Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 11-11-2017 Uruchomiony przez Waldemar (administrator) MIKOLAJ (11-11-2017 18:03:13) Uruchomiony z C:\Users\Waldemar\Downloads Załadowane profile: Waldemar (Dostępne profile: Waldemar) Platform: Windows 10 Home Wersja 1709 16299.19 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Dropbox, Inc.) C:\Users\Waldemar\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) C:\Users\Waldemar\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) C:\Users\Waldemar\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-03-26] (NVIDIA Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-11] (AVAST Software) HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [415128 2015-09-30] () HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-985563321-613337312-3116572322-1001\...\Run: [Dropbox Update] => C:\Users\Waldemar\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => Brak pliku Startup: C:\Users\Waldemar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-11] ShortcutTarget: Dropbox.lnk -> C:\Users\Waldemar\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62 Tcpip\..\Interfaces\{0b860714-89f0-4763-b393-245c8be1634f}: [DhcpNameServer] 62.179.1.63 62.179.1.62 Tcpip\..\Interfaces\{252e4723-dd4f-417c-a2cf-f4e6210224ef}: [DhcpNameServer] 192.168.88.1 85.193.224.2 85.193.224.9 Internet Explorer: ================== HKU\S-1-5-21-985563321-613337312-3116572322-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=pl-pl HKU\S-1-5-21-985563321-613337312-3116572322-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-11] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-11] (Oracle Corporation) FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-11] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-11] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl CHR StartupUrls: Default -> "hxxp://www.gazeta.pl/","hxxp://www.kurnik.pl/","hxxp://www.onet.pl/","hxxp://www.interia.pl/" CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms} CHR DefaultSearchKeyword: Default -> bing.com CHR Profile: C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default [2017-11-11] CHR Extension: (Prezentacje) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14] CHR Extension: (Dokumenty) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14] CHR Extension: (Dysk Google) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26] CHR Extension: (Google Search) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Adobe Acrobat) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04] CHR Extension: (Arkusze) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14] CHR Extension: (Dokumenty Google offline) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Chrome AdBlock Plus) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpbdggplehjfceendelhkobogklpngg [2014-12-25] CHR Extension: (Streamit Search) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\khehmcloomhdampbjmldmdmpgcbhbdkg [2017-06-30] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22] CHR Extension: (Gmail) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31] CHR Extension: (Chrome Media Router) - C:\Users\Waldemar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-11] CHR HKU\S-1-5-21-985563321-613337312-3116572322-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-985563321-613337312-3116572322-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-11] (AVAST Software) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [370064 2015-09-30] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-02] (Acer Incorporate) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2012-07-31] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1616160 2014-03-26] (NVIDIA Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Brak podpisu cyfrowego] S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2012-07-31] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2350064 2017-09-28] (IBM Corp.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [183584 2017-11-11] (AVAST Software) S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [47008 2017-11-11] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [148288 2017-11-11] (AVAST Software) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110376 2017-11-11] (AVAST Software) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84416 2017-11-11] (AVAST Software) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1026232 2017-11-11] (AVAST Software) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [455384 2017-11-11] (AVAST Software) R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [203976 2017-11-11] (AVAST Software) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [364464 2017-11-11] (AVAST Software) S3 HTCAND64; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [Brak podpisu cyfrowego] S3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [46568 2013-08-08] () R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated) S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-25] (Malwarebytes) R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2016-02-05] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvacwu.inf_amd64_bdd6ea477d4e2fba\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated) S1 