Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 09.01.2019 Uruchomiony przez BP7CC5J (administrator) BP7CC5J-DELL (09-01-2019 17:48:58) Uruchomiony z C:\Users\BP7CC5J\Downloads Załadowane profile: BP7CC5J (Dostępne profile: BP7CC5J) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe (Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe (Datalogic) C:\Program Files (x86)\DLSOPOS\ResourceKit\DLWMIService.exe () C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe (HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP) C:\Windows\System32\HPSIsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Mega Limited) C:\Users\BP7CC5J\AppData\Local\MEGAsync\MEGAsync.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\sfc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtDCpl64.exe [2907792 2018-08-21] (Realtek Semiconductor Corp.) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\jv16 PowerTools X\StartupOptimizer.exe "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle Corporation) HKU\S-1-5-21-531174507-3532666190-1112222229-1000\...\Run: [fission-80] => C:\ProgramData\fission-02\fission-61.exe -f HKU\S-1-5-21-531174507-3532666190-1112222229-1000\...\MountPoints2: {536e4179-b2fe-11e5-a29f-806e6f6e6963} - F:\SISetup.exe HKU\S-1-5-21-531174507-3532666190-1112222229-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3229696 2016-08-29] (Microsoft Corporation) <==== UWAGA HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.110\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2018-09-20] (Adobe Systems, Inc.) HKLM\Software\...\Authentication\Credential Providers: [{18CBEEAA-6708-41A1-9379-D08915333CF2}] -> C:\Program Files\Common Files\SPBA\provider.dll [2010-09-15] (UPEK Inc.) HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corp.) HKLM\Software\...\Authentication\Credential Provider Filters: [{AE583D93-8D1B-424F-9858-5623FB7824EE}] -> C:\Program Files\Common Files\SPBA\provider.dll [2010-09-15] (UPEK Inc.) Lsa: [Authentication Packages] msv1_0 wvauth Startup: C:\Users\BP7CC5J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\11KopiaSklep — skrót.lnk [2016-01-05] ShortcutTarget: 11KopiaSklep — skrót.lnk -> C:\RAPORT\KopiaCloud\11KopiaSklep.bat () Startup: C:\Users\BP7CC5J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MediaSync.lnk [2016-10-27] ShortcutTarget: MediaSync.lnk -> C:\Program Files (x86)\AprMedia\MediaSync\MediaSync.exe (AprMedia) Startup: C:\Users\BP7CC5J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-06-14] ShortcutTarget: MEGAsync.lnk -> C:\Users\BP7CC5J\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) GroupPolicy\User: Ograniczenia ? <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\..\Interfaces\{E5E1FA5A-EF33-441E-9D00-2E3B2D5FEA13}: [NameServer] 8.8.8.8,8.8.4.4 HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1] Internet Explorer: ================== BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\ssv.dll [2018-10-17] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-17] (Oracle Corporation) FireFox: ======== FF DefaultProfile: tx2uabzq.default-1500971718831 FF ProfilePath: C:\Users\BP7CC5J\AppData\Roaming\Mozilla\Firefox\Profiles\tx2uabzq.default-1500971718831 [2019-01-09] FF Homepage: Mozilla\Firefox\Profiles\tx2uabzq.default-1500971718831 -> hxxps://www.zamowienia.czempionhurt.pl/Ehurt/EServer FF Extension: (Brak nazwy) - C:\Users\BP7CC5J\AppData\Roaming\Mozilla\Firefox\Profiles\tx2uabzq.default-1500971718831\Extensions\{ba5a4d10-1c03-4db9-b7ca-c9cc255e26e8}.xpi [2018-07-17] FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [Przestarzałe] [Brak podpisu cyfrowego] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-09] () FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-09] () FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-10-17] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-10-17] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [Brak pliku] FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [Brak pliku] FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default [2018-10-06] CHR Extension: (Prezentacje) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-26] CHR Extension: (Dokumenty) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-26] CHR Extension: (Dysk Google) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-25] CHR Extension: (YouTube) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-25] CHR Extension: (Flash Playlist) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanagokoaogopceablgmpndejhedkjjb [2018-03-15] CHR Extension: (Arkusze) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-26] CHR Extension: (Dokumenty Google offline) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-05] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-09] CHR Extension: (Gmail) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-25] CHR Extension: (Chrome Media Router) - C:\Users\BP7CC5J\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-05] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 DLWMIService; C:\Program Files (x86)\DLSOPOS\ResourceKit\DLWMIService.exe [22528 2017-11-28] (Datalogic) [Brak podpisu cyfrowego] R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [218504 2012-01-17] () R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP) [Brak podpisu cyfrowego] R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation) S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1637888 2011-10-08] () [Brak podpisu