Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-06-2017 01 Uruchomiony przez Karol (administrator) ABC (27-06-2017 10:28:45) Uruchomiony z C:\Users\Karol\Downloads Załadowane profile: Karol (Dostępne profile: Karol) Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Google Inc.) C:\Program Files (x86)\Google\Cloud Print Service\28.0.1493.2\cloud_print_service.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe () C:\ProgramData\MobileBrServ\mbbService.exe (StagWare) C:\Program Files (x86)\NoteBook FanControl\NbfcService.exe (SeriousBit) C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE (Microsoft Corporation) C:\Program Files (x86)\EMET 5.5\EMET_Service.exe (Microsoft Corporation) C:\Program Files (x86)\EMET 5.5\EMET_Agent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13763800 2014-10-02] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1396592 2014-09-01] (Realtek Semiconductor) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728 2015-11-12] (IvoSoft) HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{C12EDCD9-A219-4778-A5FC-0D0F1F219F12}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{C12EDCD9-A219-47 (dane wartości zawierają 36 znaków więcej). HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2089056 2015-09-16] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\Run: [NBFC-ClientApplication] => C:\Program Files (x86)\NoteBook FanControl\NoteBookFanControl.exe [417280 2015-12-13] (StagWare) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\Run: [Pushbullet] => C:\Program Files (x86)\Pushbullet\pushbullet.exe [345600 2015-07-01] (Pushbullet inc) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\Run: [SunsetScreen] => C:\Program Files (x86)\SunsetScreen\SunsetScreen.exe [781232 2016-08-28] (Daniel White) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\RunOnce: [Application Restart #12] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1197912 2017-06-23] (Google Inc.) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1197912 2017-06-23] (Google Inc.) HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] False HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\MountPoints2: {a2b247cb-4f59-11e5-826e-3065ec7301bb} - "D:\AutoRun.exe" HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\MountPoints2: {a81b0a83-e98e-11e5-82b1-605718daa1eb} - "D:\Setup.exe" HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\MountPoints2: {a81b0bb0-e98e-11e5-82b1-605718daa1eb} - "D:\Setup.exe" HKU\S-1-5-21-547570632-1510179221-2057795993-1001\...\MountPoints2: {ee34871d-aa82-11e5-8292-3065ec7301bb} - "D:\Setup.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2017-06-26] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ClickOff.lnk [2016-12-02] ShortcutTarget: ClickOff.lnk -> C:\Program Files (x86)\ClickOff\Clickoff.exe () Startup: C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Riot Isolator.lnk [2017-06-26] ShortcutTarget: Riot Isolator.lnk -> C:\Windows\System32\schtasks.exe (Microsoft Corporation) Startup: C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2017-06-27] ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) GroupPolicy: Ograniczenia <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 10.10.10.2 Tcpip\..\Interfaces\{9C37EC6F-D0C2-4BFF-88EF-FB293C0CD8FB}: [DhcpNameServer] 10.10.10.2 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-547570632-1510179221-2057795993-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-547570632-1510179221-2057795993-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxps://mail.google.com/mail/u/0/#inbox hxxps://mail.google.com/mail/u/1/#inbox hxxps://mail.google.com/mail/u/2/#inbox hxxp://solutions.3mpoland.pl/wps/portal/3M/pl_PL/3M-Littmann-EMEA/stethoscope/littmann-learning-institute/ BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-06-20] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-20] (Oracle Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-06-20] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-20] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKU\S-1-5-21-547570632-1510179221-2057795993-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-20] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 37bnoy8t.default FF ProfilePath: C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\37bnoy8t.default [2017-06-26] FF Session Restore: Mozilla\Firefox\Profiles\37bnoy8t.default -> [funkcja włączona] FF Extension: (Complete YouTube Saver) - C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\37bnoy8t.default\Extensions\{AF445D67-154C-4c69-A17B-7F392BCC36A3} [2017-03-19] FF Extension: (Disable TLS Certificate Transparency) - C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\37bnoy8t.default\features\{099b623b-0ee0-4fa4-8347-13b3f7e62613}\disable-cert-transparency@mozilla.org.xpi [2017-05-26] FF Extension: (Disable Prefetch) - C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\37bnoy8t.default\features\{099b623b-0ee0-4fa4-8347-13b3f7e62613}\disable-prefetch@mozilla.org.xpi [2017-05-26] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-20] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Brak pliku] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-20] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-20] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-06-20] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Brak pliku] FF Plugin HKU\S-1-5-21-547570632-1510179221-2057795993-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Brak pliku] Chrome: ======= CHR DefaultProfile: Default CHR DefaultSearchKeyword: Default -> cal CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default [2017-06-27] CHR Extension: (Tłumacz Google) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-12-04] CHR Extension: (Web Boost - Wait Less, Browse Faster!) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbkhnpmoamidjgbneafjipbmdfpefad [2017-01-06] CHR Extension: (Dysk Google) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (TrafficLight) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfnpidifppmenkapgihekkeednfoenal [2017-06-26] CHR Extension: (uBlock Origin) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-06-25] CHR Extension: (WebCache) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmmlgikpahieigpcclckfmhnchdlfnjd [2017-05-31] CHR Extension: (Google Search) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26] CHR Extension: (Tampermonkey) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-05-31] CHR Extension: (Save To The Wayback Machine) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\eebpioaailbjojmdbmlpomfgijnlcemk [2017-05-31] CHR Extension: (Kalendarz Google) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-07] CHR Extension: (Eliminator Slajdów) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2017-02-19] CHR Extension: (Full Page Screen Capture) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2017-04-26] CHR Extension: (Reverse Watch Later List on YouTube) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\fghdmhmlgblfeojfcejdoijadldnhend [2017-05-01] CHR Extension: (Faster Google search) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmhiafgdfaglfbaaefbbolaholfhkmjc [2017-01-07] CHR Extension: (Kill News Feed) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjobfcedfgohjkaieocljfcppjbkglfd [2016-08-06] CHR Extension: (Checker Plus for Google Calendar™) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhggnncdpfibdhinjiegagmopldibha [2017-05-24] CHR Extension: (Google Cache Browser) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmjckhnhmegjfffjogbdefcbddmmchea [2017-01-07] CHR Extension: (PowerPoint Online) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2015-08-22] CHR Extension: (Google Dictionary (by Google)) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2016-05-03] CHR Extension: (Find DOI in sci-hub) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\mponnjfbehdmaeiomjopicikfdckgbnk [2017-05-24] CHR Extension: (Rozszerzenie Subskrypcje RSS (od Google)) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2016-08-21] CHR Extension: (Autofill) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmmgnhgdeffjkdckmikfpnddkbbfkkk [2017-05-24] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-23] CHR Extension: (Page Monitor) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogeebjpdeabhncjpfhgdibjajcajepgg [2016-08-21] CHR Extension: (Sci-Hub Links) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcgjijbclchlliaffaghajlbfppkbkl [2017-04-05] CHR Extension: (Always Show Watch Later) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnlaeeckmpncaogfacbkelbldmpbibi [2017-05-01] CHR Extension: (better Browser - for Chrome) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbegekjleoplkhibgbmkmnnfffcpfanh [2017-06-25] CHR Extension: (Visualping) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pemhgklkefakciniebenbfclihhmmfcd [2016-05-14] CHR Extension: (Gmail) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-22] CHR Extension: (Chrome Media Router) - C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-26] CHR Profile: C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-12-07] CHR Profile: C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-02-14] CHR Profile: C:\Users\Karol\AppData\Local\Google\Chrome\User Data\System Profile [2017-02-14] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [305664 2014-08-22] (Qualcomm Atheros) [Brak podpisu cyfrowego] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4122816 2017-06-10] (Microsoft Corporation) R2 CloudPrintService; C:\Program Files (x86)\Google\Cloud Print Service\28.0.1493.2\cloud_print_service.exe [4869072 2016-09-30] (Google Inc.) R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [100448 2017-04-20] (Bitdefender) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd) R2 EMET_Service; C:\Program Files (x86)\EMET 5.5\EMET_Service.exe [33960 2016-01-29] (Microsoft Corporation) R2 FreeAgentGoFlex Service; C:\Program Files (x86)\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe [91432 2011-02-10] (Seagate Technology LLC) R2 Huawei E3372; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2014-03-07] () R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-12-07] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-10-21] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-12-02] () R2 NbfcService; C:\Program Files (x86)\NoteBook FanControl\NbfcService.exe [7168 2015-12-08] (StagWare) [Brak podpisu cyfrowego] R2 NetBalancerService; C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe [130408 2015-10-02] (SeriousBit) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-05-23] (Bitdefender) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1570520 2016-02-02] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [837848 2016-02-02] (Secunia) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH) R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [304408 2017-06-26] (RaMMicHaeL) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-07-26] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3832224 2015-12-02] (Intel® Corporation) S3 wifimansvc; C:\Program Files (x86)\Mobile Partner\eap\wifimansvc.exe [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 btmlehid; C:\Windows\System32\drivers\btmlehid.sys [83256 2014-02-03] (Motorola Solutions, Inc.) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] () R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2015-12-10] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [35832 2014-06-11] (Intel Corporation) R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [120312 2014-06-10] (Intel Corporation) S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [100856 2014-06-11] (Intel Corporation) S3 iaLPSS_UART2; C:\Windows\System32\drivers\iaLPSS_UART2.sys [143864 2014-06-11] (Intel Corporation) S3 kmloop; C:\Windows\system32\DRIVERS\loop.sys [15360 2013-08-22] (Microsoft Corporation) R1 MpKsl575e5723; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C41C7168-F526-4732-9814-607AD10FA052}\MpKsl575e5723.sys [44928 2017-06-27] (Microsoft Corporation) R1 nbdrv; C:\Windows\system32\DRIVERS\nbdrv.sys [42128 2015-02-05] (SeriousBit) R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3526400 2017-03-09] (Intel Corporation) S3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2012-09-22] (CACE Technologies, Inc.) S3 NPF; C:\Windows\SysWOW64\drivers\NPF.sys [35344 2012-09-22] (CACE Technologies, Inc.) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2016-02-02] (Secunia) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] () R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated) R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] () S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2015-04-25] (Microsoft Corporation) S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [127456 2016-03-04] (Oracle Corporation) S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [134800 2016-03-04] (Oracle Corporation) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation) R1 WinRing0_1_2_0; C:\Program Files (x86)\NoteBook FanControl\WinRing0x64.sys [14544 2016-02-05] (OpenLibSys.org) S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X] S3 huawei_cdcacm; \SystemRoot\system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_cdcecm; \SystemRoot\system32\DRIVERS\ew_jucdcecm.sys [X] S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X] S3 huawei_ext_ctrl; \SystemRoot\System32\drivers\ew_juextctrl.sys [X] U4 npcap_wifi; Brak ImagePath U3 pgldrpow; \??\C:\Users\Karol\AppData\Local\Temp\pgldrpow.sys [X] <==== UWAGA ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-27 10:28 - 2017-06-27 10:28 - 00029108 _____ C:\Users\Karol\Downloads\FRST.txt 2017-06-27 10:25 - 2017-06-27 10:28 - 00000000 ____D C:\FRST 2017-06-27 10:25 - 2017-06-27 10:25 - 02441216 _____ (Farbar) C:\Users\Karol\Downloads\FRST64.exe 2017-06-27 08:58 - 2017-06-27 08:58 - 00380928 _____ C:\Users\Karol\Downloads\nqszd60x.exe 2017-06-27 08:56 - 2017-06-27 08:56 - 00593952 _____ (Duplex Secure Ltd) C:\Users\Karol\Downloads\SPTDinst-v189-x64.exe 2017-06-27 08:46 - 2017-06-27 08:46 - 00055642 _____ C:\ProgramData\dm.1498545953.bdinstall.bin 2017-06-27 08:45 - 2017-06-27 08:45 - 00000000 ____D C:\Program Files\Bitdefender 2017-06-27 08:44 - 2017-06-27 08:44 - 00215328 _____ C:\ProgramData\cl.uninstall.1498545799.bdinstall.bin 2017-06-27 08:33 - 2017-06-27 08:33 - 00061668 _____ C:\Users\Karol\Downloads\cz_2015_08_16961.pdf 2017-06-27 08:32 - 2017-06-27 08:32 - 00108013 _____ C:\Users\Karol\Downloads\pro_forma_901706259864 (1).pdf 2017-06-27 07:43 - 2017-06-27 07:43 - 00507663 _____ C:\Users\Karol\Downloads\karta_wielowalutowa_070617_tylko_do_odczytu_.pdf 2017-06-26 22:17 - 2017-06-26 22:17 - 00000998 _____ C:\Users\Public\Desktop\Unchecky.lnk 2017-06-26 22:17 - 2017-06-26 22:17 - 00000000 ____D C:\ProgramData\Unchecky 2017-06-26 22:17 - 2017-06-26 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky 2017-06-26 22:17 - 2017-06-26 22:17 - 00000000 ____D C:\Program Files (x86)\Unchecky 2017-06-26 22:15 - 2017-06-26 22:15 - 01551792 _____ (RaMMicHaeL) C:\Users\Karol\Downloads\unchecky_setup.exe 2017-06-26 21:50 - 2017-06-26 21:50 - 00001880 _____ C:\Users\Karol\Desktop\Riot Isolator.lnk 2017-06-26 21:50 - 2017-06-26 21:50 - 00000000 ____D C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Riot Isolator 2017-06-26 21:20 - 2017-06-26 21:51 - 00000000 ____D C:\Users\Karol\AppData\Roaming\Riot Isolator 2017-06-26 19:24 - 2017-06-26 19:24 - 02721280 _____ C:\Users\Karol\Downloads\msxml6_x64.msi 2017-06-26 19:24 - 2017-06-26 19:24 - 00000000 ____D C:\Users\Karol\AppData\Temp 2017-06-26 19:23 - 2017-06-26 21:48 - 00000000 ____D C:\Riot isolator2 2017-06-26 19:23 - 2017-06-26 19:23 - 00000000 ____D C:\Nowy folder 2017-06-26 19:22 - 2017-06-26 19:22 - 02594901 _____ C:\Users\Karol\Downloads\Riot_Isolator.zip 2017-06-26 19:01 - 2017-04-21 23:53 - 00029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2017-06-26 19:01 - 2017-04-21 23:50 - 00030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2017-06-26 19:00 - 2017-04-21 23:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll 2017-06-26 19:00 - 2017-04-21 23:50 - 00018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll 2017-06-26 19:00 - 2017-04-11 20:27 - 00987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2017-06-26 19:00 - 2017-04-11 20:27 - 00485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll 2017-06-26 19:00 - 2017-03-15 20:15 - 00993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2017-06-26 19:00 - 2017-03-15 20:15 - 00690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll 2017-06-26 18:58 - 2017-05-04 01:11 - 00103600 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-06-26 18:58 - 2017-05-03 15:43 - 01555968 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 01206272 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00535552 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-06-26 18:58 - 2017-05-03 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-06-26 18:58 - 2016-08-27 21:44 - 02755504 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2017-06-26 18:58 - 2016-08-27 21:44 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe 2017-06-26 18:58 - 2016-08-27 20:26 - 02411048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2017-06-26 18:58 - 2016-08-27 20:26 - 00113656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe 2017-06-26 18:58 - 2016-08-27 18:09 - 14466560 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2017-06-26 18:58 - 2016-08-27 17:55 - 12879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2017-06-26 18:58 - 2016-07-08 16:17 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2017-06-26 18:58 - 2016-07-08 16:17 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll 2017-06-26 18:58 - 2016-07-08 00:32 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys 2017-06-26 18:58 - 2016-07-08 00:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2017-06-26 18:58 - 2016-07-08 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll 2017-06-26 18:58 - 2016-07-08 00:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2017-06-26 18:58 - 2016-07-07 23:04 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll 2017-06-26 18:58 - 2016-07-07 22:59 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2017-06-26 18:58 - 2016-07-07 22:44 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2017-06-26 18:58 - 2016-07-07 22:41 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll 2017-06-26 18:58 - 2016-07-07 22:34 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2017-06-26 18:58 - 2016-07-07 22:29 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2017-06-26 18:58 - 2016-07-07 22:29 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll 2017-06-26 18:58 - 2016-07-07 22:23 