Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 17.02.2018 Uruchomiony przez euro (administrator) EURO-KOMPUTER (19-02-2018 02:26:25) Uruchomiony z D:\PP Załadowane profile: euro (Dostępne profile: euro) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka nie została wykryta!) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (ABBYY) C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe () C:\Program Files\CyberLink\Shared files\RichVideo.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-15] (Realtek Semiconductor) HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink) HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.) HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.) HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.) HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.) HKLM\...\Run: [UpdatePSTShortCut] => "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated) HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM\...\Run: [Bonus.SSR.FR10] => C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [941320 2010-01-18] (ABBYY.) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [Samsung PanelMgr] => C:\windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-01-06] () HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG) HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [296096 2012-10-14] (RealNetworks, Inc.) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation) HKU\S-1-5-21-2092716530-3474641769-2676177707-1000\...\MountPoints2: {518b41f2-ba67-11e7-9585-002454ae796b} - F:\Startme.exe HKU\S-1-5-21-2092716530-3474641769-2676177707-1000\...\MountPoints2: {6c352eb0-c32f-11df-af6d-002454ae796b} - H:\SETUP.EXE Startup: C:\Users\euro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2015-04-28] ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2 Tcpip\..\Interfaces\{967BD200-E0EF-44C8-A7B6-89F792EB3628}: [DhcpNameServer] 31.11.202.254 37.8.214.2 Internet Explorer: ================== HKU\S-1-5-21-2092716530-3474641769-2676177707-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/ HKU\S-1-5-21-2092716530-3474641769-2676177707-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22apple.com/?utm_source=b&ch=sof&uid=WDCXWD2500BEVT-35A23T0_WD-WXG1A50M6022M6022®=1359192386 SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_plPL397PL400 SearchScopes: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_plPL397PL400 BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-10-14] (RealPlayer) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation) Toolbar: HKU\S-1-5-21-2092716530-3474641769-2676177707-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) FireFox: ======== FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2016-08-10] [Przestarzałe] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => nie znaleziono FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32.dll [2009-10-28] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=15.0.6.14 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2012-10-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.6.14 -> c:\program files\real\realplayer\Netscape6\nprjplug.dll [2012-10-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=15.0.6.14 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2012-10-14] (RealPlayer) FF Plugin: @vividas.com/npVividasPlayer -> C:\Program Files\Vividas\Player\npVividasPlayer.dll [2011-02-10] ( ) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.google.com CHR Profile: C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default [2016-09-18] CHR Extension: (Dokumenty Google) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-11] CHR Extension: (Dysk Google) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-11] CHR Extension: (YouTube) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-11] CHR Extension: (Arkusze Google) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-11] CHR Extension: (Dokumenty Google offline) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-31] CHR Extension: (Avast Online Security) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-08-11] CHR Extension: (22Apple) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda [2016-08-11] [UpdateUrl: hxxp://t.xxx.com/download/chrome/update.xml] <==== UWAGA CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2016-08-11] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-11] CHR Extension: (Gmail) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-11] CHR Extension: (Chrome Media Router) - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-31] CHR HKLM\...