Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01 Uruchomiony przez Janusz (administrator) JANUSZ-PC (08-04-2016 13:27:43) Uruchomiony z J:\download J Załadowane profile: Janusz (Dostępne profile: Janusz) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe () C:\Program Files\MySQL\MySQL Server 5.7\bin\mysqld.exe (NVIDIA) G:\Programy\ntune\nTuneService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA) G:\Programy\ntune\nTuneCmd.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe () C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe (Flux Software LLC) C:\Users\Janusz\AppData\Local\FluxSoftware\Flux\flux.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Advanced Micro Devices Inc.) J:\programy J\ati_13_12\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) J:\programy J\ati_13_12\ATI.ACE\Core-Static\CCC.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [StartCCC] => J:\programy J\ati_13_12\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [QuickTime Task] => G:\Programy\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKU\S-1-5-21-1901158508-4074526197-3263088995-1001\...\Run: [OscarEditor] => C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] () HKU\S-1-5-21-1901158508-4074526197-3263088995-1001\...\Run: [f.lux] => C:\Users\Janusz\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC) HKU\S-1-5-21-1901158508-4074526197-3263088995-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50676864 2016-03-01] (Skype Technologies S.A.) HKU\S-1-5-21-1901158508-4074526197-3263088995-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-09] (Autodesk, Inc.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1 Tcpip\..\Interfaces\{2F79D901-B15D-4063-9639-9C434FFCE626}: [DhcpNameServer] 194.204.152.34 194.204.159.1 Tcpip\..\Interfaces\{A940A8BD-C4A2-4487-80D5-76EFD0C9BE23}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{BEC7A397-DB01-4DFA-B610-5BB41868B542}: [DhcpNameServer] 192.168.42.129 Internet Explorer: ================== FireFox: ======== FF ProfilePath: C:\Users\Janusz\AppData\Roaming\Mozilla\Firefox\Profiles\ljcw3rwa.default FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems) FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Janusz\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> J:\programy J\VLC\npvlc.dll [2016-01-21] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems) FF Extension: Microsoft .NET Framework Assistant - C:\Users\Janusz\AppData\Roaming\Mozilla\Firefox\Profiles\ljcw3rwa.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2015-08-31] FF Extension: Adblock Plus - C:\Users\Janusz\AppData\Roaming\Mozilla\Firefox\Profiles\ljcw3rwa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-23] StartMenuInternet: FIREFOX.EXE - C:\Programy\firefox\firefox.exe Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://search.babylon.com/?affID=113480&tt=2912_2&babsrc=HP_ss&mntrId=9c3a50d8000000000000001a4d0f94dd","hxxp://istart.webssearches.com/?type=hp&ts=1420656507&from=kmp&uid=WDCXWD800JB-00JJA0_WD-WCAM91714338","hxxp://www.oursurfing.com/?type=hp&ts=1442263354&z=28be9d751cf9fb79f3937acg8zezaoeobq1c4c9o8z&from=amt&uid=WDCXWD800JB-00JJA0_WD-WCAM91714338" CHR DefaultSearchURL: Default -> hxxp://www.smarter.yt CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (From Dust) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2016-04-08] CHR Extension: (Dysk Google) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-08] CHR Extension: (Turn Off the Lights) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2016-04-08] CHR Extension: (X New Tab Page) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbmbfafhdccfgdgnbkgogehiklmemkoh [2016-04-08] CHR Extension: (Adblock Plus) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-04-08] CHR Extension: (JSONView) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\chklaanhfefbnpoihckbnefhakgolnmc [2016-04-08] CHR Extension: (OneTab) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2016-04-08] CHR Extension: (REST Console) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokgbflfommojglbmbpenpphppikmonn [2016-04-08] CHR Extension: (Realm of the Mad God) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp [2016-04-08] CHR Extension: (Foxtab Speed Dial) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcoecifcadmambfikillppkoafmgachp [2016-04-08] CHR Extension: (Stylish) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-04-08] CHR Extension: (Pulpit zdalny Chrome) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-04-08] CHR Extension: (Powiadamiacz EmSc2.Tv) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggpidhpbjcabcpojeiodpnllidlgfmie [2016-04-08] CHR Extension: (AdBlock) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-04-08] CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2016-04-08] CHR Extension: (Enable right click) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhojmcideegachlhfgfdhailpfhgknjm [2016-04-08] CHR Extension: (Arcane Legends) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmlkgieigeddcedpbijnpojheoddido [2016-04-08] CHR Extension: (Wolfram Alpha (Official)) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\icncamkooinmbehmkeilcccmoljfkdhp [2016-04-08] CHR Extension: (New Tab Page by Speed Dial Team) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\idgeoanibcknhniccgaoaiolihidecjn [2016-04-08] CHR Extension: (Ashish Mishra) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnkdbjbjpnpjeciipoaflmpcddinpjjp [2016-04-08] CHR Extension: (Sprawdzanie poczty Google) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2016-04-08] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-08] CHR Extension: (Oddshot) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnoeeagkgpkplnhmnnlgodjnjgckhja [2016-04-08] CHR Extension: (new metroTab) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\oogmkbpkoblajkomflhkkdmbfggdmefd [2016-04-08] CHR Extension: (Gmail) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-08] CHR Extension: (Canvas Rider) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2016-04-08] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ACTION_SVC; G:\Programy\Action!\action_svc.exe [16064 2014-10-25] () S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [775040 2015-01-08] () R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe [69016 2016-03-08] (Google Inc.) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 MySQL5; C:\Program Files\MySQL\MySQL Server 5.7\bin\mysqld.exe [39209984 2015-11-30] () [Brak podpisu cyfrowego] R2 nTuneService; G:\Programy\ntune\nTuneService.exe [278336 2011-09-19] (NVIDIA) S3 Origin Client Service; J:\Origin\OriginClientService.exe [2104840 2016-02-03] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-11-26] () S2 postgresql-x64-9.4; J:\programy J\postgresql\bin\pg_ctl.exe [92160 2015-06-02] (PostgreSQL Global Development Group) [Brak podpisu cyfrowego] S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 Kinonih; C:\Windows\System32\DRIVERS\kinonih.sys [32256 2016-03-11] (Kinoni) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2011-09-03] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2011-09-03] () R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation ) S3 StkTMini; C:\Windows\System32\Drivers\StkTMini.sys [528256 2007-11-15] (Syntek) R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254464 