Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-12-2015 Uruchomiony przez Natalia (administrator) NATALKA (07-12-2015 20:30:24) Uruchomiony z C:\Users\Natalia\Desktop Załadowane profile: Natalia (Dostępne profile: Natalia) Platform: Windows 8.1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PSIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-05] (AVAST Software) HKU\S-1-5-21-1440869918-637336674-2589777491-1001\...\Policies\Explorer: [] ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-05] (AVAST Software) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 62.179.1.61 62.179.1.63 Tcpip\..\Interfaces\{66B9B5B4-D935-4F2D-9154-5F1276B4B8AC}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{A0F6D180-9C3C-47B7-9C14-BD73A96BE1F0}: [DhcpNameServer] 62.179.1.61 62.179.1.63 Tcpip\..\Interfaces\{A679E162-6E88-456B-8FF5-68F9BFCC3BDE}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{F61FAF85-3C5F-4242-9100-51C64E499394}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-05] (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-05] (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Brak pliku Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF Plugin-x32: @java.com/DTPlugin -> C:\Program Files (x86)\Java\jre6\bin\dtplugin\npDeployJava1.dll [Brak pliku] Chrome: ======= CHR StartupUrls: Profile 1 -> "hxxps://www.google.pl/" CHR NewTab: Profile 1 -> "chrome-extension://boeojddkbfhdgnnicgkgogjnbkdljibb/blank.html" CHR Session Restore: Profile 1 -> [funkcja włączona] CHR Profile: C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Prezentacje Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-05] CHR Extension: (Dokumenty Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-05] CHR Extension: (Dysk Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-05] CHR Extension: (Glow) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bekmjjakgojplnhahcilegeiklenjbgb [2015-12-06] CHR Extension: (YouTube) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-05] CHR Extension: (Obudź ukrytą Moc) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boeojddkbfhdgnnicgkgogjnbkdljibb [2015-12-06] CHR Extension: (Adblock Plus) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-06] CHR Extension: (uBlock Origin) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-12-07] CHR Extension: (Google Search) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-05] CHR Extension: (Arkusze Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-05] CHR Extension: (Dokumenty Google offline) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-05] CHR Extension: (AdBlock) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-06] CHR Extension: (Avast Online Security) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-12-05] CHR Extension: (Autodesk Homestyler) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2015-12-06] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-05] CHR Extension: (Picasa) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2015-12-06] CHR Extension: (Gmail) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-05] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-05] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1139744 2015-11-17] (Autodesk Inc.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-05] (AVAST Software) S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1277680 2015-03-31] (Disc Soft Ltd) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation) R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-05] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-05] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-05] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-05] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-05] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-05] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-05] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-05] (AVAST Software) R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-05-17] (Disc Soft Ltd) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2015-12-05] (REALiX(tm)) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-05-28] (NVIDIA Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-07 20:30 - 2015-12-07 20:30 - 00012761 _____ C:\Users\Natalia\Desktop\FRST.txt 2015-12-07 19:40 - 2015-12-05 12:03 - 02369024 _____ (Farbar) C:\Users\Natalia\Desktop\FRST64.exe 2015-12-07 19:36 - 2015-12-07 19:36 - 00472808 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll 2015-12-07 19:36 - 2015-12-07 19:36 - 00000000 ____D C:\ProgramData\Sun 2015-12-07 17:56 - 2015-12-07 18:07 - 00000000 ____D C:\Users\Natalia\Desktop\! 