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll 2017-06-26 18:58 - 2016-07-07 22:18 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll 2017-06-26 18:58 - 2016-07-07 22:11 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll 2017-06-26 18:58 - 2016-07-07 21:35 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll 2017-06-26 18:58 - 2016-07-07 21:14 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll 2017-06-26 18:58 - 2016-07-04 05:45 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe 2017-06-26 18:58 - 2016-07-01 22:39 - 00197352 _____ (Microsoft Corporation) C:\Windows\system32\dssenh.dll 2017-06-26 18:58 - 2016-07-01 22:39 - 00157016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dssenh.dll 2017-06-26 18:58 - 2016-06-18 22:06 - 00590688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2017-06-26 18:58 - 2016-06-18 22:06 - 00072408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys 2017-06-26 18:58 - 2016-06-11 20:05 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe 2017-06-26 18:58 - 2016-06-11 19:14 - 00192512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpresult.exe 2017-06-26 18:58 - 2016-06-11 18:46 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll 2017-06-26 18:58 - 2016-06-11 18:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2017-06-26 18:58 - 2016-06-11 18:37 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2017-06-26 18:58 - 2016-06-11 18:20 - 00413184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2017-06-26 18:58 - 2016-06-11 18:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2017-06-26 18:58 - 2016-06-10 22:07 - 03820544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-06-26 18:58 - 2016-06-10 20:11 - 06521800 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2017-06-26 18:58 - 2016-06-10 20:11 - 01487992 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2017-06-26 18:58 - 2016-06-10 20:11 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2017-06-26 18:58 - 2016-06-10 20:11 - 00125024 _____ (Microsoft Corporation) C:\Windows\system32\cryptxml.dll 2017-06-26 18:58 - 2016-06-10 20:10 - 00099136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptxml.dll 2017-06-26 18:58 - 2016-06-10 20:07 - 03273728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2017-06-26 18:58 - 2016-06-09 21:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2017-06-26 18:58 - 2016-06-09 20:18 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2017-06-26 18:58 - 2016-06-07 20:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2017-06-26 18:58 - 2016-06-07 19:13 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll 2017-06-26 18:58 - 2016-06-03 19:11 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2017-06-26 18:58 - 2016-05-18 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2017-06-26 18:58 - 2016-05-18 23:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2017-06-26 18:58 - 2016-05-18 22:56 - 01291776 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2017-06-26 18:58 - 2016-05-18 22:33 - 01060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2017-06-26 18:58 - 2016-05-18 22:28 - 02635264 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2017-06-26 18:58 - 2016-05-18 22:16 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll 2017-06-26 18:58 - 2016-05-14 01:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2017-06-26 18:58 - 2016-05-14 01:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2017-06-26 18:58 - 2016-05-14 01:08 - 00032512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2017-06-26 18:58 - 2016-05-12 20:36 - 00034600 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe 2017-06-26 18:58 - 2016-05-12 19:39 - 00030984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe 2017-06-26 18:58 - 2016-05-06 23:59 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2017-06-26 18:58 - 2016-04-10 00:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll 2017-06-26 18:58 - 2016-04-10 00:14 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Geolocation.dll 2017-06-26 18:58 - 2016-04-10 00:09 - 00754176 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2017-06-26 18:58 - 2016-04-10 00:02 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll 2017-06-26 18:58 - 2016-04-09 23:59 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Geolocation.dll 2017-06-26 18:58 - 2016-04-09 23:59 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll 2017-06-26 18:58 - 2016-04-09 23:56 - 00543232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2017-06-26 18:58 - 2016-04-09 23:55 - 00881152 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2017-06-26 18:58 - 2016-04-09 23:52 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll 2017-06-26 18:58 - 2016-04-07 18:06 - 00927744 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2017-06-26 18:58 - 2016-04-06 23:21 - 00114528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys 2017-06-26 18:58 - 2016-04-06 20:20 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2017-06-26 18:58 - 2016-04-06 20:17 - 18825216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2017-06-26 18:58 - 2016-04-06 18:25 - 15158272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2017-06-26 18:58 - 2016-04-06 00:37 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2017-06-26 18:58 - 2016-04-02 15:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll 2017-06-26 18:58 - 2016-04-01 19:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll 2017-06-26 18:58 - 2016-04-01 18:53 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll 2017-06-26 18:58 - 2016-04-01 18:50 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-06-26 18:58 - 2016-03-14 18:50 - 00316760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2017-06-26 18:58 - 2016-03-10 19:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsparse.dll 2017-06-26 18:58 - 2016-03-10 18:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsparse.dll 2017-06-26 18:58 - 2016-03-05 19:44 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll 2017-06-26 18:58 - 2016-03-05 19:04 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2017-06-26 18:58 - 2016-02-04 18:57 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll 2017-06-26 18:58 - 2016-02-04 18:49 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2017-06-26 