2009-09-02] (Jungo) R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-26] (SplitmediaLabs Limited) S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-04-08 11:19 - 2016-04-08 11:19 - 01386413 _____ C:\Users\Janusz\Desktop\TeslaDecoder.zip 2016-04-06 19:06 - 2016-04-06 19:06 - 01359360 _____ () C:\Users\Janusz\Desktop\HOTS Logs Uploader.exe 2016-04-04 21:52 - 2016-04-04 21:52 - 00000778 _____ C:\Users\Public\Desktop\Battle.net.lnk 2016-04-04 21:52 - 2016-04-04 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2016-04-04 21:45 - 2016-04-05 23:38 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Battle.net 2016-04-04 14:59 - 2016-04-08 13:27 - 00000000 ____D C:\FRST 2016-04-04 01:24 - 2016-04-04 01:24 - 00007405 _____ C:\Users\Janusz\Desktop\dupa.odt 2016-04-03 13:31 - 2016-04-03 13:31 - 00015006 _____ C:\ComboFix.txt 2016-04-02 23:41 - 2016-04-02 23:41 - 00000856 _____ C:\Users\Janusz\Documents\cc_20160402_234042.reg 2016-04-02 23:33 - 2016-04-02 23:35 - 00052042 _____ C:\Users\Janusz\Documents\cc_20160402_233245.reg 2016-04-02 22:38 - 2016-04-08 11:29 - 00000000 ____D C:\Program Files\Common Files\AV 2016-04-02 22:34 - 2016-04-03 12:26 - 00000000 ____D C:\Windows\pss 2016-04-02 20:41 - 2016-04-02 20:41 - 01030960 _____ C:\Users\Janusz\Documents\cc_20160402_204101.reg 2016-04-02 19:58 - 2016-04-02 19:58 - 00000264 _____ C:\Users\Janusz\Documents\storage_data 2016-04-01 13:19 - 2016-04-02 20:25 - 00131680 _____ C:\Users\Janusz\Desktop\sygnalizacja_cad_7.pdf 2016-03-31 15:28 - 2016-04-02 20:25 - 00132704 _____ C:\Users\Janusz\Desktop\sygnalizacja_cad_3.pdf 2016-03-30 20:58 - 2016-04-02 20:25 - 00058720 _____ C:\Users\Janusz\Desktop\sygnalizacja_cad_6.pdf 2016-03-30 19:28 - 2016-04-02 20:25 - 00010016 _____ C:\Users\Janusz\Desktop\sygnalizacja_cad_4.pdf 2016-03-30 19:25 - 2016-04-02 20:27 - 00009440 _____ C:\Users\Janusz\Documents\sygnalizacja_cad_5.pdf 2016-03-30 19:25 - 2016-04-02 20:27 - 00008512 _____ C:\Users\Janusz\Documents\sygnalizacja_cad_6.pdf 2016-03-30 19:24 - 2016-04-02 20:27 - 00010016 _____ C:\Users\Janusz\Documents\sygnalizacja_cad_4.pdf 2016-03-30 19:24 - 2016-04-02 20:27 - 00009264 _____ C:\Users\Janusz\Documents\sygnalizacja_cad_3.pdf 2016-03-30 19:23 - 2016-04-02 20:27 - 00007632 _____ C:\Users\Janusz\Documents\sygnalizacja_cad_2.pdf 2016-03-30 14:08 - 2016-03-30 14:08 - 00000000 ____D C:\ProgramData\FLEXnet 2016-03-30 13:56 - 2016-03-30 13:56 - 00001648 _____ C:\Users\Public\Desktop\AutoCAD 2011 - English.lnk 2016-03-30 13:56 - 2016-03-30 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-03-30 13:55 - 2016-03-30 14:04 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2016-03-30 13:27 - 2016-03-30 13:27 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2016-03-30 13:20 - 2016-04-08 11:42 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Autodesk 2016-03-30 13:20 - 2016-04-08 11:42 - 00000000 ____D C:\ProgramData\Autodesk 2016-03-29 13:19 - 2016-03-29 13:19 - 00000000 ____D C:\ProgramData\TriDef 3D 2016-03-25 18:17 - 2016-03-25 18:17 - 00000000 ____D C:\ProgramData\Kinoni 2016-03-25 18:08 - 2016-03-25 18:08 - 00000000 ____D C:\Program Files (x86)\Kinoni 2016-03-23 18:36 - 2016-03-23 18:36 - 00000998 _____ C:\Users\Janusz\Desktop\Call of Duty 2.lnk 2016-03-23 14:57 - 2016-03-23 14:57 - 00000667 _____ C:\Users\Public\Desktop\TrinusVR.lnk 2016-03-23 14:57 - 2016-03-23 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrinusVR 2016-03-22 18:47 - 2016-04-08 11:42 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Poedit 2016-03-22 18:46 - 2016-03-22 18:46 - 00000689 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poedit.lnk 