cyfrowego] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11660528 2018-12-07] (TeamViewer GmbH) R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [Brak podpisu cyfrowego] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-11-20] (Microsoft Corporation) S3 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [Brak podpisu cyfrowego] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [Brak podpisu cyfrowego] S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [Brak podpisu cyfrowego] S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 CompositeBus; C:\Windows\System32\DRIVERS\CompositeBus.sys [38912 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 e1kexpress; C:\Windows\System32\DRIVERS\e1k60x64.sys [220672 2009-06-10] (Intel Corporation) R3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [129448 2017-09-19] (Future Technology Devices International Ltd.) R3 FTSER2K; C:\Windows\System32\drivers\ftser2k.sys [89792 2017-09-19] (Future Technology Devices International Ltd.) S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [3008144 2018-08-21] (Realtek Semiconductor Corp.) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [181304 2016-03-28] (Intel Corporation) S3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation) R3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.) R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation) S3 rdpbus; C:\Windows\System32\DRIVERS\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 StnSport; C:\Windows\System32\DRIVERS\StnSport.sys [128000 2010-08-20] () S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-21] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 EverestDriver; \??\C:\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 [X] S1 MpKsl809613bd; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B9E7B1D0-02B5-4C98-A0D7-28F920116065}\MpKsl809613bd.sys [X] ========================== MD5 sterowników ======================= C:\Windows\system32\drivers\1394ohci.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\ACPI.sys DCA5495CA17AEB2F4FD8AC60812C3999 C:\Windows\system32\drivers\acpipmi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adp94xx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adpahci.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adpu320.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\afd.sys 0DC2A9882540DEA4A55B08785E09D8FC C:\Windows\system32\drivers\agp440.sys 466BF4170DC41BB939F1F9AB8F97F8F5 C:\Windows\system32\drivers\aliide.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\amdide.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\amdk8.sys 059C500251A01506D4AF93D83EE092A5 C:\Windows\system32\drivers\amdppm.sys 1F20CC69C5A6D3A419B0806D3CCC4422 C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49 C:\Windows\system32\drivers\amdsbs.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048 C:\Windows\system32\drivers\appid.sys 5057530FC0694368A8AC8FB1CE6F3459 C:\Windows\system32\drivers\arc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\arcsas.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\atapi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\bxvbda.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\Beep.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\bowser.sys D7E5C916557268B3DCC9E7DAD58E7727 C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\Brserid.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\bthmodem.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\circlass.sys ==> MD5 jest poprawne C:\Windows\System32\CLFS.sys B5D7A0638CA817BA7D8A4DFD3499BA2A C:\Windows\system32\drivers\CmBatt.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\cmdide.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\cng.sys 9DE8D00626F01DBD1879A6655D7A752D C:\Windows\system32\drivers\compbatt.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\crcdisk.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\csc.sys 80BC9D418607974E4940EBC42F69BC8D C:\Windows\System32\Drivers\dfsc.sys 63705A08981F7EDD376241D6E0A9C2AC C:\Windows\System32\drivers\discache.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\disk.sys 616387BBD83372220B09DE95F4E67BBC C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415 C:\Windows\system32\drivers\drmkaud.sys 26FE888505E5A945B0536AF9A2A27A6F C:\Windows\System32\drivers\dxgkrnl.sys 781C6AE4B9111C9AD5017F1677599CDE C:\Windows\System32\DRIVERS\e1c62x64.sys 77A7B4A585E5F275BBDE15D402B9E4BD C:\Windows\System32\DRIVERS\e1k60x64.sys 955F6564F448119C12AB3C048CCF8946 C:\Windows\system32\drivers\evbda.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\elxstor.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\errdev.sys 9002EED07FD7FCFF6B8C5C06B454AC19 C:\Windows\System32\Drivers\exfat.sys 7E45F8B117419ABA3BB26579F6E70324 C:\Windows\System32\Drivers\fastfat.sys 6EDFA237D25433C03F42FBFDB16BDD24 C:\Windows\system32\drivers\fdc.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\fileinfo.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\filetrace.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\flpydisk.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\fltmgr.sys DC591A7A196E99EFB5A48D708CB989FD C:\Windows\System32\drivers\FsDepends.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B C:\Windows\System32\drivers\ftdibus.sys D5F53AFCD0D6E0A2925BFFF9E2605552 C:\Windows\System32\drivers\ftser2k.sys FBD982A8B9B94FC17D37EDEBA40B71E9 C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0 C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\HidBatt.