\Chrome\Extension: [ijblflkdjdopkpdgllkmlbgcffjbnfda] - C:\Users\euro\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-01-26] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-29] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ABBYY.Licensing.FineReader.Corporate.10.0; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe [814344 2009-12-19] (ABBYY) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation) R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] () S4 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [153808 2010-06-08] (Avanquest Software) [Brak podpisu cyfrowego] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ampa; C:\windows\system32\ampa.sys [35760 2016-12-25] () R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation) S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-07-14] (Windows (R) 2003 DDK 3790 provider) S3 s1039mdm; C:\windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation) R0 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-09-18] () R2 SSPORT; C:\windows\system32\Drivers\SSPORT.sys [5120 2009-07-29] (Samsung Electronics) [Brak podpisu cyfrowego] R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] () S3 cpuz132; \??\C:\Users\euro\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X] S2 DgiVecp; \??\C:\windows\system32\Drivers\DgiVecp.sys [X] S2 eamonm; system32\DRIVERS\eamonm.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-02-16 23:34 - 2018-02-19 02:26 - 000000000 ____D C:\FRST 2018-02-14 01:31 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2018-02-14 01:31 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2018-02-14 01:31 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2018-02-14 01:31 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2018-02-14 01:31 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2018-02-14 01:31 - 2018-02-10 06:45 - 000668160 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2018-02-14 01:31 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2018-02-14 01:31 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2018-02-14 01:31 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2018-02-14 01:31 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2018-02-14 01:31 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2018-02-14 01:31 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2018-02-14 01:31 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2018-02-14 01:31 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2018-02-14 01:31 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2018-02-14 01:31 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe 2018-02-14 01:31 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2018-02-14 01:31 - 2018-01-12 17:29 - 001309928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2018-02-14 01:31 - 2018-01-12 17:29 - 000250600 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys 2018-02-14 01:31 - 2018-01-12 17:29 - 000240872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys 2018-02-14 01:31 - 2018-01-12 17:29 - 000187624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2018-02-14 01:31 - 2018-01-12 17:29 - 000137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2018-02-14 01:31 - 2018-01-12 17:29 - 000067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys 2018-02-14 01:31 - 2018-01-12 17:27 - 001310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2018-02-14 01:31 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll 2018-02-14 01:31 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\windows\system32\xpsrchvw.exe 2018-02-14 01:31 - 2018-01-12 17:05 - 000055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys 2018-02-14 01:31 - 2018-01-12 17:05 - 000025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys 2018-02-14 01:31 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\windows\system32\cdosys.dll 2018-02-14 01:31 - 2018-01-11 17:01 - 002403328 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2018-02-14 01:31 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2018-02-14 01:31 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\windows\system32\t2embed.dll 2018-02-14 01:31 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll 2018-02-14 01:30 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2018-02-14 01:30 - 2018-02-10 07:07 - 000004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2018-02-14 01:30 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec 2018-02-14 01:30 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2018-02-14 01:30 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2018-02-14 01:30 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2018-02-14 01:30 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2018-02-14 01:30 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2018-02-14 01:30 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2018-02-14 01:30 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2018-02-14 01:30 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2018-02-14 01:30 - 2018-02-10 06:49 - 000104960 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2018-02-14 01:30 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2018-02-14 01:30 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2018-02-14 01:30 