2016-03-22 14:01 - 2016-03-22 14:01 - 06516656 _____ (Tim Kosse) C:\Users\Janusz\Downloads\FileZilla_3.16.1_win64-setup.exe 2016-03-22 13:18 - 2016-03-22 13:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm Public Test 2016-03-16 23:55 - 2016-03-16 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit 2016-03-16 00:02 - 2016-04-08 11:42 - 00000000 ____D C:\Users\Janusz\Documents\Diablo II 2016-03-15 14:53 - 2016-04-08 11:42 - 00000000 ____D C:\Users\Public\Documents\sun 2016-03-15 14:51 - 2016-03-15 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.1 2016-03-11 19:25 - 2016-03-11 19:25 - 00032256 _____ (Kinoni) C:\Windows\system32\Drivers\kinonih.sys 2016-03-10 21:07 - 2016-03-10 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diagram Designer 2016-03-09 18:44 - 2016-03-09 18:44 - 06568344 _____ (Tim Kosse) C:\Users\Janusz\Downloads\FileZilla_3.16.0_win64-setup.exe 2016-03-09 03:42 - 2016-04-08 11:42 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOTSLogsUploader ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-04-08 13:19 - 2015-01-02 23:28 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Skype 2016-04-08 13:16 - 2015-01-06 00:49 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-04-08 13:03 - 2015-01-06 00:49 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-04-08 11:55 - 2009-07-14 06:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-04-08 11:55 - 2009-07-14 06:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-04-08 11:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-04-08 11:42 - 2016-03-08 19:06 - 00000000 ____D C:\Users\Janusz\Documents\eagle 2016-04-08 11:42 - 2016-03-08 19:04 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\CadSoft 2016-04-08 11:42 - 2016-03-08 00:01 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2016-04-08 11:42 - 2016-03-08 00:01 - 00000000 ____D C:\ProgramData\ATI 2016-04-08 11:42 - 2016-03-07 23:58 - 00000000 ____D C:\ProgramData\AMD 2016-04-08 11:42 - 2016-03-04 18:08 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\livestreamer 2016-04-08 11:42 - 2016-03-04 18:03 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\vlc 2016-04-08 11:42 - 2016-03-02 02:33 - 00000000 ____D C:\Users\Janusz\Documents\TrinusVR 2016-04-08 11:42 - 2016-02-29 18:48 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\SUPERHOT_Team 2016-04-08 11:42 - 2016-02-29 18:44 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\SUPERHOT Team 2016-04-08 11:42 - 2016-02-26 00:00 - 00000000 ____D C:\Users\Janusz\Documents\Diablo III 2016-04-08 11:42 - 2016-02-24 00:15 - 00000000 ____D C:\ProgramData\SplitMediaLabs 2016-04-08 11:42 - 2016-02-24 00:13 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\SplitmediaLabs 2016-04-08 11:42 - 2016-02-23 23:27 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\RetroCityRampage 2016-04-08 11:42 - 2016-02-20 21:14 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Novicorp 2016-04-08 11:42 - 2016-02-20 19:33 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\InstallShield 2016-04-08 11:42 - 2016-02-19 19:17 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator 2016-04-08 11:42 - 2016-02-12 23:03 - 00000000 ____D C:\ProgramData\Socialclub 2016-04-08 11:42 - 2016-01-26 02:17 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinAVR-20100110 2016-04-08 11:42 - 2016-01-26 01:06 - 00000000 ____D C:\ProgramData\Atmel 2016-04-08 11:42 - 2015-12-23 14:56 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IdleMaster 2016-04-08 11:42 - 2015-12-14 21:23 - 00000000 ____D C:\Users\Public\Documents\GTA Vice City User Files 2016-04-08 11:42 - 2015-12-14 21:17 - 00000000 ____D