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\hidbth.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\hidir.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\hidusb.sys 90D91013D16A15B22A4B4EB6D4140A5B C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\HTTP.sys 93C367EA831FB39DEE3BA96539A187FB C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366 C:\Windows\System32\DRIVERS\igdkmd64.sys 79AE3CC82CA1563A4B392207997ACE7C C:\Windows\system32\drivers\iirsp.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\RTDVHD64.sys 6CAD358F9B529FBC5A47C1B1DCDED421 C:\Windows\System32\DRIVERS\IntcDAud.sys 3B7A082F5D593663164F7540D42CCED3 C:\Windows\system32\drivers\intelide.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\intelppm.sys 0DC5A37849449EAE2C2349CF2CC59C8E C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\ipnat.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\irenum.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\isapnp.sys 905E9D664F38B93B53FA05422165F5B5 C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6 C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\ksecdd.sys E4EB5B4314EADE3F4CE557201103A929 C:\Windows\System32\Drivers\ksecpkg.sys F9A3422C3C0C0AE8D36F51B82C22BD5D C:\Windows\system32\drivers\ksthunk.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\luafv.sys 5416CEB2916BBE635288C4D1075B045E C:\Windows\system32\drivers\megasas.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\MegaSR.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\TeeDriverx64.sys 009B44AA87EBFB87B3D3BB22097DFE73 C:\Windows\System32\DRIVERS\mf.sys 8D0E52F36A153D099DE7D5A1E233FAC7 C:\Windows\System32\drivers\modem.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\mountmgr.sys 072D8646E23ECF8A3F5F0157017B4DB6 C:\Windows\System32\DRIVERS\MpFilter.sys 3665AB2F67F4024F5F3F80335ED5322A C:\Windows\system32\drivers\mpio.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\mpsdrv.sys 3F829492638A86A3C4E0BB06778F0C23 C:\Windows\system32\drivers\mrxdav.sys 98DB1790F0A584E0A2528B92B052417F C:\Windows\System32\DRIVERS\mrxsmb.sys 061DC822BB116D10150402E31500FF8A C:\Windows\System32\DRIVERS\mrxsmb10.sys E8283FBB48873385E51D8202B43DEE98 C:\Windows\System32\DRIVERS\mrxsmb20.sys 8E7C76156FB89996EA5311D0E64BD916 C:\Windows\system32\drivers\msahci.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\msdsm.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\Msfs.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\msisadrv.sys 6FE3DBEEA730A857CA3DF603B7DEADA2 C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\MSPQM.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\MsRPC.sys 6D998E05CBEF595C38FCECC8DDAAAA86 C:\Windows\system32\drivers\mssmbios.sys 1FC0BF25FFCB9F751BCBC6C6AC577078 C:\Windows\System32\drivers\MSTEE.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\MTConfig.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\mup.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\mvusbews.sys 705E9675014EB688BEDD967B1ABECF19 C:\Windows\System32\DRIVERS\nwifi.sys 9FB2A095B1166CB3C9A06651863B3452 C:\Windows\System32\drivers\ndis.sys CBE5C2A3353A367734989E335D6AF194 C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\ndistapi.sys E8179074C0166D83BD8366169137669E C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\NDProxy.sys D0FE24076ED3BA7B54D6E9819F8215A8 C:\Windows\System32\DRIVERS\netbios.sys 2E19EB10185992AB08BC3688AACA4CE2 C:\Windows\System32\DRIVERS\netbt.sys 734837208CAFD6E0959A7A0333C95C9D C:\Windows\system32\drivers\nfrd960.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\NisDrvWFP.sys CE5F6E635FE4506AE6F2D6EB87425128 C:\Windows\System32\Drivers\Npfs.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\nsiproxy.sys BE313E566EEA2A4B7F9AAC9782A567D4 C:\Windows\System32\Drivers\Ntfs.sys D39A02ECAC8652ED27F53DD20F1B609E C:\Windows\System32\Drivers\Null.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A C:\Windows\system32\drivers\nv_agp.sys 7425A6B64F5D37D0565F2581B886E5E3 C:\Windows\system32\drivers\ohci1394.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\parport.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C C:\Windows\System32\DRIVERS\PBADRV.sys 363B3F857ABEE85767E01E3044C539CD C:\Windows\System32\drivers\pci.sys 481DADB90C1D4E9F19328079C7A9E63D C:\Windows\System32\drivers\pciide.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\pcmcia.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\pcw.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\peauth.sys EA4D67448BE493D543F1730D6CD04694 C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\processr.sys E4189C1CDDF26644F227CCC44BD7DDC6 C:\Windows\System32\DRIVERS\pacer.sys 4CE827A5433451551E99C2C1D20E4A43 C:\Windows\system32\drivers\ql2300.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\ql40xx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\rdbss.sys FB45727105E27756B3252572A138FA19 C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\rdpdr.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34 C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41 C:\Windows\System32\drivers\rdyboost.sys F4287A980C0AA41DE3073F053E5EA73C C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\Rt64win7.sys F307F1C796C0886490839FDE5ED5728C C:\Windows\system32\drivers\vms3cap.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sbp2port.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\secdrv.