2015-12-07 17:55 - 2015-12-07 17:55 - 00000000 ____D C:\Users\Natalia\AppData\Local\Eraser 6 2015-12-07 17:43 - 2015-12-07 17:43 - 00001731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eraser.lnk 2015-12-07 17:43 - 2015-12-07 17:43 - 00000000 ____D C:\Program Files\Eraser 2015-12-07 17:42 - 2015-12-07 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axantum AxCrypt 2015-12-07 17:42 - 2015-12-07 17:42 - 00000000 ____D C:\Program Files\Axantum 2015-12-07 17:28 - 2015-12-07 17:28 - 00000659 _____ C:\Users\Natalia\Desktop\mapy cad.lnk 2015-12-07 17:27 - 2015-12-07 17:27 - 00000659 _____ C:\Users\Natalia\Desktop\programy.lnk 2015-12-07 02:01 - 2015-12-07 02:01 - 04621103 _____ C:\Users\Natalia\Downloads\rys 666 (1).dwg 2015-12-07 02:01 - 2015-12-07 02:01 - 00996872 _____ C:\Users\Natalia\Downloads\opis bipoak 1 Nat.pdf 2015-12-07 01:06 - 2015-12-07 01:06 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\Gadwin 2015-12-07 01:06 - 2015-12-07 01:06 - 00000000 ____D C:\Users\Natalia\AppData\Local\Gadwin 2015-12-07 01:05 - 2015-12-07 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadwin 2015-12-07 01:05 - 2015-12-07 01:05 - 00000000 ____D C:\Program Files\Gadwin 2015-12-07 00:56 - 2015-12-07 00:56 - 03363990 _____ C:\Users\Natalia\Desktop\Bez nazwy-1.psd 2015-12-07 00:45 - 2015-12-07 00:45 - 04621103 _____ C:\Users\Natalia\Downloads\rys 666.dwg 2015-12-07 00:16 - 2015-12-07 17:33 - 00003506 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Natalka-Natalia 2015-12-06 23:41 - 2015-12-06 23:41 - 09662400 _____ (TeamViewer GmbH) C:\Users\Natalia\Downloads\TeamViewer_Setup_pl.exe 2015-12-06 23:38 - 2015-12-06 23:38 - 00078279 _____ C:\Users\Natalia\Downloads\bipoak666.dwg 2015-12-06 19:53 - 2015-12-06 19:53 - 00000661 _____ C:\Users\Natalia\Desktop\muzyka.lnk 2015-12-06 19:52 - 2015-12-06 19:52 - 00000784 _____ C:\Users\Natalia\Desktop\studia.lnk 2015-12-06 19:52 - 2015-12-06 19:52 - 00000690 _____ C:\Users\Natalia\Desktop\dokumenty.lnk 2015-12-06 19:52 - 2015-12-06 19:52 - 00000670 _____ C:\Users\Natalia\Desktop\zdjecia.lnk 2015-12-06 18:18 - 2015-12-06 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2015-12-06 18:18 - 2015-12-06 18:18 - 00000000 ____D C:\Program Files (x86)\FreeCommander XE 2015-12-06 18:17 - 2015-12-06 18:17 - 06389892 _____ C:\Users\Natalia\Downloads\FreeCommanderXE-32-public_beta_setup700.zip 2015-12-06 15:52 - 2015-12-06 15:52 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-12-06 15:51 - 2015-12-06 15:51 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2015-12-06 15:39 - 2015-12-06 15:39 - 17198192 _____ C:\Users\Natalia\Downloads\AutoCAD_2016_Polish_Win_32_64bit_wi_pl-PL_Setup.exe 2015-12-06 15:39 - 2015-12-06 15:39 - 00338296 _____ (Autodesk Inc.) C:\Users\Natalia\Downloads\AutoCAD_2016_Polish_Win_32_64bit_wi_pl-PL_Setup_webinstall.exe 2015-12-06 15:24 - 2015-12-06 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-12-06 15:21 - 2015-12-06 15:21 - 00000000 ____D C:\ProgramData\Applications 2015-12-05 16:47 - 2015-12-05 16:49 - 00000000 ____D C:\MATS 2015-12-05 14:39 - 2015-12-05 14:39 - 00000000 ____D C:\AdwCleaner 2015-12-05 13:09 - 2015-12-07 20:06 - 00212856 _____ C:\Windows\ntbtlog.txt 2015-12-05 13:05 - 2015-12-05 13:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-12-05 13:05 - 2015-12-05 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-12-05 13:05 - 2015-12-05 13:05 - 00000000 ____D C:\Program Files\CCleaner 2015-12-05 12:46 - 2015-12-07 20:30 - 00000000 ____D C:\FRST 2015-12-05 12:43 - 2015-12-05 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo 2015-12-05 12:43 - 2015-12-05 12:43 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo 2015-12-05 12:42 - 2015-12-05 12:42 - 00031136 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS 2015-12-05 12:42 - 2015-12-05 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune 2015-12-05 12:42 - 2015-12-05 12:42 - 00000000 ____D C:\Program Files (x86)\HD Tune 2015-12-05 12:41 - 2015-12-05 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 2015-12-05 12:41 - 2015-12-05 12:41 - 00000000 ____D C:\Program Files\HWiNFO64 2015-12-05 12:38 - 2015-12-05 12:38 - 00000000 ____D C:\Windows\pss 2015-12-05 12:27 - 2015-12-05 12:27 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2015-12-05 12:27 - 2015-12-05 12:27 - 00000000 ____D C:\Program Files\Common Files\AV 2015-12-05 12:26 - 2015-12-05 12:26 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-12-05 12:26 - 2015-12-05 12:26 