C:\Users\Janusz\Documents\GTA Vice City User Files 2016-04-08 11:42 - 2015-12-08 21:19 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\CD Projekt RED 2016-04-08 11:42 - 2015-11-30 00:01 - 00000000 ____D C:\Users\Janusz\Documents\The Witcher 2016-04-08 11:42 - 2015-11-30 00:00 - 00000000 ____D C:\Users\Public\Documents\The Witcher 2016-04-08 11:42 - 2015-11-26 02:26 - 00000000 ____D C:\Users\Janusz\Documents\BFBC2 2016-04-08 11:42 - 2015-11-23 23:29 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\R 2016-04-08 11:42 - 2015-11-22 15:48 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\RStudio 2016-04-08 11:42 - 2015-11-13 18:14 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-04-08 11:42 - 2015-11-12 18:13 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Fatshark 2016-04-08 11:42 - 2015-11-04 20:02 - 00000000 ____D C:\Users\Janusz\Desktop\piwo 2016-04-08 11:42 - 2015-11-02 15:09 - 00000000 ____D C:\Users\Janusz\Desktop\baaza 2016-04-08 11:42 - 2015-10-27 20:16 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Notepad++ 2016-04-08 11:42 - 2015-10-27 20:16 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2016-04-08 11:42 - 2015-10-23 20:00 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\FileZilla 2016-04-08 11:42 - 2015-10-23 18:49 - 00000000 ____D C:\Users\Janusz\Desktop\flow 2016-04-08 11:42 - 2015-10-15 17:54 - 00000000 ____D C:\Users\Janusz\hsperfdata_Janusz 2016-04-08 11:42 - 2015-10-15 17:54 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Spring Tool Suite 2016-04-08 11:42 - 2015-10-15 17:49 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Sun 2016-04-08 11:42 - 2015-10-15 17:47 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Oracle 2016-04-08 11:42 - 2015-10-13 19:20 - 00000000 ____D C:\Users\Janusz\Documents\StarCraft II 2016-04-08 11:42 - 2015-10-07 20:35 - 00000000 ____D C:\Users\Janusz\colobot 2016-04-08 11:42 - 2015-09-21 16:57 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2016-04-08 11:42 - 2015-09-19 21:17 - 00000000 ____D C:\Users\Janusz\Documents\Gothic3 2016-04-08 11:42 - 2015-09-14 22:43 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Opera Software 2016-04-08 11:42 - 2015-09-11 15:43 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\java 2016-04-08 11:42 - 2015-08-24 21:16 - 00000000 ____D C:\Users\Janusz\Desktop\allgro 2016-04-08 11:42 - 2015-08-15 12:51 - 00000000 ____D C:\Users\Janusz\Documents\Neverwinter Nights 2 2016-04-08 11:42 - 2015-08-05 18:08 - 00000000 ____D C:\Users\Janusz\Documents\OpenTTD 2016-04-08 11:42 - 2015-07-26 19:09 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\NVIDIA 2016-04-08 11:42 - 2015-07-15 22:04 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 1.9.3-p551 2016-04-08 11:42 - 2015-07-15 14:17 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\MySQL 2016-04-08 11:42 - 2015-07-15 00:28 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Natural Selection 2 2016-04-08 11:42 - 2015-07-12 22:04 - 00000000 ____D C:\Users\Janusz\Documents\FOMM 2016-04-08 11:42 - 2015-07-12 20:18 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Wireshark 2016-04-08 11:42 - 2015-07-12 19:36 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Colasoft Ping Tool 2016-04-08 11:42 - 2015-07-12 19:36 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Colasoft Packet Player 2016-04-08 11:42 - 2015-07-12 19:36 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Colasoft MAC Scanner 2016-04-08 11:42 - 2015-07-04 22:18 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinUAE 2016-04-08 11:42 - 2015-07-01 21:45 - 00000000 ____D C:\Users\Janusz\Documents\WB Games 2016-04-08 11:42 - 2015-06-23 23:15 