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\serial.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sermouse.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sffdisk.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sfloppy.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\silabenm.sys 8C61B219882C9C9ECA09BEDB82B0DDB1 C:\Windows\System32\DRIVERS\silabser.sys 2641655FAD6C1EA0F3677978E2BF28C1 C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sisraid4.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\smb.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\spldr.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\srv.sys 1145EC013B72D4E6C60497707BB1A4B6 C:\Windows\System32\DRIVERS\srv2.sys 2D8FFA3B636368130F909E0CD935B555 C:\Windows\System32\DRIVERS\srvnet.sys 4B1C343E11065819F687EAC68A5E13F3 C:\Windows\system32\drivers\stexstor.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\StnSport.sys 497BCB401CBE6281AB9DA624B3388AAC C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\storvsc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\swenum.sys 10DCD3BDFA785E1482EC02304A7E9B96 C:\Windows\System32\drivers\tcpip.sys F9EE4B0C1783FB393B28CC93121117FE C:\Windows\System32\DRIVERS\tcpip.sys F9EE4B0C1783FB393B28CC93121117FE C:\Windows\System32\drivers\tcpipreg.sys 7FE5586314EE7D6AA8483264A089E5AF C:\Windows\System32\drivers\tdpipe.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8 C:\Windows\System32\DRIVERS\tdx.sys 4DD986720F7CB7A8A5D1226793097B9A C:\Windows\system32\drivers\termdd.sys AC24D7A7D9EEDE11E2926F9001BEAFB5 C:\Windows\system32\drivers\terminpt.sys EF4469AB69EB15E5D3754E6AEAFBCD3D C:\Windows\system32\drivers\tpm.sys 48DDEF0B921DD331536CC82C1A8FF64F C:\Windows\System32\DRIVERS\tssecsrv.sys 2CF58216424757ED29605B4F18EC443C C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426 C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07 C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\uagp35.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\uliagpkx.sys B70E26A57F35ECA5199E6D6B9592A67C C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\umpass.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\usbccgp.sys E6DFE1F33B1250A6E26EA6F6CE10B09C C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31 C:\Windows\System32\DRIVERS\usbehci.sys 234F9E56606CE5D1549DE7D4CCA4DE0C C:\Windows\system32\drivers\usbhub.sys 0A33C9EC6822B24E26687F1EC6346922 C:\Windows\system32\drivers\usbohci.sys 9C456BFD0FF50CB5B7ECDA7B7529F63B C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\usbscan.sys 9661DA76B4531B2DA272ECCE25A8AF24 C:\Windows\System32\DRIVERS\USBSTOR.SYS D029DD09E22EB24318A8FC3D8138BA43 C:\Windows\system32\drivers\usbuhci.sys 3C1D50EBDC6F531C0AA905D71956E106 C:\Windows\System32\DRIVERS\VClone.sys 2CB7AEA800B614184238232FBA4430E1 C:\Windows\System32\drivers\vdrvroot.sys 7BDCE021786C3DCCFD2C22EBF643EE36 C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\vga.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\vhdmp.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\viaide.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\vmbus.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\volmgr.sys 8EDE91FBAC7BF7605323C517C717A253 C:\Windows\System32\drivers\volmgrx.sys 85C5468BC395819AE2A0C747334BA14C C:\Windows\System32\drivers\volsnap.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\vsmraid.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\vwifibus.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\wacompen.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\wanarp.sys 6CB845761069BB2722A2C6979F493AFB C:\Windows\System32\DRIVERS\wanarp.sys 6CB845761069BB2722A2C6979F493AFB C:\Windows\system32\drivers\wd.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8 C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\wimmount.sys ==> MD5 jest poprawne C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D C:\Windows\system32\drivers\wmiacpi.sys 43471A750D4F3918AC92F5131AE252D3 C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659 ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-01-09 17:48 - 2019-01-09 17:55 - 000035037 _____ C:\Users\BP7CC5J\Downloads\FRST.txt 2019-01-09 17:44 - 2019-01-09 17:44 - 002425344 _____ (Farbar) C:\Users\BP7CC5J\Downloads\FRST64.exe 2019-01-09 17:44 - 2019-01-09 17:44 - 000000000 ____D C:\Users\BP7CC5J\Downloads\FRST-OlderVersion 2019-01-09 16:32 - 2019-01-09 17:22 - 000000000 ____D C:\SFCFix 2019-01-09 16:26 - 2019-01-09 16:26 - 000000000 ____D C:\Users\BP7CC5J\Downloads\sfcfix 2019-01-09 16:24 - 2019-01-09 17:22 - 000000000 ____D C:\Users\BP7CC5J\AppData\Local\niemiro 2019-01-09 15:42 - 2019-01-09 17:48 - 000000000 ____D C:\FRST 2019-01-09 09:23 - 2019-01-09 09:23 - 000000000 ____D C:\Users\BP7CC5J\AppData\Local\DLS 2019-01-09 09:21 - 2019-01-09 09:21 - 000000000 ____D C:\ProgramData\Datalogic 2019-01-09 09:21 - 2019-01-09 09:21 - 000000000 ____D C:\Program Files (x86)\DLSOPOS 2019-01-09 08:47 - 2019-01-09 08:47 - 000002030 _____ C:\Users\BP7CC5J\Desktop\Aladdin.lnk 2019-01-09 07:26 - 2018-12-29 00:42 - 000396888 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2019-01-09 07:26 - 2018-12-28 23:52 - 000348760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2019-01-09 07:26 - 2018-12-28 21:03 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2019-01-09 07:26 - 2018-12-28 21:02 - 005552360 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-01-09 