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-12-05 12:25 - 2015-12-05 12:25 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\Sun 2015-12-05 12:25 - 2015-12-05 12:25 - 00000000 ____D C:\Users\Natalia\.oracle_jre_usage 2015-12-05 12:19 - 2015-12-05 16:52 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2015-11-26 10:16 - 2015-11-26 10:16 - 00501450 _____ C:\Users\Natalia\Downloads\Kamila-opis.odt 2015-11-26 10:16 - 2015-11-26 10:16 - 00025942 _____ C:\Users\Natalia\Downloads\Tabela-inwentaryzacyjna-WZÓR.odt 2015-11-22 13:57 - 2015-11-22 13:57 - 00012099 _____ C:\Users\Natalia\Downloads\VEGE_tree_plan_147.dwg 2015-11-18 18:05 - 2015-11-18 18:05 - 00052040 _____ C:\Users\Natalia\Downloads\lista nagozalązkowych.pdf 2015-11-18 17:56 - 2015-11-18 17:56 - 00614308 _____ C:\Users\Natalia\Downloads\ochrona_przyrody USTAWA nowa 08.2015.pdf 2015-11-18 17:56 - 2015-11-18 17:56 - 00279541 _____ C:\Users\Natalia\Downloads\Rozporządzenie w sprawie zakresu.pdf 2015-11-18 17:47 - 2015-11-18 17:47 - 12352293 _____ C:\Users\Natalia\Downloads\Katalogi_przekrojow_ulic_z_elementami_zieleni[1].pdf 2015-11-18 12:14 - 2015-11-18 12:15 - 00000000 ____D C:\ProgramData\Protexis64 2015-11-18 12:11 - 2015-11-18 12:11 - 00000000 ____D C:\Program Files\Common Files\Protexis 2015-11-16 18:41 - 2015-12-05 11:36 - 00000000 ____D C:\Users\Natalia\Documents\My PSP Files 2015-11-16 18:40 - 2015-11-16 18:40 - 00000000 ____D C:\Windows\SysWOW64\Spool 2015-11-15 22:57 - 2015-11-15 22:57 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008 2015-11-15 22:57 - 2015-11-15 22:57 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008 2015-11-15 21:43 - 2015-11-15 21:44 - 62302337 _____ C:\Users\Natalia\Downloads\inwentaryzacja.psd 2015-11-15 20:48 - 2015-11-15 20:49 - 00000000 ____D C:\ProgramData\Protexis 2015-11-13 14:24 - 2015-11-13 14:24 - 00000000 ____D C:\Users\Natalia\Documents\Visual Studio 2008 2015-11-13 14:23 - 2015-11-13 14:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0 2015-11-13 14:23 - 2015-11-13 14:23 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2015-11-13 14:11 - 2015-12-05 11:35 - 00000000 ____D C:\Program Files\Corel 2015-11-11 14:46 - 2015-11-03 01:23 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-11 12:31 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-11-11 12:31 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2015-11-11 12:31 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-11-11 12:31 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-11-11 12:31 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2015-11-11 12:31 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2015-11-11 12:31 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-11-11 12:31 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-11-11 12:31 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-11-11 12:31 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-11-11 12:31 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-11-11 12:31 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-11-11 12:31 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-11-11 12:31 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-11-11 12:31 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-11-11 12:31 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys 2015-11-11 12:30 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-11-11 12:30 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-11-11 12:30 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-11-11 12:30 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-11-11 12:30 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-11-11 12:30 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-11-11 12:30 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-11-11 12:30 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-11-11 12:30 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-11-11 12:30 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-11-11 12:30 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-11-11 12:30 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-11-11 12:30 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-11-11 12:30 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-11-11 12:30 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-11-11 12:30 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-11-11 12:30 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-11-11 12:30 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-11-11 12:30 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-11-11 