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Origin 2016-04-08 11:42 - 2015-06-20 23:21 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Subversion 2016-04-08 11:42 - 2015-06-09 14:38 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\postgresql 2016-04-08 11:42 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Janusz\Documents\MATLAB 2016-04-08 11:42 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\MathWorks 2016-04-08 11:42 - 2015-05-28 00:49 - 00000000 ____D C:\Users\Janusz\Documents\OCCT 2016-04-08 11:42 - 2015-05-28 00:46 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OCCT 2016-04-08 11:42 - 2015-05-27 16:06 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\stetic 2016-04-08 11:42 - 2015-05-27 15:55 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\gtk-2.0 2016-04-08 11:42 - 2015-05-19 15:06 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\JetBrains 2016-04-08 11:42 - 2015-05-18 22:16 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactor 2016-04-08 11:42 - 2015-05-16 21:26 - 00000000 ____D C:\Users\Janusz\Documents\My ISO Files 2016-04-08 11:42 - 2015-05-16 21:18 - 00000000 ____D C:\Users\Janusz\Documents\PCSX2 2016-04-08 11:42 - 2015-05-16 21:17 - 00000000 ____D C:\Users\Janusz\pcsx2 2016-04-08 11:42 - 2015-05-13 01:37 - 00000000 ____D C:\Users\Janusz\Documents\BeamNG.drive 2016-04-08 11:42 - 2015-04-27 18:12 - 00000000 ____D C:\Users\Janusz\Desktop\muzyka 2016-04-08 11:42 - 2015-04-27 15:07 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\ATI 2016-04-08 11:42 - 2015-04-19 13:41 - 00000000 ____D C:\Users\Janusz\Nowy folder 2016-04-08 11:42 - 2015-04-18 00:56 - 00000000 ___HD C:\Users\Janusz\InstallAnywhere 2016-04-08 11:42 - 2015-04-17 19:10 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\raidcall 2016-04-08 11:42 - 2015-04-17 19:10 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RaidCall 2016-04-08 11:42 - 2015-04-17 19:10 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\raidcall 2016-04-08 11:42 - 2015-03-31 10:44 - 00000000 ____D C:\Users\Janusz\Tracing 2016-04-08 11:42 - 2015-03-30 14:41 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Tibia 2016-04-08 11:42 - 2015-03-23 16:41 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\MonoDevelop-Unity-2.8 2016-04-08 11:42 - 2015-03-23 16:06 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\XamarinStudio-5.0 2016-04-08 11:42 - 2015-03-21 14:35 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Unity 2016-04-08 11:42 - 2015-03-21 14:28 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\PACE Anti-Piracy 2016-04-08 11:42 - 2015-03-21 13:54 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Unity 2016-04-08 11:42 - 2015-03-19 16:52 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2016-04-08 11:42 - 2015-03-19 16:52 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome 2016-04-08 11:42 - 2015-03-17 17:55 - 00000000 ____D C:\Users\Janusz\BootstrapTraining 2016-04-08 11:42 - 2015-03-14 18:06 - 00000000 ____D C:\Users\Janusz\Documents\Colossal Order 2016-04-08 11:42 - 2015-03-14 18:06 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Colossal Order 2016-04-08 11:42 - 2015-03-14 18:06 - 00000000 ____D C:\ProgramData\.mono 2016-04-08 11:42 - 2015-03-05 21:13 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\DarkSoulsII 2016-04-08 11:42 - 2015-03-03 22:03 - 00000000 ____D C:\Users\Janusz\Documents\Codemasters 2016-04-08 11:42 - 2015-03-02 12:24 - 00000000 ____D C:\Users\Janusz\Documents\Assassin's Creed IV Black Flag 2016-04-08 11:42 - 2015-03-01 14:50 - 00000000 ____D C:\ProgramData\Skype 2016-04-08 11:42 - 2015-02-21 13:09 - 00000000 ____D C:\Users\Janusz\Documents\GTA San