07:26 - 2018-12-28 21:02 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2019-01-09 07:26 - 2018-12-28 21:02 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2019-01-09 07:26 - 2018-12-28 21:02 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2019-01-09 07:26 - 2018-12-28 21:02 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2019-01-09 07:26 - 2018-12-28 21:02 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2019-01-09 07:26 - 2018-12-28 21:01 - 001664360 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 001472512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:51 - 004055272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2019-01-09 07:26 - 2018-12-28 20:51 - 003960552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2019-01-09 07:26 - 2018-12-28 20:50 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:34 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2019-01-09 07:26 - 2018-12-28 20:34 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2019-01-09 07:26 - 2018-12-28 20:34 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2019-01-09 07:26 - 2018-12-28 20:34 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2019-01-09 07:26 - 2018-12-28 20:31 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2019-01-09 07:26 - 2018-12-28 20:31 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2019-01-09 07:26 - 2018-12-28 20:31 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys 2019-01-09 07:26 - 2018-12-28 20:30 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2019-01-09 07:26 - 2018-12-28 20:28 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2019-01-09 07:26 - 2018-12-28 20:28 - 000161280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2019-01-09 07:26 - 2018-12-28 20:28 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2019-01-09 07:26 - 2018-12-28 20:27 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2019-01-09 07:26 - 2018-12-28 20:27 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys 2019-01-09 07:26 - 2018-12-28 20:27 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys 2019-01-09 07:26 - 2018-12-28 20:27 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys 2019-01-09 07:26 - 2018-12-28 20:27 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys 2019-01-09 07:26 - 2018-12-28 20:27 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2019-01-09 07:26 - 2018-12-28 20:27 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2019-01-09 07:26 - 2018-12-28 20:27 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2019-01-09 07:26 - 2018-12-28 20:27 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2019-01-09 07:26 - 2018-12-28 20:27 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2019-01-09 07:26 - 2018-12-28 20:26 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2019-01-09 07:26 - 2018-12-28 20:26 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:26 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 20:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2019-01-09 07:26 - 2018-12-28 19:09 - 000419608 _____ C:\Windows\SysWOW64\locale.nls 2019-01-09 07:26 - 2018-12-28 19:09 - 000419608 _____ C:\Windows\system32\locale.nls 2019-01-09 07:26 - 2018-12-28 01:01 - 025738240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-01-09 07:26 - 2018-12-28 00:50 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2019-01-09 07:26 - 2018-12-28 00:50 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2019-01-09 07:26 - 2018-12-28 00:38 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-01-09 07:26 - 2018-12-28 00:37 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2019-01-09 07:26 - 2018-12-28 00:36 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-01-09 07:26 - 2018-12-28 00:36 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2019-01-09 07:26 - 2018-12-28 00:36 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2019-01-09 07:26 - 2018-12-28 00:36 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2019-01-09 07:26 - 2018-12-28 00:31 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-01-09 07:26 - 2018-12-28 00:29 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2019-01-09 07:26 - 2018-12-28 00:28 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2019-01-09 07:26 - 2018-12-28 00:26 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2019-01-09 07:26 - 2018-12-28 00:25 - 020279808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2019-01-09 07:26 - 2018-12-28 00:25 - 000790016 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-01-09 07:26 - 2018-12-28 00:25 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2019-01-09 07:26 - 2018-12-28 00:25 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2019-01-09 07:26 - 2018-12-28 00:24 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2019-01-09 07:26 - 2018-12-28 00:17 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2019-01-09 07:26 - 2018-12-28 00:17 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2019-01-09 07:26 - 2018-12-28 00:14 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2019-01-09 07:26 - 2018-12-28 00:07 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2019-01-09 07:26 - 2018-12-28 00:07 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2019-01-09 07:26 - 2018-12-28 00:06 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2019-01-09 07:26 - 2018-12-28 00:05 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2019-01-09 07:26 - 2018-12-28 