12:30 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-11-11 12:30 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-11-11 12:30 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-11-11 12:30 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-11-11 12:30 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-11-11 12:30 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-11-11 12:30 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-11-11 12:30 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-11-11 12:30 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-11-11 12:30 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-11-11 12:30 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-11-11 12:30 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-11-11 12:30 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-11-11 12:30 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-11-11 12:30 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-11-11 12:30 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-11-11 12:30 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-11-11 12:30 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-11-11 12:30 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-11-11 12:30 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-11-11 12:30 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-11-11 12:30 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-11-11 12:30 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-11-11 12:30 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-11-11 12:30 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-11-11 12:30 - 2015-09-12 14:47 - 00414559 _____ C:\Windows\system32\ApnDatabase.xml 2015-11-11 12:30 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-11-11 12:30 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2015-11-11 12:30 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-11-11 12:30 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2015-11-11 12:30 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe 2015-11-11 12:30 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-11-11 12:30 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-11-11 12:27 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-11-11 12:27 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2015-11-11 12:27 - 2015-08-10 19:15 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2015-11-11 12:27 - 2015-08-10 19:06 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2015-11-11 12:27 - 2015-08-10 18:49 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2015-11-11 12:27 - 2015-08-10 17:56 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2015-11-11 12:27 - 2015-08-10 17:46 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2015-11-08 18:44 - 2015-11-20 00:00 - 00000194 ____H C:\Users\Natalia\Documents\Rysunek2.dwl2 2015-11-08 18:44 - 2015-11-20 00:00 - 00000044 ____H C:\Users\Natalia\Documents\Rysunek2.dwl 2015-11-08 18:18 - 2015-11-08 18:18 - 00000000 ____D C:\Users\Natalia\Documents\Autodesk Application Manager 2015-11-08 18:06 - 2015-11-08 18:06 - 00000133 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2015-11-08 15:30 - 2015-11-08 15:30 - 00000404 _____ C:\Windows\BRWMARK.INI ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-07 20:26 - 2014-03-21 19:40 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1440869918-637336674-2589777491-1001 2015-12-07 20:17 - 2015-04-17 20:07 - 00004046 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-07 20:17 - 2015-04-17 20:07 - 00003810 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-07 20:17 - 2015-04-17 20:07 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-07 20:17 - 2015-04-17 20:07 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-07 20:05 - 2014-03-21 19:58 - 00000000 ____D C:\ProgramData\NVIDIA 2015-12-07 20:05 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-07 20:03 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp 2015-12-07 19:43 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf 2015-12-07 19:38 - 2015-07-26 11:39 - 00000000 _____ C:\Windows\vpd.properties 2015-12-07 19:38 - 2013-08-22 14:36 - 00000000 ____D C:\Windows 2015-12-07 19:37 - 2015-07-26 11:37 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\Install.GS 2015-12-07 19:33 - 2015-07-26 11:37 - 00000000 ____D C:\Program Files (x86)\Java 2015-12-07 02:16 - 2013-08-22 09:16 - 00000000 ____D C:\Users\Natalia 2015-12-07 02:00 - 2014-11-24 23:43 - 00000000 ____D C:\Users\Natalia\AppData\Local\Adobe 2015-12-06 