RapportAegle64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [384312 2017-09-28] (IBM Corp.) S1 RapportCerberus_1804077; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804077.sys [1271448 2017-10-03] (IBM Corp.) S1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [585432 2017-09-28] (IBM Corp.) S0 RapportHades64; C:\WINDOWS\System32\Drivers\RapportHades64.sys [253912 2017-09-28] (IBM Corp.) S3 RapportIaso; c:\programdata\trusteer\rapport\store\exts\rapportms\baseline\rapportiaso64.sys [384544 2017-10-03] (IBM Corp.) S3 RapportKE64; C:\WINDOWS\System32\Drivers\RapportKE64.sys [507960 2017-09-28] (IBM Corp.) S1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [610616 2017-09-28] (IBM Corp.) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek ) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [751632 2015-05-14] (Realsil Semiconductor Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-11 18:03 - 2017-11-11 18:04 - 000017313 _____ C:\Users\Waldemar\Downloads\FRST.txt 2017-11-11 18:01 - 2017-11-11 18:01 - 002392576 _____ (Farbar) C:\Users\Waldemar\Downloads\FRST64.exe 2017-11-11 17:11 - 2017-11-11 17:11 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2017-11-11 17:10 - 2017-11-11 17:53 - 001914802 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-11-11 17:09 - 2017-11-11 17:09 - 000000020 ___SH C:\Users\Waldemar\ntuser.ini 2017-11-11 17:09 - 2017-11-11 17:09 - 000000000 ___RD C:\Users\Waldemar\3D Objects 2017-11-11 17:09 - 2017-11-11 17:09 - 000000000 ___HD C:\Users\Waldemar\MicrosoftEdgeBackups 2017-11-11 17:09 - 2017-11-11 17:09 - 000000000 ____D C:\ProgramData\USOShared 2017-11-11 17:05 - 2017-11-11 17:06 - 000007623 _____ C:\WINDOWS\diagwrn.xml 2017-11-11 17:05 - 2017-11-11 17:06 - 000007623 _____ C:\WINDOWS\diagerr.xml 2017-11-11 17:04 - 2017-11-11 17:53 - 000004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3D6C3C38-4ADF-45AE-BFCD-37B39AB6E1DA} 2017-11-11 17:04 - 2017-11-11 17:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-11-11 17:04 - 2017-11-11 17:12 - 000003364 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-985563321-613337312-3116572322-1001 2017-11-11 17:04 - 2017-11-11 17:04 - 000003862 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-985563321-613337312-3116572322-1001UA 2017-11-11 17:04 - 2017-11-11 17:04 - 000003594 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-985563321-613337312-3116572322-1001Core 2017-11-11 17:04 - 2017-11-11 17:04 - 000003494 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-11-11 17:04 - 2017-11-11 17:04 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-11-11 17:04 - 2017-11-11 17:04 - 000003270 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-11-11 17:04 - 2017-11-11 17:04 - 000003042 _____ C:\WINDOWS\System32\Tasks\HIDMonitor 2017-11-11 17:04 - 2017-11-11 17:04 - 000002942 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2017-11-11 17:04 - 2017-11-11 17:04 - 000002886 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2017-11-11 17:04 - 2017-11-11 17:04 - 000002876 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-985563321-613337312-3116572322-1001 2017-11-11 17:04 - 2017-11-11 17:04 - 000002316 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-985563321-613337312-3116572322-500 2017-11-11 17:04 - 2017-11-11 17:04 - 000002238 _____ C:\WINDOWS\System32\Tasks\Launch Manager 2017-11-11 17:04 - 2017-11-11 17:04 - 000002216 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-11-11 17:04 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD 2017-11-11 17:04 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\System32\Tasks\GenericSettingsHandler 2017-11-11 17:04 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-11-11 17:04 - 2014-04-04 10:33 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2600059124-1084670904-2620844282-500 2017-11-11 16:59 - 2017-11-11 16:59 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-11-11 16:57 - 2017-11-11 17:20 - 000000000 ____D C:\Users\Waldemar\AppData\Local\Packages 2017-11-11 16:57 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-11-11 16:56 - 2017-11-11 17:09 - 000000000 ____D C:\Users\Waldemar 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Ustawienia lokalne 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Szablony 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Moje dokumenty 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Menu Start 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Documents\Moje wideo 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Documents\Moje obrazy 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Documents\Moja muzyka 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\Dane aplikacji 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\AppData\Local\Historia 2017-11-11 16:56 - 2017-11-11 16:56 - 000000000 _SHDL C:\Users\Waldemar\AppData\Local\Dane aplikacji 2017-11-11 16:56 - 2015-09-30 19:39 - 000105472 