00:05 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2019-01-09 07:26 - 2018-12-28 00:04 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2019-01-09 07:26 - 2018-12-28 00:04 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2019-01-09 07:26 - 2018-12-28 00:03 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2019-01-09 07:26 - 2018-12-28 00:03 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2019-01-09 07:26 - 2018-12-28 00:03 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2019-01-09 07:26 - 2018-12-28 00:02 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2019-01-09 07:26 - 2018-12-28 00:01 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2019-01-09 07:26 - 2018-12-27 23:59 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2019-01-09 07:26 - 2018-12-27 23:59 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2019-01-09 07:26 - 2018-12-27 23:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2019-01-09 07:26 - 2018-12-27 23:56 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2019-01-09 07:26 - 2018-12-27 23:55 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2019-01-09 07:26 - 2018-12-27 23:55 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2019-01-09 07:26 - 2018-12-27 23:55 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2019-01-09 07:26 - 2018-12-27 23:50 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2019-01-09 07:26 - 2018-12-27 23:48 - 015284224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-01-09 07:26 - 2018-12-27 23:48 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2019-01-09 07:26 - 2018-12-27 23:48 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2019-01-09 07:26 - 2018-12-27 23:47 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2019-01-09 07:26 - 2018-12-27 23:46 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2019-01-09 07:26 - 2018-12-27 23:45 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2019-01-09 07:26 - 2018-12-27 23:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2019-01-09 07:26 - 2018-12-27 23:42 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2019-01-09 07:26 - 2018-12-27 23:42 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2019-01-09 07:26 - 2018-12-27 23:39 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2019-01-09 07:26 - 2018-12-27 23:39 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2019-01-09 07:26 - 2018-12-27 23:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2019-01-09 07:26 - 2018-12-27 23:36 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2019-01-09 07:26 - 2018-12-27 23:33 - 004860416 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2019-01-09 07:26 - 2018-12-27 23:33 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2019-01-09 07:26 - 2018-12-27 23:31 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2019-01-09 07:26 - 2018-12-27 23:29 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2019-01-09 07:26 - 2018-12-27 23:29 - 002060288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2019-01-09 07:26 - 2018-12-27 23:29 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2019-01-09 07:26 - 2018-12-27 23:28 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2019-01-09 07:26 - 2018-12-27 23:22 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2019-01-09 07:26 - 2018-12-27 23:11 - 004386816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2019-01-09 07:26 - 2018-12-27 23:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-01-09 07:26 - 2018-12-27 23:07 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2019-01-09 07:26 - 2018-12-27 23:06 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2019-01-09 07:26 - 2018-12-08 04:08 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll 2019-01-09 07:26 - 2018-12-08 04:08 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll 2019-01-09 07:26 - 2018-12-08 04:08 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\ndptsp.tsp 2019-01-09 07:26 - 2018-12-08 04:08 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp 2019-01-09 07:26 - 2018-12-08 04:08 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll 2019-01-09 07:26 - 2018-12-08 04:08 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll 2019-01-09 07:26 - 2018-12-08 03:56 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll 2019-01-09 07:26 - 2018-12-08 03:56 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll 2019-01-09 07:26 - 2018-12-08 03:56 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ndptsp.tsp 2019-01-09 07:26 - 2018-12-08 03:47 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2019-01-09 07:26 - 2018-12-08 03:47 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2019-01-09 07:26 - 2018-12-08 03:47 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys 2019-01-09 07:26 - 2018-12-08 03:41 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp 2019-01-09 07:26 - 2018-12-08 03:41 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll 2019-01-09 07:26 - 2018-12-08 03:41 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll 2019-01-09 07:26 - 2018-12-07 16:33 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2019-01-09 07:12 - 2019-01-09 07:13 - 000281352 _____ C:\Windows\Minidump\010919-79622-01.dmp 2019-01-08 17:50 - 2019-01-09 08:48 - 000000000 ____D C:\Users\BP7CC5J\.aladdin 2019-01-08 17:50 - 2019-01-09 08:47 - 000000000 ____D C:\Users\BP7CC5J\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Datalogic 2019-01-08 17:50 - 2019-01-08 17:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Datalogic 2019-01-08 14:52 - 2019-01-08 14:52 - 000792720 _____ (Ammyy LLC) C:\Users\BP7CC5J\Desktop\AA_v3.exe 2019-01-08 14:51 - 2019-01-08 14:52 - 000000000 ____D C:\ProgramData\AMMYY 2019-01-04 05:20 - 2019-01-04 05:20 - 000000000 ____D C:\ProgramData\Adobe 2018-12-22 17:08 - 2018-12-22 17:08 - 000000000 ____D C:\kcpos3 2018-12-21 04:10 - 2018-12-21 04:10 - 000264864 _____ C:\Windows\Minidump\122118-85270-01.dmp 2018-12-12 05:09 - 2018-12-06 03:39 - 003227648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2018-12-12 05:09 - 2018-11-28 23:02 - 014635520 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2018-12-12 05:09 - 2018-11-28 23:02 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2018-12-12 05:09 - 2018-11-28 23:02 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2018-12-12 05:09 - 2018-11-28 23:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2018-12-12 05:09 - 2018-11-28 23:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2018-12-12 05:09 - 2018-11-28 22:50 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2018-12-12 05:09 - 2018-11-28 22:50 - 011411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2018-12-12 05:09 - 2018-11-28 22:38 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2018-12-12 05:09 - 2018-11-28 22:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2018-12-12 05:09 - 2018-11-28 22:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2018-12-12 05:09 - 2018-11-11 18:01 - 000366824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2018-12-12 05:09 - 2018-11-11 17:58 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2018-12-12 05:09 - 2018-11-11 17:45 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2018-12-12 05:09 - 2018-11-08 17:58 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2018-12-12 05:09 - 2018-11-08 17:58 - 001889280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2018-12-12 05:09 - 2018-11-08 17:43 - 001391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2018-12-12 05:09 - 2018-11-08 17:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2018-12-12 05:08 - 2018-11-08 17:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2018-12-12 05:08 - 2018-11-08 17:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2018-12-12 05:08 - 2018-11-08 17:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2018-12-12 05:08 - 2018-11-08 17:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-01-09 17:43 - 2009-07-14 05:45 - 000031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2019-01-09 17:43 - 2009-07-14 05:45 - 000031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2019-01-09 17:22 - 2011-04-12 14:21 - 002669204 _____ C:\Windows\system32\perfh015.dat 2019-01-09 17:22 - 2011-04-12 14:21 - 000808276 _____ C:\Windows\system32\perfc015.dat 2019-01-09 17:22 - 2009-07-14 06:13 - 005647622 _____ C:\Windows\system32\PerfStringBackup.INI 2019-01-09 17:21 - 2016-01-04 17:31 - 000000000 ____D C:\KCFirma3 2019-01-09 17:18 - 2016-11-18 12:08 - 000000000 ____D C:\Users\BP7CC5J\AppData\LocalLow\Mozilla 2019-01-09 17:16 - 2018-08-21 19:04 - 000000000 ____D C:\Program Files (x86)\jv16 PowerTools X 2019-01-09 17:16 - 2015-12-17 11:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-01-09 17:15 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-01-09 16:11 - 2016-01-18 15:02 - 000000000 ____D C:\Users\BP7CC5J\AppData\Local\ElevatedDiagnostics 2019-01-09 15:20 - 2016-10-27 10:32 - 000000000 ____D C:\Users\BP7CC5J\AppData\Roaming\AprMedia 2019-01-09 15:13 - 2016-01-04 19:16 - 000000000 ___RD C:\Dropbox 2019-01-09 15:13 - 2016-01-04 17:38 - 000000000 ____D C:\KCSerwer3 2019-01-09 14:34 - 2016-01-04 19:16 - 000000000 ____D C:\H01 2019-01-09 14:20 - 2016-01-04 17:31 - 000000000 ____D C:\KCEtykiety3 2019-01-09 14:19 - 2016-03-01 06:12 - 000000010 _____ C:\Users\BP7CC5J\Desktop\CZYSTY.txt 2019-01-09 11:29 - 2016-01-04 17:30 - 000000000 ____D C:\RAPORT 2019-01-09 11:28 - 2016-01-04 17:30 - 000000000 ____D C:\KCZadania3 2019-01-09 11:11 - 2018-08-21 06:10 - 000004574 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier 2019-01-09 11:11 - 2018-08-21 06:10 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2019-01-09 11:11 - 2016-01-05 13:45 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-01-09 11:11 - 2016-01-05 13:45 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2019-01-09 11:11 - 2016-01-05 13:45 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2019-01-09 11:11 - 2016-01-05 13:45 - 000000000 ____D C:\Windows\system32\Macromed 2019-01-09 10:28 - 2017-04-10 08:11 - 000000171 _____ C:\Users\BP7CC5J\Desktop\WYPŁATY LIBUSZA 10-01-2019.txt 2019-01-09 09:51 - 2009-07-14 06:32 - 000000000 ____D C:\Windows\system32\FxsTmp 2019-01-09 09:38 - 2015-12-05 23:31 - 000000000 ____D C:\Users\BP7CC5J 2019-01-09 09:38 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2019-01-09 08:46 - 2018-08-27 13:54 - 000000000 ____D C:\Program Files (x86)\Datalogic 2019-01-09 07:33 - 2015-12-18 09:36 - 005542488 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2019-01-09 07:30 - 2016-01-04 10:29 - 000000000 ____D C:\Windows\system32\MRT 2019-01-09 07:28 - 2016-01-04 10:29 - 132790320 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2019-01-09 07:12 - 2016-01-04 17:24 - 532521622 _____ C:\Windows\MEMORY.DMP 2019-01-09 07:12 - 2016-01-04 17:24 - 000000000 ____D C:\Windows\Minidump 2019-01-04 14:39 - 2016-11-21 08:50 - 000000000 ____D