23:42 - 2015-08-22 20:20 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\TeamViewer 2015-12-06 20:03 - 2015-06-03 19:19 - 00000000 ____D C:\Users\Natalia\Documents\The Witcher 3 2015-12-06 19:14 - 2015-10-09 19:49 - 00000000 ____D C:\Users\Natalia\My Documents 2015-12-06 18:14 - 2015-01-03 19:41 - 00000000 ____D C:\Users\Natalia\AppData\LocalLow\Temp 2015-12-06 17:31 - 2014-03-21 19:39 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-06 17:31 - 2013-08-23 00:12 - 00805918 _____ C:\Windows\system32\perfh015.dat 2015-12-06 17:31 - 2013-08-23 00:12 - 00163272 _____ C:\Windows\system32\perfc015.dat 2015-12-06 16:12 - 2014-06-25 21:33 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\Autodesk 2015-12-06 16:05 - 2013-08-22 15:44 - 05314216 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-06 15:52 - 2014-03-21 20:32 - 00000000 ____D C:\ProgramData\Autodesk 2015-12-06 15:50 - 2014-04-02 18:46 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2015-12-06 15:47 - 2013-08-22 16:36 - 00000000 ___SD C:\Windows\Downloaded Program Files 2015-12-06 15:46 - 2014-03-21 21:13 - 00000000 ____D C:\Program Files\Autodesk 2015-12-06 15:24 - 2014-03-21 21:14 - 00000000 ____D C:\Users\Natalia\AppData\Local\Autodesk 2015-12-06 12:52 - 2014-06-22 16:19 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-12-05 16:55 - 2014-03-26 09:10 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-12-05 16:52 - 2015-04-17 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-12-05 16:52 - 2014-10-28 00:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZUZIA11 wersja demo 2015-12-05 16:52 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-12-05 16:52 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-12-05 16:47 - 2014-04-15 22:08 - 00000000 ____D C:\Users\Natalia\AppData\Local\ElevatedDiagnostics 2015-12-05 16:47 - 2014-04-02 18:45 - 00000000 ____D C:\Program Files (x86)\Autodesk 2015-12-05 13:08 - 2015-06-04 22:53 - 00000000 ____D C:\Windows\Minidump 2015-12-05 13:08 - 2014-11-11 23:10 - 00000000 ____D C:\Users\Natalia\AppData\Roaming\DAEMON Tools Lite 2015-12-05 13:08 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\ModemLogs 2015-12-05 13:08 - 2013-08-22 10:10 - 00000000 ____D C:\Windows\Panther 2015-12-05 12:57 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2015-12-05 12:27 - 2014-04-13 17:10 - 00000000 ____D C:\ProgramData\Oracle 2015-12-05 12:26 - 2014-06-22 16:19 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00450504 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-12-05 12:26 - 2014-06-22 16:19 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-12-05 12:18 - 2015-10-09 19:28 - 00000000 ____D C:\Program Files (x86)\Shure 2015-12-05 11:58 - 2014-03-21 23:32 - 00000000 ____D C:\Users\Natalia\Documents\3dsMax 2015-12-05 11:35 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-12-05 11:29 - 2015-11-05 10:15 - 00000000 ____D C:\ProgramData\Battle.net 2015-11-25 19:23 - 2015-11-05 10:16 - 00000000 ____D C:\Users\Natalia\AppData\Local\Battle.net 2015-11-18 18:00 - 2014-07-02 15:22 - 00000479 _____ C:\Users\Natalia\AppData\Roaming\burnaware.ini 2015-11-18 12:12 - 2014-11-26 17:39 - 00000000 ____D C:\ProgramData\Package Cache 2015-11-15 22:57 - 2014-04-07 05:39 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-11-12 11:54 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache 2015-11-11 14:30 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData 2015-11-11 12:42 - 2014-03-21 21:35 - 00000000 ____D C:\Windows\system32\MRT 2015-11-11 12:36 - 2014-03-21 21:35 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-11-11 12:34 - 2015-11-05 10:18 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-11-08 17:26 - 2014-03-21 20:27 - 00000000 ____D C:\Autodesk ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-07-02 15:22 - 2015-11-18 18:00 - 0000479 _____ () C:\Users\Natalia\AppData\Roaming\burnaware.ini 2015-05-26 16:20 - 2015-05-26 16:20 - 0001496 _____ () C:\Users\Natalia\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs 2014-12-30 13:43 - 2014-12-30 13:46 - 0000336 _____ () C:\ProgramData\hpzinstall.log 2014-03-21 21:15 - 2014-03-21 21:15 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2015-11-08 18:06 - 2015-11-08 18:06 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc Niektóre pliki w TEMP: ==================== C:\Users\Natalia\AppData\Local\Temp\AcDeltree.exe C:\Users\Natalia\AppData\Local\Temp\DLMGuardian.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-06 13:12 ==================== Koniec FRST.txt ============================