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll 2018-02-14 01:30 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx 2018-02-14 01:30 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2018-02-14 01:30 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2018-02-14 01:30 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll 2018-02-14 01:30 - 2018-02-10 06:27 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2018-02-14 01:30 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 001062912 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll 2018-02-14 01:30 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll 2018-02-14 01:30 - 2018-01-12 17:05 - 000024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys 2018-02-14 01:30 - 2018-01-12 17:02 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe 2018-02-14 01:30 - 2018-01-12 17:02 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys 2018-02-14 01:30 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe 2018-02-14 01:30 - 2018-01-12 17:02 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll 2018-02-14 01:30 - 2018-01-12 17:02 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe 2018-02-14 01:30 - 2018-01-12 16:59 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2018-02-14 01:30 - 2018-01-12 16:57 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys 2018-02-14 01:30 - 2018-01-12 16:57 - 000124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2018-02-14 01:30 - 2018-01-12 16:57 - 000098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2018-02-14 01:30 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll 2018-02-14 01:30 - 2018-01-12 16:56 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe 2018-02-14 01:30 - 2018-01-12 16:56 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe 2018-02-14 01:30 - 2018-01-12 16:56 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll 2018-02-14 01:30 - 2018-01-05 17:11 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll 2018-02-14 01:30 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll 2018-02-14 01:30 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2018-02-14 01:15 - 2018-02-14 01:15 - 000000975 _____ C:\Users\euro\Desktop\dmde — skrót.lnk 2018-02-10 18:42 - 2018-02-10 18:42 - 000000000 ____D C:\ProgramData\AomeiBR 2018-02-10 18:35 - 2018-02-10 20:13 - 000000000 ____D C:\windows\amlog 2018-02-10 18:33 - 2018-02-10 18:48 - 000000980 _____ C:\windows\ampa.ini 2018-02-10 18:32 - 2018-02-14 10:54 - 000028672 _____ C:\windows\AMCPY2M 2018-02-10 18:14 - 2015-07-16 20:12 - 006131200 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2018-02-10 18:14 - 2015-07-16 20:12 - 000856064 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2018-02-10 18:14 - 2015-07-16 20:12 - 000053248 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2018-02-10 18:14 - 2015-07-16 16:14 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe 2018-02-10 18:14 - 2014-12-11 18:47 - 000074240 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe 2018-02-10 18:07 - 2018-02-14 10:51 - 000001024 ____H C:\AMTAG.BIN 2018-02-10 18:07 - 2018-02-10 18:07 - 000001247 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Standard Edition 6.6.lnk 2018-02-10 18:07 - 2018-02-10 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.6 2018-02-10 18:06 - 2018-02-14 10:51 - 000000000 ____D C:\Program Files\AOMEI Partition Assistant Standard Edition 6.6 2018-02-10 18:06 - 2017-11-20 15:45 - 001722728 _____ C:\windows\ampa.exe 2018-02-10 18:06 - 2016-12-25 23:26 - 000035760 _____ C:\windows\system32\ampa.sys 2018-02-09 23:19 - 2017-03-07 16:06 - 002746880 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2018-02-09 23:19 - 2017-03-07 16:06 - 000221184 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll 2018-02-09 23:19 - 2017-03-07 16:06 - 000013824 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll 2018-02-09 22:44 - 2012-08-23 15:44 - 000014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys 2018-02-09 22:44 - 2012-08-23 12:12 - 000192000 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll 2018-02-09 22:40 - 2013-10-02 01:42 - 000049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys 2018-02-09 22:40 - 2013-10-02 01:32 - 000012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2018-02-09 22:40 - 2013-10-02 01:30 - 000014336 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2018-02-09 22:40 - 2013-10-02 01:14 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll 2018-02-09 22:40 - 2013-10-02 01:14 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll 2018-02-09 22:40 - 2013-10-02 00:45 - 000032256 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll 2018-02-09 22:40 - 2013-10-01 23:34 - 001068544 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe 2018-02-09 22:37 - 2018-01-22 00:42 - 000117480 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe 2018-02-09 22:37 - 2018-01-22 00:20 - 000533504 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 001893888 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe 2018-02-09 22:37 - 2018-01-19 15:05 - 001314304 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000594944 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000508416 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000337920 _____ (Microsoft Corporation) C:\windows\system32\centel.