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-11-11 16:56 - 2015-09-30 19:39 - 000099856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-11-11 16:55 - 2017-11-11 16:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-11-11 16:35 - 2017-11-11 11:27 - 001026232 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000455384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000365168 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2017-11-11 16:35 - 2017-11-11 11:27 - 000364464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000203976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000183584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000148288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000110376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000084416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-11-11 16:35 - 2017-11-11 11:27 - 000047008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-11-11 16:35 - 2017-09-28 16:42 - 000253912 _____ (IBM Corp.) C:\WINDOWS\system32\Drivers\RapportHades64.sys 2017-11-11 16:35 - 2017-09-26 03:46 - 000361336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.150639402812509 2017-11-11 16:35 - 2017-09-26 03:46 - 000199312 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.150639402253105 2017-11-11 16:35 - 2017-07-21 04:30 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys.150060788501503 2017-11-11 16:35 - 2017-07-08 17:42 - 000360792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.149953219484306 2017-11-11 16:35 - 2017-07-06 04:31 - 000360792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.149931192585906 2017-11-11 16:35 - 2017-05-13 08:00 - 000158368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.149465885176502 2017-11-11 16:35 - 2017-03-24 05:28 - 000548928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.149032969142209 2017-11-11 16:35 - 2017-03-24 05:27 - 000547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.149032968695404 2017-11-11 16:35 - 2017-03-24 05:27 - 000337592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.149032968865706 2017-11-11 16:35 - 2016-09-13 11:57 - 000969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys.147376430798407 2017-11-11 16:35 - 2016-07-01 03:35 - 000473592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.146734060740602 2017-11-11 16:34 - 2017-11-11 16:53 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-11-11 16:26 - 2017-11-11 16:35 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2017-11-11 16:13 - 2017-11-11 16:13 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 023664128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 021752832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 019343360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 018913792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 017080832 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 008097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 006032896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 004744192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 003681280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-11-11 16:13 - 2017-11-11 16:13 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-11-11 16:13 - 2017-11-11 16:13 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-11-11 16:13 - 2017-11-11 16:13 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-11-11 16:12 - 2017-11-11 16:12 - 002474080 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2017-11-11 16:12 - 2017-11-11 16:12 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-11-11 16:12 - 2017-11-11 16:12 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-11-11 16:12 - 2017-11-11 16:12 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-11-11 16:11 - 2017-11-11 16:11 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-11-11 16:11 - 2017-11-11 16:11 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-11-11 16:10 - 2017-11-11 16:10 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-11-11 16:10 - 2017-11-11 16:10 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-11-11 16:10 - 2017-11-11 16:10 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-11-11 16:10 - 2017-11-11 16:10 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-11-11 16:10 - 2017-11-11 16:10 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 001528912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 000769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2017-11-11 16:09 - 2017-11-11 16:09 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2017-11-11 16:09 - 2017-11-11 16:09 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 008592280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-11-11 16:07 - 2017-11-11 16:07 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 003672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 003312432 _____ C:\WINDOWS\system32\Windows.Mirage.