16}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{744302D9-39AE-4993-B0D5-7BD9B709B446}" = dir=out | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{761B49E7-6CF4-4B96-8DBC-59F888D0F58E}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{77E432AA-9EE3-4689-A488-841D72ADA0C2}" = dir=out | name=@{microsoft.bingweather_4.26.12153.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{78F199A1-C956-4EBE-BF45-107D43F03E00}" = dir=out | name=@{microsoft.people_10.1808.2473.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | "{79EB5C04-7F7A-4ADA-9984-0BEEC70EFFE5}" = protocol=17 | dir=in | app=c:\games\battlefield 1\bf1trial.exe | "{7A94922E-7BAC-4381-AF3A-1F1F971CC68C}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} | "{8001FD06-F1CD-4721-8D46-2B76D0C95BB9}" = dir=out | name=@{microsoft.accountscontrol_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{835C2C9A-44C9-4BEF-B5FC-B3A27C29D685}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{851AA4D1-5E83-49B5-A9BA-36969AB24F9B}" = dir=out | name=@{microsoft.oneconnect_5.1809.2571.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | "{85DBD7DF-7E9E-4F61-A274-2A4A195E1E2A}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr inc\playstv\playstv.exe | "{85FC71D2-B65F-442F-873A-FDFCE8801097}" = dir=in | name=print 3d | "{87CB647D-8A7D-4E45-B77C-56DDE7205254}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{89E506DE-A96E-4BC1-A4F4-E2FC75F63251}" = dir=out | name=skype | "{8B1BCD27-237B-4556-86A3-340BE1445D4E}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{8DF22116-E576-40B0-8AC3-81EF20A9A792}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{90533FF0-8368-45DC-89FF-2AD4D2047C86}" = dir=in | app=c:\program files\daemon tools lite\discsoftbusservicelite.exe | "{927C92E8-8B49-4D40-9226-7ED3D94B64A5}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{927FD93D-9399-4423-A4D7-501C6D2139E4}" = protocol=17 | dir=in | app=c:\program files (x86)\qbittorrent\qbittorrent.exe | "{96607CB5-BDC8-4C0D-89E3-3CF2E18F8DF1}" = dir=out | name=@{microsoft.lockapp_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{98719943-1539-49A1-8A45-27CB33C0F3C2}" = dir=out | name=@{microsoft.xboxidentityprovider_12.45.6001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | "{9879F9C5-9C16-4610-B100-7BA43146B67E}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17134.112_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{98DDECF8-4568-478E-ADEA-14195E46159C}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | "{9ADABDFC-09CC-4F91-BD7A-7C3D9DB73803}" = protocol=17 | dir=in | app=c:\games\battlefield 1\bf1.exe | "{A1BAB302-38EB-4289-A83D-B9154682CC5F}" = dir=out | name=@{microsoft.microsoft3dviewer_5.1810.23012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | "{A93C09BE-147A-4EE2-850C-5D090BA646A7}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr inc\playstv\playstv.exe | "{ABA70BCE-BAEA-4F35-9465-327EB84E9578}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17133.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{AD098853-EB70-4D8E-8C79-CCE400494055}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | "{AD0AFF0B-408C-4EF5-ABF7-3BD8F67F2817}" = dir=out | name=dolby access | "{AE0EFBCD-7BBE-4E68-8E39-9D6E6D00A955}" = dir=out | name=xbox tcui | "{AFDEAC7E-14D5-47BE-BAB8-C4647B028A15}" = dir=in | name=@{microsoft.zunemusic_10.18091.10321.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{B2E12EC5-9CCC-4A87-8A90-556AE6282342}" = dir=out | name=xbox game bar | "{B707DAEE-514A-4E91-9B82-74D4C2C6DE1B}" = dir=in | name=xbox | "{B98B55F0-4A0B-4C46-A996-1F6C2529D56D}" = dir=in | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{BDB88DAA-90F0-442E-8790-C40D9AD8CF82}" = dir=in | name=@{microsoft.windowsstore_11810.1001.12.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{BF850086-73C6-40F5-ACBF-80D7FAC89B9A}" = dir=in | name=win32webviewhost | "{C2D10E26-24DE-4188-B57B-810C39596C91}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17133.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{C4F7C80A-2F5F-4EFC-88FD-94AA27AAA419}" = dir=in | name=onenote | "{C83E694A-0553-4576-8B33-2A98306FCE8A}" = dir=out | name=microsoft pay | "{CCB1EF2A-74F8-467D-9996-0F06CFEF0693}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\execpubg.exe | "{CCF45CB3-4FEB-4EF8-903A-51482FAD5426}" = dir=in | name=@{microsoft.messaging_4.1810.2922.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{CE8FD3FC-3F20-42B3-B8EB-C769D22D8578}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17133.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{D470F02B-C939-45FB-ACE7-84C5849EA5CA}" = dir=out | name=@{microsoft.bingnews_4.27.2643.