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000311808 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000212992 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll 2018-02-09 22:37 - 2018-01-19 15:05 - 000190464 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2018-02-09 22:37 - 2017-12-05 18:08 - 000072704 _____ (Microsoft Corporation) C:\windows\system32\TabSvc.dll 2018-02-09 22:37 - 2017-12-05 16:54 - 000334848 _____ (Microsoft Corporation) C:\windows\system32\wisptis.exe 2018-02-08 20:00 - 2018-01-01 03:00 - 012880384 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 001499648 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 001417728 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 001390080 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 001155584 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000741888 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000564736 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000463360 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000377344 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000328192 _____ (Microsoft Corporation) C:\windows\system32\p2psvc.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000269824 _____ (Microsoft Corporation) C:\windows\system32\pnrpsvc.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000217600 _____ (Microsoft Corporation) C:\windows\system32\P2P.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\icfupgd.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000084480 _____ (Microsoft Corporation) C:\windows\system32\INETRES.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000033280 _____ (Microsoft Corporation) C:\windows\system32\traffic.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000010752 _____ (Microsoft Corporation) C:\windows\system32\wshnetbs.dll 2018-02-08 20:00 - 2018-01-01 03:00 - 000002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 001806848 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:54 - 001214184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys 2018-02-08 20:00 - 2018-01-01 02:54 - 000712936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys 2018-02-08 20:00 - 2018-01-01 02:54 - 000201960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys 2018-02-08 20:00 - 2018-01-01 02:54 - 000198888 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll 2018-02-08 20:00 - 2018-01-01 02:54 - 000198888 _____ (Microsoft Corporation) C:\windows\system32\hal.dll 2018-02-08 20:00 - 2018-01-01 02:54 - 000173288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdyboost.sys 2018-02-08 20:00 - 2018-01-01 02:54 - 000139496 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll 2018-02-08 20:00 - 2018-01-01 02:54 - 000105192 _____ (Microsoft Corporation) C:\windows\system32\consent.exe 2018-02-08 20:00 - 2018-01-01 02:50 - 000317952 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe 2018-02-08 20:00 - 2018-01-01 02:43 - 000104448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys 2018-02-08 20:00 - 2018-01-01 02:43 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys 2018-02-08 20:00 - 2018-01-01 02:43 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbios.sys 2018-02-08 20:00 - 2018-01-01 02:43 - 000018944 _____ (Microsoft Corporation) C:\windows\system32\wfapigp.dll 2018-02-08 20:00 - 2018-01-01 02:43 - 000013824 _____ (Microsoft Corporation) C:\windows\system32\wshqos.dll 2018-02-08 20:00 - 2018-01-01 02:41 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll 2018-02-08 20:00 - 2018-01-01 02:38 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe 2018-02-08 20:00 - 2018-01-01 02:36 - 000314368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2018-02-08 20:00 - 2018-01-01 02:36 - 000313344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys 2018-02-08 20:00 - 2018-01-01 02:35 - 000514048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys 2018-02-08 20:00 - 2018-01-01 02:35 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2018-02-08 20:00 - 2018-01-01 02:35 - 000081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys 2018-02-08 20:00 - 2018-01-01 02:35 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:35 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:35 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2018-02-08 20:00 - 2018-01-01 02:35 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2018-02-08 20:00 - 2017-12-21 07:27 - 000535656 _____ (Microsoft Corporation) C:\windows\system32\winload.exe 2018-02-08 20:00 - 2017-12-05 18:08 - 000481792 _____ (Microsoft Corporation) C:\windows\system32\mscms.dll 2018-02-08 20:00 - 2017-12-05 18:08 - 000215040 _____ (Microsoft Corporation) C:\windows\system32\icm32.dll 2018-02-08 20:00 - 2017-12-05 16:49 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\WcsPlugInService.dll 2018-02-07 12:12 - 2018-02-07 12:14 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-02-07 12:12 - 2018-02-07 12:12 - 000000000 ____D C:\Program Files\Common Files\Adobe 2018-02-07 10:37 - 2017-11-07 17:13 - 000002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2018-02-07 10:37 - 2017-11-04 16:10 - 000158720 _____ (Microsoft Corporation) C:\windows\system32\itircl.dll 2018-02-07 10:37 - 2017-11-04 16:10 - 000142336 _____ (Microsoft Corporation) C:\windows\system32\itss.dll 2018-02-07 10:37 - 2017-11-02 16:11 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\iprtrmgr.dll 2018-02-07 10:37 - 2017-11-02 16:11 - 000115200 _____ (Microsoft Corporation) C:\windows\system32\rtm.dll 2018-02-07 10:37 - 2017-11-02 16:11 - 000075264 _____ (Microsoft Corporation) C:\windows\system32\mprdim.dll 2018-02-07 10:37 - 2017-11-02 15:56 - 000008192 _____ (Microsoft Corporation) C:\windows\system32\iprtprio.dll 2018-02-07 10:37 - 2017-10-16 23:46 - 000953344 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll 2018-02-07 10:37 - 2017-10-12 01:14 - 000247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-02-19 02:22 - 2012-06-04 15:36 - 000000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2018-02-19 02:20 - 2010-08-11 12:25 - 000000000 ____D C:\Users\euro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2018-02-19 02:20 - 2009-07-14 05:53 - 000000006 ____H C:\windows\Tasks\SA.DAT 2018-02-17 20:33 - 2009-07-14 05:34 - 000014736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2018-02-17 20:33 - 2009-07-14 05:34 - 000014736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2018-02-14 11:00 - 2010-06-14 21:57 - 000744036 _____ C:\windows\system32\perfh015.dat 2018-02-14 11:00 - 2010-06-14 21:57 - 000157486 _____ C:\windows\system32\perfc015.dat 2018-02-14 11:00 - 2009-07-26 21:06 - 001679274 _____ C:\windows\system32\PerfStringBackup.INI 2018-02-14 11:00 - 2009-07-14 03:37 - 000000000 ____D C:\windows\inf 2018-02-14 10:44 - 2016-12-29 19:42 - 002593792 ___SH C:\Users\euro\Desktop\Thumbs.db 2018-02-14 09:51 - 2009-07-14 05:33 - 000421800 _____ C:\windows\system32\FNTCACHE.DAT 2018-02-14 01:55 - 2017-10-11 21:03 - 127229528 ____C (Microsoft Corporation) C:\windows\system32\MRT-KB890830.exe 2018-02-14 01:55 - 2013-08-09 23:54 - 000000000 ____D C:\windows\system32\MRT 2018-02-14 01:54 - 2010-09-18 17:10 - 127229528 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe 2018-02-14 01:50 - 2009-07-14 03:04 - 000000510 _____ C:\windows\win.ini 2018-02-10 18:38 - 2009-07-14 05:53 - 000032604 _____ C:\windows\Tasks\SCHEDLGU.TXT 2018-02-09 23:33 - 2012-01-29 20:48 - 000007597 _____ C:\Users\euro\AppData\Local\Resmon.ResmonCfg 2018-02-09 22:49 - 2015-04-16 05:33 - 000000000 ____D C:\windows\system32\appraiser 2018-02-09 22:49 - 2009-07-14 03:37 - 000000000 ____D C:\windows\PolicyDefinitions 2018-02-08 19:30 - 2009-07-14 03:37 - 000000000 ____D C:\windows\system32\Setup 2018-02-07 12:12 - 2010-10-07 21:38 - 000000000 ____D C:\Program Files\Adobe 2018-02-07 12:12 - 2010-08-11 12:26 - 000000000 ____D C:\ProgramData\Adobe 2018-01-23 19:58 - 2010-09-18 15:16 - 000456864 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe ==================== Pliki w katalogu głównym wybranych folderów ======= 2011-06-14 15:51 - 2011-07-16 22:40 - 000009728 _____ () C:\Users\euro\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-01-29 20:48 - 2018-02-09 23:33 - 000007597 _____ () C:\Users\euro\AppData\Local\Resmon.ResmonCfg 2011-06-02 23:31 - 2011-06-02 23:31 - 000000000 _____ () C:\Users\euro\AppData\Local\{08A150DD-78FD-4FF0-9F85-44A7240877DC} 2012-01-07 16:00 - 2012-01-07 16:00 - 000000000 _____ () C:\Users\euro\AppData\Local\{2CE7C18E-7548-4796-97EA-6406645752B2} 2012-01-07 16:11 - 2012-01-07 16:12 - 000000000 _____ () C:\Users\euro\AppData\Local\{94C165C7-8066-4D09-B083-96BE07FAC4B1} 2012-01-15 20:21 - 2012-01-15 20:21 - 000000000 _____ () C:\Users\euro\AppData\Local\{A85DD9F5-3A9A-415D-AA8D-E915C3E4C398} 2012-01-07 16:01 - 2012-01-07 16:01 - 000000000 _____ () C:\Users\euro\AppData\Local\{C67076CD-FD49-4660-AA54-22ED526ADA47} ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\windows\explorer.exe => Plik podpisany cyfrowo C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\windows\system32\wininit.exe => Plik podpisany cyfrowo C:\windows\system32\svchost.exe => Plik podpisany cyfrowo C:\windows\system32\services.exe => Plik podpisany cyfrowo C:\windows\system32\User32.dll => Plik podpisany cyfrowo C:\windows\system32\userinit.exe => Plik podpisany cyfrowo C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2018-02-07 11:30 ==================== Koniec FRST.txt ============================