Andreas User Files 2016-04-08 11:42 - 2015-02-20 16:58 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\NapiProjekt 2016-04-08 11:42 - 2015-02-14 16:54 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\inkscape 2016-04-08 11:42 - 2015-02-12 20:04 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\AppClient 2016-04-08 11:42 - 2015-02-12 20:03 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Game Empire 2016-04-08 11:42 - 2015-02-03 12:06 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Apple Computer 2016-04-08 11:42 - 2015-02-03 02:14 - 00000000 ____D C:\ProgramData\Apple Computer 2016-04-08 11:42 - 2015-02-03 02:13 - 00000000 ____D C:\ProgramData\Apple 2016-04-08 11:42 - 2015-02-03 02:12 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Apple Computer 2016-04-08 11:42 - 2015-01-31 16:27 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\New Technology Studio 2016-04-08 11:42 - 2015-01-31 16:27 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV 2016-04-08 11:42 - 2015-01-31 14:53 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Project Reality 2016-04-08 11:42 - 2015-01-31 13:05 - 00000000 ____D C:\Users\Janusz\Documents\Battlefield 2 2016-04-08 11:42 - 2015-01-30 23:49 - 00000000 ____D C:\Users\Janusz\Documents\4a games 2016-04-08 11:42 - 2015-01-30 18:21 - 00000000 ____D C:\Users\Janusz\Documents\Rockstar Games 2016-04-08 11:42 - 2015-01-30 18:18 - 00000000 __SHD C:\ProgramData\SecuROM 2016-04-08 11:42 - 2015-01-29 22:22 - 00000000 ____D C:\Users\Janusz\Documents\Stronghold Crusader 2016-04-08 11:42 - 2015-01-29 22:22 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-04-08 11:42 - 2015-01-29 22:22 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\GameRanger 2016-04-08 11:42 - 2015-01-29 18:28 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2016-04-08 11:42 - 2015-01-27 16:49 - 00000000 ____D C:\Users\Janusz\Documents\Heroes of the Storm 2016-04-08 11:42 - 2015-01-27 16:15 - 00000000 ____D C:\ProgramData\Battle.net 2016-04-08 11:42 - 2015-01-27 02:11 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Steam 2016-04-08 11:42 - 2015-01-26 22:48 - 00000000 __RHD C:\Users\Janusz\AppData\Roaming\SecuROM 2016-04-08 11:42 - 2015-01-26 18:12 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\OBS 2016-04-08 11:42 - 2015-01-26 18:12 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software 2016-04-08 11:42 - 2015-01-24 19:31 - 00000000 ____D C:\Users\Janusz\Documents\Action! 2016-04-08 11:42 - 2015-01-24 19:31 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Mirillis 2016-04-08 11:42 - 2015-01-24 13:17 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\CodeBlocks 2016-04-08 11:42 - 2015-01-24 13:09 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks 2016-04-08 11:42 - 2015-01-22 21:02 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\NetBeans 2016-04-08 11:42 - 2015-01-22 20:31 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Sun 2016-04-08 11:42 - 2015-01-21 00:08 - 00000000 ____D C:\Users\Janusz\Documents\FormatFactory 2016-04-08 11:42 - 2015-01-21 00:02 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2016-04-08 11:42 - 2015-01-19 22:35 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\TS3Client 2016-04-08 11:42 - 2015-01-19 14:07 - 00000000 ____D C:\Users\Janusz\Documents\Camtasia Studio 2016-04-08 11:42 - 2015-01-19 14:07 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\TechSmith 2016-04-08 11:42 - 2015-01-18 01:35 - 00000000 ____D C:\Users\Janusz\Documents\Witcher 2 2016-04-08 11:42 - 2015-01-17 23:23 - 00000000 ____D C:\Users\Janusz\Documents\Adobe 2016-04-08 11:42 - 2015-01-17 20:46 - 00000000 ____D C:\Users\Janusz\Documents\GOG.com