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithtagline} | "{D55D085C-4BD2-438B-8976-65FE4B0961F7}" = protocol=6 | dir=in | app=c:\games\battlefield 1\bf1trial.exe | "{D9B6A0A3-B7E6-46D1-B22B-7AFFD36039C0}" = dir=in | name=@{microsoft.windows.photos_2018.18081.14710.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{DC092965-A1E9-46D4-991A-416B471739E7}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1805.2331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{DC1C9C0A-C2FC-446D-B488-E2170D1364EC}" = dir=out | name=microsoft sticky notes | "{DC35A3DC-39D4-402E-963E-96E6825DADD1}" = dir=in | app=c:\program files (x86)\google\chrome remote desktop\71.0.3578.15\remoting_host.exe | "{DE76D724-4325-4C3F-BA0D-B71B6D8E9DD7}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{DF1F1D04-D2DD-4EBB-89D8-4F4D3D92E835}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{E798508C-AE4A-4EF5-97E3-D9A8E4FD9299}" = dir=out | name=@{microsoft.storepurchaseapp_11810.1001.10.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | "{E9DAEC2A-83BC-4A5D-8C02-75F48A6C6C39}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{E9FE502C-5030-4D48-AB60-A210A406754E}" = dir=out | name=win32webviewhost | "{EA923F98-E10B-470F-A0BC-6C3698CD5496}" = dir=out | name=@{microsoft.microsoftofficehub_17.10314.31700.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{ECF78BD8-0389-448E-9A5E-E992B99810E8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\business tour\businesstour.exe | "{ED3F08F9-70D1-4B69-9059-667AC35F8761}" = dir=out | name=@{microsoft.mspaint_5.1809.1017.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | "{F349E84B-C6E8-4239-BCF3-7898FE1AD7E8}" = protocol=6 | dir=in | app=c:\games\battlefield 1\bf1.exe | "{F37FB59D-1A7C-4CF4-9CC9-59BF72268DE0}" = dir=out | name=@{microsoft.messaging_4.1810.2922.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{FD9E0910-5CD8-4492-A6F3-375183342CE4}" = dir=out | name=onenote | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{66C5838F-B854-4A55-89E6-A6138747A4DF}" = Epic Games Launcher Prerequisites (x64) "{81520FC5-3518-40E9-9803-70CE8A801D07}" = Intel(R) Chipset Device Software "{8D50D8C6-1E3D-3BAB-B2B7-A5399EA1EBD1}" = Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25008 "{90160000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2016 "{90160000-0015-0415-1000-0000000FF1CE}" = Microsoft Access MUI (Polish) 2016 "{90160000-0016-0415-1000-0000000FF1CE}" = Microsoft Excel MUI (Polish) 2016 "{90160000-0018-0415-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (Polish) 2016 "{90160000-0019-0415-1000-0000000FF1CE}" = Microsoft Publisher MUI (Polish) 2016 "{90160000-001A-0415-1000-0000000FF1CE}" = Microsoft Outlook MUI (Polish) 2016 "{90160000-001B-0415-1000-0000000FF1CE}" = Microsoft Word MUI (Polish) 2016 "{90160000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2016 – Deutsch "{90160000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2016 - English "{90160000-001F-0415-1000-0000000FF1CE}" = Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski "{90160000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2016 "{90160000-0044-0415-1000-0000000FF1CE}" = Microsoft InfoPath MUI (Polish) 2016 "{90160000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2016 "{90160000-0090-0415-1000-0000000FF1CE}" = Microsoft DCF MUI (Polish) 2016 "{90160000-00A1-0415-1000-0000000FF1CE}" = Microsoft OneNote MUI (Polish) 2016 "{90160000-00BA-0415-1000-0000000FF1CE}" = Microsoft Groove MUI (Polish) 2016 "{90160000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2016 "{90160000-00C1-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2016 "{90160000-00E1-0415-1000-0000000FF1CE}" = Microsoft Office OSM MUI (Polish) 2016 "{90160000-00E2-0415-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (Polish) 2016 "{90160000-012B-0415-1000-0000000FF1CE}" = Microsoft Skype for Business MUI (Polish) 2016 "{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 "{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel" = NVIDIA Ansel "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 416.34 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 416.34 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 416.34 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 3.15.0.186 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 390.41 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 33.2.0.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.18.0907 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 33.2.0.