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 002106880 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001633744 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-11-11 16:07 - 2017-11-11 16:07 - 001165824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-11-11 16:07 - 2017-11-11 16:07 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-11-11 16:07 - 2017-11-11 16:07 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000559000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2017-11-11 16:07 - 2017-11-11 16:07 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000045976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-11-11 16:07 - 2017-11-11 16:07 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2017-11-11 15:50 - 2017-11-11 15:50 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-11-11 15:49 - 2017-11-11 15:49 - 000000000 ____D C:\Program Files\Reference Assemblies 2017-11-11 15:49 - 2017-11-11 15:49 - 000000000 ____D C:\Program Files\MSBuild 2017-11-11 15:49 - 2017-11-11 15:49 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-11-11 15:49 - 2017-11-11 15:49 - 000000000 ____D C:\Program Files (x86)\MSBuild 2017-11-11 15:42 - 2017-09-22 18:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-11-11 15:42 - 2017-09-22 18:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-11-11 15:42 - 2017-09-22 18:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-11-11 15:41 - 2017-09-28 15:50 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-11-11 15:41 - 2017-09-28 15:50 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-11-11 15:41 - 2017-09-28 15:50 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-11-11 15:13 - 2017-11-11 15:13 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2017-11-11 14:37 - 2017-11-11 14:37 - 000000000 ____D C:\Program Files (x86)\e-Deklaracje 2017-11-11 11:51 - 2017-11-11 11:51 - 000000000 ____D C:\Users\Waldemar\AppData\Local\DBG 2017-11-03 06:04 - 2017-11-11 17:02 - 000000000 ____D C:\Users\Waldemar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-11-02 03:53 - 2017-11-02 03:53 - 000491088 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys 2017-10-27 15:00 - 2017-10-27 15:02 - 000000000 ___RD C:\Users\Waldemar\Documents\MAT 8 2017-10-27 14:58 - 2017-10-27 14:58 - 000018508 _____ C:\Users\Waldemar\Downloads\MASTERCARD nr 89.html 2017-10-16 04:32 - 2017-10-16 04:32 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2017-10-14 15:38 - 2017-11-11 16:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2017-10-14 15:38 - 2017-10-14 15:38 - 000000000 ____D C:\Users\Waldemar\AppData\Local\PDFCreator 2017-10-14 15:01 - 2017-10-14 15:14 - 000000000 ____D C:\Users\Waldemar\AppData\Local\ConnectedDevicesPlatform 2017-10-14 14:36 - 2017-11-11 16:56 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-10-14 14:36 - 2017-11-11 16:53 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-10-14 14:36 - 2017-10-14 14:38 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-10-14 14:36 - 2017-10-14 14:36 - 000000000 ____D C:\Program Files\Common Files\Atheros 2017-10-14 14:36 - 2016-12-29 14:16 - 006384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 002475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 001762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 000546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 000392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 000083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-10-14 14:36 - 2016-12-29 14:16 - 000069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-10-14 14:36 - 2016-12-22 00:59 - 007651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-10-14 14:35 - 2017-11-11 17:52 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-10-14 14:35 - 2017-11-11 16:56 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2017-10-14 14:35 - 2017-11-11 16:56 - 000000000 ____D C:\WINDOWS\SysWOW64\sda 2017-10-14 14:35 - 2017-11-11 16:56 - 000000000 ____D C:\Program Files\Elantech 2017-10-14 14:35 - 2017-11-11 16:53 - 000000000 ____D C:\Program Files\Intel 2017-10-14 14:35 - 2017-10-14 14:35 - 000000000 _____ C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2017-10-14 13:33 - 2017-10-14 13:33 - 000000000 ____D C:\Users\Waldemar\AppData\Roaming\Mikrotik 2017-10-14 08:47 - 2017-10-14 08:47 - 000000000 __SHD C:\Users\Waldemar\AppData\Local\ms-drivers 2017-10-14 08:47 - 2017-10-14 08:47 - 000000000 __SHD C:\Users\Waldemar\AppData\Local\icsxml 2017-10-14 08:47 - 2017-10-14 08:47 - 000000000 __SHD C:\ProgramData\DIBsection 2017-10-14 08:47 - 2017-10-14 08:47 - 000000000 ____D C:\Users\Waldemar\AppData\Local\MetaGeek,_LLC 2017-10-13 05:42 - 2017-10-13 05:42 - 000057940 _____ C:\Users\Waldemar\Downloads\Aga ipet.zip ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-11 18:03 - 2017-05-13 17:19 - 000000000 ____D C:\FRST 2017-11-11 17:58 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps 2017-11-11 17:55 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF 2017-11-11 17:53 - 2017-09-30 15:29 - 000852622 _____ C:\WINDOWS\system32\perfh015.dat 2017-11-11 17:53 - 2017-09-30 15:29 - 000167900 _____ C:\WINDOWS\system32\perfc015.dat 2017-11-11 17:52 - 2014-12-25 15:43 - 000000000 __SHD C:\Users\Waldemar\IntelGraphicsProfiles 2017-11-11 17:30 - 