C:\Users\BP7CC5J\Documents\Moje skany 2019-01-04 05:26 - 2016-01-28 18:35 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-01-03 16:48 - 2016-01-04 17:31 - 000000000 ____D C:\KCEksport3 2019-01-03 16:47 - 2016-01-04 19:17 - 000000000 ____D C:\ksiegowosc 2019-01-03 09:06 - 2016-01-08 05:04 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2018-12-27 07:54 - 2016-01-05 12:45 - 000000000 ____D C:\Users\BP7CC5J\AppData\LocalLow\Adobe 2018-12-27 07:54 - 2016-01-05 12:45 - 000000000 ____D C:\Users\BP7CC5J\AppData\Local\Adobe 2018-12-27 07:54 - 2015-12-18 09:25 - 000000000 ____D C:\Users\BP7CC5J\AppData\Roaming\Adobe 2018-12-20 02:54 - 2017-07-25 10:17 - 000003482 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2018-12-20 02:54 - 2017-07-25 10:17 - 000003354 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2018-12-15 19:27 - 2018-11-08 13:21 - 000000978 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk 2018-12-15 19:27 - 2018-11-08 13:21 - 000000966 _____ C:\Users\Public\Desktop\TeamViewer 14.lnk 2018-12-15 04:46 - 2017-07-16 14:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-12-15 04:46 - 2017-07-16 14:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-12-12 21:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache 2018-12-12 05:21 - 2009-07-14 05:57 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2018-12-12 05:20 - 2009-07-14 05:45 - 000417704 _____ C:\Windows\system32\FNTCACHE.DAT 2018-12-11 13:19 - 2016-01-04 17:31 - 000000000 ____D C:\KCAnalizy3 2018-12-10 23:04 - 2010-11-21 04:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-10-11 09:02 - 2017-10-11 09:02 - 000000052 _____ () C:\Users\BP7CC5J\dysk.bat 2018-08-21 19:04 - 2018-08-21 19:04 - 000000020 ___SH () C:\Users\BP7CC5J\AppData\Roaming\Sys11965 DataCollection.dat 2018-08-21 19:04 - 2018-08-21 19:04 - 000000020 ___SH () C:\Users\BP7CC5J\AppData\Roaming\System413_DataDB.ind ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== BCD ================================ Mened�er rozruchu systemu Windows --------------------------------- Identyfikator {bootmgr} device partition=\Device\HarddiskVolume1 description Windows Boot Manager locale pl-PL inherit {globalsettings} resumeobject {6edb5144-9be5-11e5-9895-001e4f934a5d} displayorder {current} {6edb5146-9be5-11e5-9895-001e4f934a5d} toolsdisplayorder {memdiag} timeout 3 Modu� �aduj�cy rozruchu systemu Windows --------------------------------------- Identyfikator {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale pl-PL loadoptions DDISABLE_INTEGRITY_CHECKS inherit {bootloadersettings} recoverysequence {6edb5147-9be5-11e5-9895-001e4f934a5d} recoveryenabled Yes nointegritychecks Yes osdevice partition=C: systemroot \Windows resumeobject {6edb5144-9be5-11e5-9895-001e4f934a5d} nx OptIn Modu� �aduj�cy rozruchu systemu Windows --------------------------------------- Identyfikator {6edb5146-9be5-11e5-9895-001e4f934a5d} device ramdisk=[\Device\HarddiskVolume1]\boot\boot.wim,{ramdiskoptions} path \windows\system32\boot\winload.exe description System Restore osdevice ramdisk=[\Device\HarddiskVolume1]\boot\boot.wim,{ramdiskoptions} systemroot \windows detecthal Yes winpe Yes Modu� �aduj�cy rozruchu systemu Windows --------------------------------------- Identyfikator {6edb5147-9be5-11e5-9895-001e4f934a5d} device ramdisk=[C:]\Recovery\6edb5147-9be5-11e5-9895-001e4f934a5d\Winre.wim,{6edb5148-9be5-11e5-9895-001e4f934a5d} path \windows\system32\winload.exe description Windows Recovery Environment inherit {bootloadersettings} osdevice ramdisk=[C:]\Recovery\6edb5147-9be5-11e5-9895-001e4f934a5d\Winre.wim,{6edb5148-9be5-11e5-9895-001e4f934a5d} systemroot \windows nx OptIn winpe Yes Wznawianie ze stanu hibernacji ------------------------------ Identyfikator {6edb5144-9be5-11e5-9895-001e4f934a5d} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale pl-PL inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys debugoptionenabled No Modu� testuj�cy pami�� systemu Windows -------------------------------------- Identyfikator {memdiag} device partition=\Device\HarddiskVolume1 path \boot\memtest.exe description Windows Memory Diagnostic locale pl-PL inherit {globalsettings} badmemoryaccess Yes Ustawienia us�ug EMS -------------------- Identyfikator {emssettings} bootems Yes Ustawienia debugera ------------------- Identyfikator {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Uszkodzenia pami�ci RAM ----------------------- Identyfikator {badmemory} Ustawienia globalne ------------------- Identyfikator {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Ustawienia modu�u �aduj�cego rozruchu ------------------------------------- Identyfikator {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Ustawienia funkcji hypervisor ----------------------------- Identyfikator {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Ustawienia modu�u �aduj�cego wznawiania --------------------------------------- Identyfikator {resumeloadersettings} inherit {globalsettings} Opcje urz�dzenia ---------------- Identyfikator {6edb5148-9be5-11e5-9895-001e4f934a5d} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \Recovery\6edb5147-9be5-11e5-9895-001e4f934a5d\boot.sdi Opcje instalacji urz�dzenia Ramdisk ----------------------------------- Identyfikator {ramdiskoptions} description System Restore ramdisksdidevice partition=\Device\HarddiskVolume1 ramdisksdipath \boot\boot.sdi LastRegBack: 2019-01-03 00:24 ==================== Koniec FRST.txt ============================