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer" = DisplayDriverAnalyzer "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = NVIDIA SHIELD Streaming "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.3.37.5 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvAbHub" = NVIDIA ABHub "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvBackend" = NVIDIA Backend "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer" = NVIDIA Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.ContainerTelemetryApiHelper" = NVIDIA TelemetryApi helper for NvContainer "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.LocalSystem" = NVIDIA LocalSystem Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.MessageBus" = NVIDIA Message Bus for NvContainer "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NetworkService" = NVIDIA NetworkService Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor" = NVAPI Monitor plugin for NvContainer "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.Session" = NVIDIA Session Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.User" = NVIDIA User Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer" = NVIDIA Display Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS" = NVIDIA Display Container LS "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayPluginWatchdog" = NVIDIA Display Watchdog Plugin "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplaySessionContainer" = NVIDIA Display Session Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs" = NVIDIA NodeJS "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvPlugin.Watchdog" = NVIDIA Watchdog Plugin for NvContainer "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry" = NVIDIA Telemetry Client "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetryContainer" = NVIDIA Telemetry Container "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvVHCI" = NVIDIA Virtual Host Controller "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_OSC" = Nvidia Share "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 3.15.0.186 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = NVIDIA SHIELD Wireless Controller Driver "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 4.08.3 "{C668F044-4825-330D-8F9F-3CBFC9F2AB89}" = Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25008 "{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 "82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1" = ShareX "CPUID CPU-Z_is1" = CPUID CPU-Z 1.80.1 "DAEMON Tools Lite" = DAEMON Tools Lite "Folder Guard" = Folder Guard "GIMP-2_is1" = GIMP 2.8.22 "Mozilla Firefox 63.0.1 (x64 pl)" = Mozilla Firefox 63.0.1 (x64 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Office16.PROPLUS" = Microsoft Office Professional Plus 2016 "Steam App 252490" = Rust "Steam App 397900" = Business Tour - Online Multiplayer Board Game "Steam App 578080" = PLAYERUNKNOWN'S BATTLEGROUNDS "Steam App 730" = Counter-Strike: Global Offensive "TeamSpeak 3 Client" = TeamSpeak 3 Client "WinRAR archiver" = WinRAR 5.40 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 "{1248EE0B-B456-495E-89D9-3D9B0268205F}" = Viber "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 "{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1" = Geeks3D FurMark 1.19.0.0 "{335B50BC-6130-4BAF-9A6A-F1561270587B}" = Battlefield™ 1 "{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{71B53BA8-4BE3-49AF-BC3E-07F392008788}" = ASUS Xonar DGX Audio "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{AC76BA86-0804-1033-1959-001824298644}" = Adobe Refresh Manager "{AC76BA86-7AD7-1045-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Polish "{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 "{bb0592a7-5772-4736-9d55-2402740085db}" = Oprogramowanie mikroukładu Intel® "{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 "{c239cea1-d49e-4e16-8e87-8c055765f7ec}" = Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 "{c6c5a357-c7ca-4a5f-9789-3bb1af579253}" = Launcher Prerequisites (x64) "{C6CDA568-CD91-3CA0-9EDE-DAD98A13D6E1}" = Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25008 "{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{E6222D59-608C-3018-B86B-69BD241ACDE5}" = Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25008 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{f1e7e313-06df-4c56-96a9-99fdfd149c51}" = Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 "{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable "{F51A03C4-2DD0-43B0-900F-EAD1C45DC542}" = Chrome Remote Desktop Host "{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 "Adobe Flash Player NPAPI" = Adobe Flash Player 31 NPAPI "Afterburner" = MSI Afterburner 4.5.0 "Battle.net" = Battle.net "FastStone Image Viewer" = FastStone Image Viewer 6.3 "Glary Utilities 5" = Glary Utilities 5.74 "Google Chrome" = Google Chrome "Inkscape" = Inkscape 0.92.2 "Mozilla Thunderbird 52.9.1 (x86 pl)" = Mozilla Thunderbird 52.9.