18:58 - 2016-02-04 18:39 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2017-06-26 18:51 - 2017-06-26 18:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2017-06-26 18:50 - 2017-06-26 18:50 - 13850845 _____ C:\Users\Karol\Downloads\Samsung_Magician_Installer.zip 2017-06-26 18:46 - 2017-06-26 18:46 - 04002104 _____ (Secunia) C:\Users\Karol\Downloads\PSISetup.exe 2017-06-26 18:46 - 2017-06-26 18:46 - 00001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2017-06-26 18:46 - 2017-06-26 18:46 - 00000000 ____D C:\Program Files (x86)\Secunia 2017-06-26 18:40 - 2017-06-26 18:40 - 00034327 _____ C:\ProgramData\hva.uninstall.1498495214.bdinstall.bin 2017-06-26 18:36 - 2017-06-26 18:36 - 00061871 _____ C:\ProgramData\hva.1498494930.bdinstall.bin 2017-06-26 18:35 - 2017-06-26 18:40 - 00000000 ____D C:\Program Files\Npcap 2017-06-26 18:35 - 2017-06-26 18:35 - 09918016 _____ C:\Users\Karol\Downloads\bitdefender_homescanner.exe 2017-06-26 18:35 - 2017-06-26 18:35 - 00031003 _____ C:\ProgramData\agent.update.1498494913.bdinstall.bin 2017-06-26 18:35 - 2017-06-26 18:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Home Scanner 2017-06-26 18:35 - 2017-06-26 18:35 - 00000000 ____D C:\ProgramData\Bitdefender Home Scanner 2017-06-26 18:23 - 2017-06-26 18:23 - 26816512 _____ C:\Users\Karol\Downloads\EMET Setup (1).msi 2017-06-26 18:20 - 2017-06-26 18:20 - 26816512 _____ C:\Users\Karol\Downloads\EMET Setup.msi 2017-06-26 18:20 - 2017-06-26 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enhanced Mitigation Experience Toolkit 2017-06-26 18:20 - 2017-06-26 18:20 - 00000000 ____D C:\Program Files (x86)\EMET 5.5 2017-06-26 14:43 - 2017-06-27 08:44 - 00004689 _____ C:\bdlog.txt 2017-06-26 14:42 - 2017-06-26 14:42 - 00000000 ____D C:\ProgramData\Bitdefender Device Management 2017-06-26 14:12 - 2017-06-26 14:12 - 00460038 _____ C:\ProgramData\cl.1498478919.bdinstall.bin 2017-06-26 14:12 - 2017-06-26 14:12 - 00000385 _____ C:\Windows\system32\user_gensett.xml 2017-06-26 14:11 - 2017-06-26 14:11 - 00000000 ____D C:\ProgramData\BDLogging 2017-06-26 14:11 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2017-06-26 14:10 - 2017-06-27 08:46 - 00000000 ____D C:\Users\Karol\AppData\Roaming\Bitdefender 2017-06-26 14:09 - 2017-06-27 08:44 - 00000000 ____D C:\ProgramData\Bitdefender 2017-06-26 14:08 - 2017-06-26 14:08 - 00009633 _____ C:\ProgramData\agent.1498478919.bdinstall.bin 2017-06-26 14:04 - 2017-06-26 14:04 - 00099282 _____ C:\ProgramData\1498478497.bdinstall.bin 2017-06-26 14:01 - 2017-06-26 14:01 - 00037692 _____ C:\ProgramData\1498478496.bdinstall.bin 2017-06-26 01:12 - 2017-06-26 01:12 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2017-06-26 00:10 - 2017-06-26 00:10 - 00108014 _____ C:\Users\Karol\Downloads\pro_forma_901706259864.pdf 2017-06-25 21:43 - 2017-06-25 21:43 - 00186283 _____ C:\Users\Karol\Downloads\regulamin-pozyczka-gwarancja (1).pdf 2017-06-25 21:35 - 2017-06-25 21:35 - 00186283 _____ C:\Users\Karol\Downloads\regulamin-pozyczka-gwarancja.pdf 2017-06-25 17:02 - 2017-06-25 17:04 - 00002799 ____T C:\Windows\system32\lic2tmp.xml6431 2017-06-25 06:59 - 2017-06-25 06:59 - 01021696 _____ C:\Users\Karol\Downloads\toip-konta-osobiste (2).pdf 2017-06-24 04:30 - 2017-06-24 04:30 - 00003644 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2017-06-24 04:28 - 2017-06-27 10:20 - 00000000 ____D C:\Program Files\Bitdefender Agent 2017-06-24 04:28 - 2017-06-24 04:28 - 09915560 _____ C:\Users\Karol\Downloads\bitdefender_windows_73962c57-cf5f-4f48-96f2-96b3cf27466c.exe 2017-06-24 04:28 - 2017-06-24 04:28 - 00049028 _____ C:\ProgramData\agent.1498271305.bdinstall.bin 2017-06-24 04:28 - 2017-06-24 04:28 - 00000000 ____D C:\ProgramData\Bitdefender Agent 2017-06-21 09:11 - 2017-06-21 09:11 - 00487424 _____ C:\Users\Karol\Downloads\koszt_kredytu.xls 2017-06-19 15:13 - 2017-06-19 15:13 - 00165414 _____ C:\Users\Karol\Downloads\Statement_052017_00026045 (1).pdf 2017-06-19 15:13 - 2017-06-19 15:13 - 00159243 _____ C:\Users\Karol\Downloads\Statement_062017_00026045 (1).pdf 2017-06-18 19:48 - 2017-06-18 19:48 - 00228019 _____ (Irfan Skiljan) C:\Users\Karol\Downloads\irfanview_lang_polski.exe 2017-06-18 19:47 - 2017-06-18 19:47 - 03399648 _____ (Irfan Skiljan) C:\Users\Karol\Downloads\iview444_x64_setup.exe 2017-06-17 21:29 - 2017-06-17 21:29 - 01004023 _____ C:\Users\Karol\Downloads\do ściagania.pdf 2017-06-17 21:27 - 2017-06-17 21:27 - 01948158 _____ C:\Users\Karol\Downloads\Onkologia - giełda.rar 2017-06-17 09:45 - 2017-06-17 09:47 - 00002799 ____T C:\Windows\system32\lic2tmp.xml22952 2017-06-16 19:42 - 2017-06-16 19:42 - 00466279 _____ C:\Users\Karol\Downloads\hickey2016.pdf 2017-06-16 18:07 - 2017-06-16 18:07 - 02483293 _____ C:\Users\Karol\Downloads\barton2013.pdf 2017-06-14 07:59 - 2017-06-02 14:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-06-14 07:59 - 2017-06-02 14:12 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-06-14 07:59 - 2017-06-02 14:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-06-14 07:59 - 2017-06-02 14:06 - 01001984 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2017-06-14 07:59 - 2017-06-02 14:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-06-14 07:59 - 2017-06-02 13:30 - 03635200 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-06-14 07:59 - 2017-06-02 13:03 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-06-14 07:59 - 2017-06-02 12:58 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-06-14 07:59 - 2017-06-02 12:25 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-06-14 07:59 - 2017-06-02 12:24 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-06-14 07:59 - 2017-06-02 12:17 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-06-14 07:59 - 2017-06-02 12:02 - 02751488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-06-14 07:59 - 2017-06-02 11:43 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-06-14 07:59 - 2017-06-02 11:43 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-06-14 07:59 - 2017-05-15 21:58 - 00121184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys 2017-06-14 07:59 - 2017-05-14 22:44 - 04170240 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-06-14 07:59 - 2017-05-14 22:42 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-06-14 07:59 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-06-14 