2017-09-29 09:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2017-11-11 17:30 - 2016-02-06 13:13 - 000000000 ____D C:\ProgramData\NVIDIA 2017-11-11 17:30 - 2015-04-04 17:43 - 000000000 ____D C:\Users\Waldemar\AppData\Local\HTC MediaHub 2017-11-11 17:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-11-11 17:21 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2017-11-11 17:20 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-11-11 17:14 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\PrintDialog 2017-11-11 17:12 - 2015-10-24 21:10 - 000002461 _____ C:\Users\Waldemar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-11-11 17:12 - 2014-12-25 14:29 - 000000000 __RDO C:\Users\Waldemar\SkyDrive 2017-11-11 17:11 - 2015-06-19 04:35 - 000000000 ____D C:\Users\Waldemar\AppData\Local\Dropbox 2017-11-11 17:09 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate 2017-11-11 17:09 - 2015-10-24 21:06 - 000000000 ____D C:\Users\Waldemar\AppData\Local\TileDataLayer 2017-11-11 17:09 - 2015-09-10 06:55 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-11-11 17:08 - 2017-05-13 09:03 - 000000000 ___HD C:\$GetCurrent 2017-11-11 17:07 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt 2017-11-11 17:06 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2017-11-11 17:04 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration 2017-11-11 17:04 - 2015-10-24 21:02 - 000023140 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-11-11 17:04 - 2014-12-25 14:35 - 000002285 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-11-11 16:59 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-11-11 16:57 - 2014-12-25 16:53 - 000000000 ____D C:\Users\Waldemar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer 2017-11-11 16:56 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2017-11-11 16:56 - 2015-04-04 17:33 - 000000000 ____D C:\Temp 2017-11-11 16:55 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-11-11 16:53 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\InputMethod 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\InputMethod 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help 2017-11-11 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2017-11-11 16:53 - 2017-09-26 07:30 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-11-11 16:53 - 2017-09-24 08:16 - 000000000 ____D C:\Program Files\UNP 2017-11-11 16:53 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-11-11 16:53 - 2017-03-16 05:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-11-11 16:53 - 2016-06-12 04:12 - 000000000 ____D C:\WINDOWS\SysWOW64\vbox 2017-11-11 16:53 - 2016-06-12 04:12 - 000000000 ____D C:\WINDOWS\system32\vbox 2017-11-11 16:53 - 2016-06-11 15:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-11-11 16:53 - 2015-10-30 20:23 - 000000000 ____D C:\WINDOWS\ShellNew 2017-11-11 16:53 - 2015-08-22 19:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Endpoint Protection 2017-11-11 16:53 - 2015-07-21 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krańcowa Ochrona firmy Trusteer 2017-11-11 16:53 - 2015-04-04 16:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Doctum 2017-11-11 16:53 - 2014-12-28 08:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2017-11-11 16:53 - 2014-12-27 14:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-11-11 16:53 - 2014-12-25 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-11-11 16:53 - 2014-12-25 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2017-11-11 16:53 - 2014-12-25 14:58 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-11-11 16:53 - 2014-12-25 14:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-11-11 16:53 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2017-11-11 16:53 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2017-11-11 16:48 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries 2017-11-11 16:35 - 2017-09-26 07:30 - 000000000 ____D C:\WINDOWS\system32\BestPractices 2017-11-11 16:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat 2017-11-11 16:34 - 2015-04-04 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2017-11-11 16:26 - 2015-04-04 17:25 - 000000000 ____D C:\Users\Waldemar\AppData\Roaming\Skype 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ur-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ug-CN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\tt-RU 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\tk-TM 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\te-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ta-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\sw-KE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\sq-AL 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\si-LK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\quz-PE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\prs-AF 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\pa-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\or-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\nn-NO 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ne-NP 