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "NapiProjekt_is1" = NapiProjekt (2.2.0.2399) "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "OCCT" = OCCT 4.5.1 "OpenAL" = OpenAL "Origin" = Origin "qBittorrent" = qBittorrent 4.0.4 "RTSS" = RivaTuner Statistics Server 7.1.0 "Steam" = Steam "TechPowerUp GPU-Z" = TechPowerUp GPU-Z "Thunderbird-Tray" = Thunderbird-Tray "UltraISO_is1" = UltraISO Premium V9.7 "Uplay" = Uplay "VLC media player" = VLC media player "World of Warcraft" = World of Warcraft [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1000625825-2706868552-3366255526-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{12e627d3-0d85-4130-89de-fbfa06da7241}" = Viber "{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}" = Twitch "Discord" = Discord "OneDriveSetup.exe" = Microsoft OneDrive "Plays" = Plays "Spotify" = Spotify [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 08.11.2018 19:24:37 | Computer Name = DESKTOP-DOSSHEQ | Source = Microsoft-Windows-SpellChecker | ID = 33 Description = Error - 08.11.2018 20:21:16 | Computer Name = DESKTOP-DOSSHEQ | Source = Office 2016 Licensing Service | ID = 0 Description = Error - 08.11.2018 20:51:00 | Computer Name = DESKTOP-DOSSHEQ | Source = Software Protection Platform Service | ID = 8198 Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=TimerEvent Error - 09.11.2018 02:06:24 | Computer Name = DESKTOP-DOSSHEQ | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: nvcplui.exe, wersja: 8.1.940.0, sygnatura czasowa: 0x5bbe84e9 Nazwa modułu powodującego błąd: nvcplui.exe, wersja: 8.1.940.0, sygnatura czasowa: 0x5bbe84e9 Kod wyjątku: 0xc0000409 Przesunięcie błędu: 0x000000000027bdf5 Identyfikator procesu powodującego błąd: 0x271c Godzina uruchomienia aplikacji powodującej błąd: 0x01d477f24eb99dc8 Ścieżka aplikacji powodującej błąd: C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe Ścieżka modułu powodującego błąd: C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe Identyfikator raportu: b80a55ed-0475-41c2-b391-4ad89188c883 Pełna nazwa pakietu powodującego błąd: ? Identyfikator aplikacji względem pakietu powodującego błąd: ? Error - 09.11.2018 02:06:48 | Computer Name = DESKTOP-DOSSHEQ | Source = Software Protection Platform Service | ID = 8198 Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error - 09.11.2018 02:07:14 | Computer Name = DESKTOP-DOSSHEQ | Source = Software Protection Platform Service | ID = 8198 Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=NetworkAvailable Error - 09.11.2018 11:23:27 | Computer Name = DESKTOP-DOSSHEQ | Source = Microsoft-Windows-SpellChecker | ID = 33 Description = Error - 10.11.2018 02:07:35 | Computer Name = DESKTOP-DOSSHEQ | Source = Software Protection Platform Service | ID = 8198 Description = Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=TimerEvent Error - 10.11.2018 02:28:26 | Computer Name = DESKTOP-DOSSHEQ | Source = Office 2016 Licensing Service | ID = 0 Description = Error - 10.11.2018 09:01:13 | Computer Name = DESKTOP-DOSSHEQ | Source = Application Hang | ID = 1002 Description = Program RSITx64.exe w wersji 0.0.0.0 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 358 Godzina rozpoczęcia: 01d478f5096c73ac Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Users\janek\Downloads\RSITx64.exe Identyfikator raportu: 1ff2225e-cd59-4c4f-8463-d20ae9a65e23 Pełna nazwa pakietu powodującego błąd: ? Identyfikator aplikacji względem pakietu powodującego błąd: ? [ System Events ] Error - 09.11.2018 15:29:28 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 09.11.2018 16:29:32 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 09.11.2018 17:29:28 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 09.11.2018 18:29:27 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 10.11.2018 05:54:52 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 10.11.2018 06:34:17 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 10.11.2018 06:39:59 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10016 Description = Error - 10.11.2018 06:42:02 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10016 Description = Error - 10.11.2018 07:29:29 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = Error - 10.11.2018 08:34:15 | Computer Name = DESKTOP-DOSSHEQ | Source = DCOM | ID = 10000 Description = < End of report >
Twój_Anioł_Stróż komentarz 10 listopada 2018 komentarz 10 listopada 2018 W logach nie widzę niczego podejrzanego. . 1
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.