07:59 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-06-14 07:59 - 2017-05-14 22:19 - 01364040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-06-14 07:59 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-06-14 07:59 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-06-14 07:59 - 2017-05-14 21:32 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2017-06-14 07:59 - 2017-05-14 21:31 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2017-06-14 07:59 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-06-14 07:59 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-06-14 07:59 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-06-14 07:59 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-06-14 07:59 - 2017-05-14 21:04 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2017-06-14 07:59 - 2017-05-14 21:03 - 00373080 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2017-06-14 07:59 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-06-14 07:59 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-06-14 07:59 - 2017-05-14 20:48 - 05274112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2017-06-14 07:59 - 2017-05-14 20:46 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2017-06-14 07:59 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-06-14 07:59 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-06-14 07:59 - 2017-05-14 20:38 - 07796736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2017-06-14 07:59 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-06-14 07:59 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-06-14 07:59 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-06-14 07:59 - 2017-05-14 20:16 - 05268992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2017-06-14 07:59 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-06-14 07:59 - 2017-05-14 20:13 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-06-14 07:59 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-06-14 07:59 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-06-14 07:59 - 2017-05-14 20:06 - 07441240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-06-14 07:59 - 2017-05-14 20:06 - 01737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-06-14 07:59 - 2017-05-14 20:06 - 01502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-06-14 07:59 - 2017-05-12 19:05 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2017-06-14 07:59 - 2017-05-12 18:16 - 01084928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-06-14 07:59 - 2017-05-12 18:13 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2017-06-14 07:59 - 2017-05-12 17:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-06-14 07:59 - 2017-05-12 17:50 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-06-14 07:59 - 2017-05-12 17:48 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-06-14 07:59 - 2017-05-12 17:47 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-06-14 07:59 - 2017-05-12 06:10 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2017-06-14 07:59 - 2017-05-12 04:58 - 01985536 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2017-06-14 07:59 - 2017-05-12 04:48 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2017-06-14 07:59 - 2017-05-12 04:18 - 03714560 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-06-14 07:59 - 2017-05-12 04:11 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-06-14 07:59 - 2017-05-12 04:10 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-06-14 07:59 - 2017-05-12 04:07 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2017-06-14 07:59 - 2017-05-12 04:06 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-06-14 07:59 - 2017-05-12 04:04 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-06-14 07:59 - 2017-05-12 04:00 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-06-14 07:59 - 2017-05-12 01:36 - 22361848 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-06-14 07:59 - 2017-05-12 01:32 - 19788672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-06-14 07:59 - 2017-05-10 20:19 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2017-06-14 07:59 - 2017-05-06 18:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-06-14 07:59 - 2017-05-06 18:04 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-06-14 07:59 - 2017-04-06 19:37 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-06-14 07:59 - 2017-04-06 19:16 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2017-06-14 07:59 - 2017-04-06 18:50 - 01436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-06-14 07:59 - 2017-04-06 18:46 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-06-14 07:59 - 2017-04-06 18:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-06-14 07:59 - 2017-04-06 18:35 - 01362432 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2017-06-14 07:59 - 2017-04-06 18:15 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-06-14 07:59 - 2017-04-06 17:44 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2017-06-14 07:59 - 2017-04-02 16:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2017-06-14 07:59 - 2017-04-02 15:40 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-06-14 07:59 - 2016-06-11 18:50 - 00987136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-06-14 07:59 - 2016-06-11 18:24 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-06-13 11:27 - 2017-06-13 11:27 - 00473793 _____ C:\Users\Karol\Downloads\heintjes2004.pdf 2017-06-13 10:46 - 2017-06-13 10:46 - 00567153 _____ C:\Users\Karol\Downloads\selfe2016.pdf 2017-06-12 20:55 - 2017-06-12 20:55 - 00190575 _____ C:\Users\Karol\Downloads\Makro_i_mikroelementy_w_konserwach_ze_szprotow (1).pdf 2017-06-12 17:36 - 2017-06-12 17:36 - 00102974 _____ C:\Users\Karol\Downloads\zerowka-neurologia-2015.pdf 2017-06-12 14:14 - 2017-06-12 14:14 - 65351733 _____ C:\Users\Karol\Downloads\Prusiński - Neurologia praktyczna.pdf 2017-06-12 14:13 - 2017-06-12 14:13 - 43203151 _____ C:\Users\Karol\Downloads\Podemski - Kompendium neurologii.pdf 2017-06-11 18:49 - 2017-06-11 18:50 - 02240192 _____ (BitTorrent Inc.) C:\Users\Karol\Downloads\uTorrent.exe 2017-06-11 18:47 - 2017-06-11 18:47 - 00003706 _____ C:\Users\Karol\Downloads\ModelsByMarkManson.zip 2017-06-11 18:47 - 2017-06-11 18:47 - 00001350 _____ C:\Users\Karol\Downloads\ModelsByMarkManson_archive.torrent 2017-06-11 18:27 - 2017-06-11 18:28 - 03251892 _____ C:\Users\Karol\Downloads\[Mark_Manson]_Models_A_Comprehensive_Guide_to_Att(BookFi).pdf 2017-06-10 22:28 - 2017-06-10 22:28 - 00159243 _____ C:\Users\Karol\Downloads\Statement_062017_00026045.pdf 2017-06-10 10:43 - 2017-06-10 10:43 - 04050020 _____ C:\Users\Karol\Downloads\164480_ms-paint-racers.swf 2017-06-09 19:37 - 2017-06-09 19:37 - 00190575 _____ C:\Users\Karol\Downloads\Makro_i_mikroelementy_w_konserwach_ze_szprotow.pdf 2017-06-07 21:39 - 2017-06-07 21:39 - 11276908 _____ C:\Users\Karol\Downloads\WL MS w. 2. 