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\mt-MT 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\mr-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\mn-MN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ml-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\mk-MK 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\mi-NZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\lo-LA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\lb-LU 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ky-KG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\kok-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\kn-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\km-KH 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\kk-KZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ka-GE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\is-IS 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\id-ID 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\hy-AM 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\gu-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\gd-GB 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ga-IE 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\fil-PH 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\fa-IR 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\cy-GB 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\bn-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\bn-BD 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\be-BY 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\as-IN 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\am-ET 2017-11-11 16:19 - 2017-09-30 15:29 - 000000000 ____D C:\WINDOWS\system32\af-ZA 2017-11-11 16:19 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser 2017-11-11 15:50 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-11-11 15:50 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI 2017-11-11 14:37 - 2015-02-21 20:36 - 000000999 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk 2017-11-11 14:35 - 2015-11-17 06:19 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-11-11 14:33 - 2014-12-25 17:07 - 000000000 ____D C:\ProgramData\Oracle 2017-11-11 14:31 - 2014-12-25 17:07 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2017-11-11 14:31 - 2014-12-25 17:07 - 000000000 ____D C:\Program Files (x86)\Java 2017-11-11 14:30 - 2015-04-04 17:25 - 000000000 ____D C:\ProgramData\Skype 2017-11-11 14:27 - 2016-06-11 15:44 - 000000000 ____D C:\Program Files\CCleaner 2017-11-11 13:44 - 2017-05-13 09:21 - 000000036 _____ C:\WINDOWS\progress.ini 2017-11-11 13:33 - 2014-12-25 14:52 - 000544424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-11-11 11:28 - 2017-06-13 03:45 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys 2017-11-10 19:07 - 2014-12-28 19:12 - 000000000 ___RD C:\Users\Waldemar\Documents\MAT 4 2017-11-07 10:48 - 2014-12-28 17:42 - 000000000 ___RD C:\Users\Waldemar\Documents\V M 2017-11-07 10:47 - 2014-12-28 17:39 - 000000000 ___RD C:\Users\Waldemar\Documents\IV M 2017-11-07 10:46 - 2014-12-28 17:40 - 000000000 ___RD C:\Users\Waldemar\Documents\M4 2017-11-07 10:42 - 2017-09-21 18:15 - 000000000 ___RD C:\Users\Waldemar\Documents\MAT 7 2017-11-06 15:31 - 2014-12-28 17:40 - 000000000 ___RD C:\Users\Waldemar\Documents\konkursy gimnazjum 2017-11-03 06:04 - 2014-12-25 16:07 - 000000000 ____D C:\Users\Waldemar\AppData\Roaming\Dropbox 2017-10-30 11:29 - 2014-12-28 19:13 - 000000000 ___RD C:\Users\Waldemar\Documents\MAT 6 2017-10-26 20:54 - 2017-09-29 14:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-10-26 20:54 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-10-24 09:54 - 2016-11-26 11:40 - 000000000 ___RD C:\Users\Waldemar\Documents\Jana Pawła 72 2017-10-24 09:15 - 2015-02-03 16:50 - 000000000 ____D C:\Users\Waldemar\Documents\RAPORTY szk 2017-10-24 05:51 - 2014-12-28 19:13 - 000000000 ___RD C:\Users\Waldemar\Documents\MAT 5 2017-10-21 10:12 - 2014-12-28 17:40 - 000000000 ____D C:\Users\Waldemar\Documents\KLASA 2017-10-16 04:31 - 2014-12-25 14:58 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-10-14 16:07 - 2017-10-03 09:28 - 000000000 ____D C:\Users\Waldemar\AppData\Local\CrashDumps 2017-10-14 16:07 - 2015-08-22 19:33 - 000000000 ____D C:\Program Files\PDFCreator 2017-10-14 15:18 - 2014-12-25 15:59 - 000000000 ____D C:\Program Files\AVAST Software 2017-10-14 15:17 - 2014-12-25 15:58 - 000000000 ____D C:\ProgramData\AVAST Software 2017-10-14 14:01 - 2015-06-19 04:35 - 000001190 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-985563321-613337312-3116572322-1001UA.job 2017-10-13 05:01 - 2015-06-19 04:35 - 000001138 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-985563321-613337312-3116572322-1001Core.job ==================== Pliki w katalogu głównym wybranych folderów ======= 2016-05-14 11:18 - 2016-05-14 11:18 - 000007605 _____ () C:\Users\Waldemar\AppData\Local\Resmon.ResmonCfg 2015-10-24 20:53 - 2015-10-24 20:53 - 000000000 _____ () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-11-11 16:55 ==================== Koniec FRST.txt ============================