09_05_2017 A. Jegier EDU.pdf 2017-06-07 21:39 - 2017-06-07 21:39 - 11276908 _____ C:\Users\Karol\Downloads\WL MS w. 2. 09_05_2017 A. Jegier EDU (1).pdf 2017-06-06 16:28 - 2017-06-06 16:28 - 00141864 _____ C:\Users\Karol\Downloads\bluescreenview_setup.exe 2017-06-06 16:28 - 2017-06-06 16:28 - 00000000 ____D C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView 2017-06-06 16:28 - 2017-06-06 16:28 - 00000000 ____D C:\Program Files (x86)\NirSoft 2017-06-05 21:41 - 2017-06-05 21:41 - 14663168 _____ C:\Users\Karol\Downloads\Porod_prawidlowy.ppt 2017-06-05 21:41 - 2017-06-05 21:41 - 00098919 _____ C:\Users\Karol\Downloads\Stany_zapalne2 (1).ppt 2017-06-05 21:39 - 2017-06-05 21:39 - 13495808 _____ C:\Users\Karol\Downloads\Operacja_kleszczowa_rys_historyczny_wskazania_warunki_powiklania.ppt 2017-06-05 21:39 - 2017-06-05 21:39 - 01116672 _____ C:\Users\Karol\Downloads\Krwawienia_w_1_polowie_ciazy (2).ppt 2017-06-05 21:39 - 2017-06-05 21:39 - 00110592 _____ C:\Users\Karol\Downloads\Techniki_operacyjne_w_roznych_chorobach_ginekologicznych (1).ppt 2017-06-05 21:39 - 2017-06-05 21:39 - 00041464 _____ C:\Users\Karol\Downloads\urologia_ginekologiczna (1).ppt 2017-06-05 21:38 - 2017-06-05 21:38 - 00041464 _____ C:\Users\Karol\Downloads\urologia_ginekologiczna.ppt 2017-06-05 20:13 - 2017-06-05 20:13 - 00212454 _____ C:\Users\Karol\Downloads\zasady_premiowania_cashback.pdf 2017-06-04 23:03 - 2017-06-04 23:03 - 05706455 _____ C:\Users\Karol\Downloads\PL2014V5.pdf 2017-06-04 20:43 - 2017-06-04 20:43 - 19811328 _____ C:\Users\Karol\Downloads\PL2014V2.ppt 2017-06-03 22:41 - 2017-06-03 22:41 - 01025557 _____ C:\Users\Karol\Downloads\Zalecenieklinicznedyslipidemia.pdf 2017-06-03 21:26 - 2017-06-03 21:26 - 01891492 _____ C:\Users\Karol\Downloads\khayambashi2014.pdf 2017-06-03 21:20 - 2017-06-03 21:20 - 03005721 _____ C:\Users\Karol\Downloads\bjsports-2015-094723.full.pdf 2017-06-03 21:12 - 2017-06-03 21:12 - 04955584 _____ C:\Users\Karol\Downloads\PL2016V1.pdf 2017-06-03 19:04 - 2017-06-03 19:04 - 00188070 _____ C:\Users\Karol\Downloads\Example_organisation_and_prioritisation_tests.pdf 2017-06-03 18:10 - 2017-06-03 18:10 - 00000000 ___SD C:\Users\Karol\Documents\Moje źródła danych 2017-06-03 17:50 - 2017-06-03 17:50 - 00012338 _____ C:\Users\Karol\Downloads\Kalkulator-W-na-kWh.xlsx 2017-06-03 17:41 - 2017-06-03 17:41 - 00136604 _____ C:\Users\Karol\Downloads\mori2009.pdf 2017-06-03 15:21 - 2017-06-03 15:21 - 00165414 _____ C:\Users\Karol\Downloads\Statement_052017_00026045.pdf 2017-06-03 15:21 - 2017-06-03 15:21 - 00164395 _____ C:\Users\Karol\Downloads\Statement_042017_00026045 (1).pdf 2017-06-03 15:20 - 2017-06-03 15:20 - 00155198 _____ C:\Users\Karol\Downloads\Statement_042017_31997239.pdf 2017-05-30 20:02 - 2017-05-30 20:02 - 00810049 _____ C:\Users\Karol\Downloads\D20120631.pdf 2017-05-30 20:00 - 2017-05-30 20:00 - 01421202 _____ C:\Users\Karol\Downloads\D19970152Lj.pdf 2017-05-29 19:04 - 2017-05-29 19:04 - 01044227 _____ C:\Users\Karol\Downloads\tabela-test-mierniki-energii-komputerswiat_2011-big.pdf 2017-05-28 16:26 - 2017-05-28 16:26 - 06999148 _____ C:\Users\Karol\Downloads\DM lek 19.04.2017.pdf 2017-05-28 16:26 - 2017-05-28 16:26 - 01609966 _____ C:\Users\Karol\Downloads\WSSE Pabianice.pdf ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-27 09:14 - 2015-08-20 13:10 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-547570632-1510179221-2057795993-1001 2017-06-27 08:57 - 2016-12-02 03:51 - 00000000 ____D C:\Users\Karol\AppData\Roaming\ClickOff 2017-06-27 08:57 - 2016-02-12 10:25 - 00000000 ____D C:\Users\Karol\AppData\Local\Pushbullet 2017-06-27 08:55 - 2015-08-22 17:12 - 00000000 ____D C:\Users\Karol\AppData\Local\ClassicShell 2017-06-27 08:48 - 2014-03-18 11:57 - 01936074 _____ C:\Windows\system32\PerfStringBackup.INI 2017-06-27 08:48 - 2014-03-18 11:28 - 00846634 _____ C:\Windows\system32\perfh015.dat 2017-06-27 08:48 - 2014-03-18 11:28 - 00182514 _____ C:\Windows\system32\perfc015.dat 2017-06-27 08:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf 2017-06-27 08:45 - 2016-08-08 08:21 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-06-27 08:45 - 2015-08-20 13:09 - 00000000 ___DO C:\Users\Karol\OneDrive 2017-06-27 08:45 - 2015-08-20 13:03 - 00000000 __SHD C:\Users\Karol\IntelGraphicsProfiles 2017-06-27 08:44 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\ELAMBKUP 2017-06-27 08:44 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-06-27 08:44 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI 2017-06-27 07:26 - 2015-08-22 16:39 - 00003964 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4CBBD2F9-74CA-4DA2-8B99-A05E66DC18DE} 2017-06-26 20:45 - 2015-08-22 16:44 - 00002188 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-06-26 20:45 - 2015-08-22 16:44 - 00002176 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-06-26 19:36 - 2015-09-27 04:29 - 00000000 ____D C:\Windows\WindowsMobile 2017-06-26 19:26 - 2015-10-07 22:48 - 00000000 ____D C:\Users\Karol\AppData\Local\FluxSoftware 2017-06-26 19:18 - 2016-08-07 03:18 - 00000000 ____D C:\Users\Karol\Desktop\dysk dorotki 2017-06-26 19:16 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2017-06-26 19:11 - 2016-11-19 10:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-06-26 19:11 - 2015-09-11 02:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-06-26 19:11 - 2013-08-22 16:44 - 00482352 _____ C:\Windows\system32\FNTCACHE.DAT 2017-06-26 19:10 - 2015-08-24 01:36 - 00000000 ____D C:\Windows\system32\appraiser 2017-06-26 19:10 - 2014-11-25 15:37 - 00000000 ___SD C:\Windows\system32\CompatTel 2017-06-26 19:10 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData 2017-06-26 19:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup 2017-06-26 19:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup 2017-06-26 19:09 - 2015-08-25 22:03 - 00000000 ____D C:\ProgramData\Adobe 2017-06-26 19:09 - 2015-02-18 15:22 - 00000000 ____D C:\ProgramData\Package Cache 2017-06-26 19:09 - 2015-02-18 15:22 - 00000000 ____D C:\Intel 2017-06-26 19:08 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2017-06-26 18:58 - 2015-08-24 22:09 - 00000000 ____D C:\Users\Karol\Desktop\temp 2017-06-26 18:54 - 2016-11-20 06:09 - 00000000 ____D C:\Users\Karol\AppData\LocalLow\Mozilla 2017-06-26 18:51 - 2016-01-09 20:12 - 00003262 _____ C:\Windows\System32\Tasks\SamsungMagician 2017-06-26 18:51 - 2015-09-19 03:43 - 00000000 ____D C:\Program Files (x86)\Samsung 2017-06-26 01:28 - 2015-08-23 00:01 - 00000000 ____D C:\Program Files\Microsoft Office 2017-06-26 01:12 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-06-26 01:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-06-26 01:11 - 2015-09-09 00:08 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2017-06-26 01:11 - 2015-09-09 00:08 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2017-06-24 04:15 - 2015-09-01 19:57 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2017-06-22 18:03 - 2016-12-18 13:17 - 00003162 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2 2017-06-22 18:03 - 2016-04-27 07:02 - 00002383 _____ C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive dla Firm.lnk 2017-06-22 18:03 - 2015-08-23 00:35 - 00003170 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-547570632-1510179221-2057795993-1001 2017-06-18 19:48 - 2016-05-24 19:39 - 00001867 _____ C:\Users\Karol\Desktop\IrfanView 64 Thumbnails.lnk 2017-06-18 19:48 - 2016-05-24 19:39 - 00000993 _____ C:\Users\Karol\Desktop\IrfanView 64.lnk 2017-06-18 19:48 - 2016-05-24 19:39 - 00000000 ____D C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2017-06-16 17:12 - 2015-10-20 13:13 - 00004388 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-06-16 17:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-06-16 17:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Macromed 2017-06-16 10:02 - 2015-08-20 13:03 - 00000000 ____D C:\Users\Karol\AppData\Local\Packages 2017-06-16 10:02 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-16 10:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2017-06-14 08:18 - 2015-09-09 00:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-06-14 08:03 - 2014-11-25 15:19 - 00000000 ____D C:\Windows\system32\MRT 2017-06-14 07:59 - 2014-11-25 15:19 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-06-14 07:48 - 2017-04-13 03:22 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-06-14 07:48 - 2017-04-13 03:22 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-06-14 07:48 - 2017-04-13 03:22 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-06-11 12:51 - 2016-12-22 01:16 - 00000000 ____D C:\ProgramData\CanonIJPLM 2017-06-05 18:59 - 2016-12-01 23:57 - 00000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk 2017-06-05 18:59 - 2016-12-01 23:57 - 00000938 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk 2017-06-03 04:31 - 2016-12-18 01:35 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-06-03 04:31 - 2016-12-18 01:35 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-30 22:45 - 2014-11-25 15:30 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-03-21 23:35 - 2017-03-21 23:35 - 0000879 _____ () C:\Users\Karol\AppData\Local\recently-used.xbel 2015-09-09 05:11 - 2015-09-09 05:11 - 0007597 _____ () C:\Users\Karol\AppData\Local\Resmon.ResmonCfg 2016-03-03 03:20 - 2016-03-03 03:20 - 0202066 _____ () C:\ProgramData\1456967934.bdinstall.bin 2017-06-26 14:01 - 2017-06-26 14:01 - 0037692 _____ () C:\ProgramData\1498478496.bdinstall.bin 2017-06-26 14:04 - 2017-06-26 14:04 - 0099282 _____ () C:\ProgramData\1498478497.bdinstall.bin 2017-06-24 04:28 - 2017-06-24 04:28 - 0049028 _____ () C:\ProgramData\agent.1498271305.bdinstall.bin 2017-06-26 14:08 - 2017-06-26 14:08 - 0009633 _____ () C:\ProgramData\agent.1498478919.bdinstall.bin 2017-06-26 18:35 - 2017-06-26 18:35 - 0031003 _____ () C:\ProgramData\agent.update.1498494913.bdinstall.bin 2017-06-26 14:12 - 2017-06-26 14:12 - 0460038 _____ () C:\ProgramData\cl.1498478919.bdinstall.bin 2017-06-27 08:44 - 2017-06-27 08:44 - 0215328 _____ () C:\ProgramData\cl.uninstall.1498545799.bdinstall.bin 2017-06-27 08:46 - 2017-06-27 08:46 - 0055642 _____ () C:\ProgramData\dm.1498545953.bdinstall.bin 2015-02-18 15:27 - 2015-02-18 15:27 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2017-06-26 18:36 - 2017-06-26 18:36 - 0061871 _____ () C:\ProgramData\hva.1498494930.bdinstall.bin 2017-06-26 18:40 - 2017-06-26 18:40 - 0034327 _____ () C:\ProgramData\hva.uninstall.1498495214.bdinstall.bin Niektóre pliki w TEMP: ==================== 2015-09-03 00:35 - 2015-09-03 00:35 - 0000000 ____D () C:\Users\Karol\AppData\Local\Temp\avgnt.exe 2015-09-19 21:46 - 2014-03-12 13:40 - 1122384 ____N (CANON INC.) C:\Users\Karol\AppData\Local\Temp\MSETUP4.EXE 2015-09-17 15:46 - 2015-10-03 04:07 - 4121888 _____ (SeriousBit ) C:\Users\Karol\AppData\Local\Temp\NetBalancerSetup.exe 2015-10-29 03:17 - 2015-10-29 03:17 - 5311104 _____ () C:\Users\Karol\AppData\Local\Temp\npp.6.8.3.Installer.exe 2016-11-27 11:18 - 2016-11-27 11:18 - 2842320 _____ () C:\Users\Karol\AppData\Local\Temp\npp.7.1.Installer.exe 2017-03-24 21:17 - 2017-03-24 21:17 - 2974456 _____ () C:\Users\Karol\AppData\Local\Temp\npp.7.3.3.Installer.x64.exe 2016-02-21 15:43 - 2016-02-21 15:43 - 1444000 _____ (Sysinternals - www.sysinternals.com) C:\Users\Karol\AppData\Local\Temp\procexp64.exe 2016-11-23 23:47 - 2016-11-23 23:47 - 14700056 _____ (Samsung Electronics ) C:\Users\Karol\AppData\Local\Temp\Samsung_Magician_Installer.exe 2017-01-21 23:53 - 2017-01-21 23:54 - 43918808 _____ (Skype Technologies S.A.) C:\Users\Karol\AppData\Local\Temp\SkypeSetup.exe 2016-04-10 02:52 - 2014-01-20 09:38 - 0354392 _____ (CANON INC.) C:\Users\Karol\AppData\Local\Temp\uninstall.exe 2015-09-17 15:46 - 2015-09-26 16:21 - 0365416 _____ () C:\Users\Karol\AppData\Local\Temp\Updater.exe 2015-08-03 01:58 - 2015-08-03 01:58 - 0118784 _____ () C:\Users\Karol\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-06-27 08:41 ==================== Koniec FRST.txt ============================