Downloads 2016-04-08 11:42 - 2015-01-17 17:19 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Audacity 2016-04-08 11:42 - 2015-01-15 00:26 - 00000000 ____D C:\Users\Janusz\Documents\My Games 2016-04-08 11:42 - 2015-01-12 11:03 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\LibreOffice 2016-04-08 11:42 - 2015-01-10 19:25 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Blender Foundation 2016-04-08 11:42 - 2015-01-09 00:54 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\fofix 2016-04-08 11:42 - 2015-01-08 10:27 - 00000000 ____D C:\Users\Janusz\Documents\ArmA 2 2016-04-08 11:42 - 2015-01-07 20:49 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer 2016-04-08 11:42 - 2015-01-07 16:22 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 2016-04-08 11:42 - 2015-01-07 16:22 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Adobe 2016-04-08 11:42 - 2015-01-07 15:26 - 00000000 ____D C:\ProgramData\ALM 2016-04-08 11:42 - 2015-01-07 14:36 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\uTorrent 2016-04-08 11:42 - 2015-01-07 14:33 - 00000000 ____D C:\ProgramData\Adobe 2016-04-08 11:42 - 2015-01-06 19:00 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\DAEMON Tools Lite 2016-04-08 11:42 - 2015-01-06 17:34 - 00000000 ____D C:\Users\Janusz\AppData\LocalLow\Sony Online Entertainment 2016-04-08 11:42 - 2015-01-03 17:17 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\foobar2000 2016-04-08 11:42 - 2015-01-03 02:24 - 00000000 ____D C:\Users\Janusz\Documents\BioWare 2016-04-08 11:42 - 2015-01-03 02:18 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Macromedia 2016-04-08 11:42 - 2015-01-02 23:18 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Mozilla 2016-04-08 11:42 - 2014-12-23 02:28 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Media Center Programs 2016-04-08 11:42 - 2014-12-23 02:28 - 00000000 ____D C:\Users\Janusz 2016-04-08 11:42 - 2011-04-12 15:32 - 00000000 ___RD C:\Users\Public\Recorded TV 2016-04-08 11:42 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2016-04-08 11:22 - 2015-10-15 17:48 - 00000000 ____D C:\Program Files\Java 2016-04-08 11:13 - 2015-01-07 15:24 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-04-07 14:17 - 2015-01-06 23:22 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4E7D96E3-D065-4F19-8C61-A82025392420} 2016-04-06 19:01 - 2015-02-12 20:03 - 00000000 ____D C:\Users\Janusz\AppData\Local\Apps\2.0 2016-04-06 11:52 - 2015-12-10 13:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-04-04 20:54 - 2015-05-28 20:24 - 00000000 ____D C:\Users\Janusz\Documents\The Witcher 3 2016-04-04 14:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-04-03 13:34 - 2015-09-14 23:00 - 00000000 ____D C:\Windows\erdnt 2016-04-03 12:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2016-04-02 20:27 - 2015-10-23 20:50 - 00000752 _____ C:\Users\Janusz\wp-admin.css 2016-04-02 20:27 - 2015-01-31 14:53 - 00002800 _____ C:\Users\Janusz\Documents\PRMumbleCertificateBackup.p12 2016-04-02 20:26 - 2015-05-09 15:30 - 00000544 _____ C:\Users\Janusz\Documents\not.txt 2016-04-02 20:25 - 2016-03-01 14:43 - 00511600 _____ C:\Users\Janusz\Desktop\inz.odt 2016-04-02 20:25 - 2016-02-24 16:13 - 00815776 _____ C:\Users\Janusz\Desktop\rozdzial-3-kopia.pdf 2016-04-02 20:25 - 2016-02-24 16:13 - 00126816 _____ C:\Users\Janusz\Desktop\1 (2).pdf 2016-04-02 20:25 - 2016-02-24 16:13 - 00057696 _____ C:\Users\Janusz\Desktop\0.pdf 2016-04-02 20:25 - 2015-12-07 20:27 - 00003568 _____ C:\Users\Janusz\Documents\Documents.zip 2016-04-02 20:25 - 2015-11-19 19:06 - 00007840 _____ C:\Users\Janusz\Desktop\Nowy dokument tekstowy.txt 2016-04-02 20:25 - 2015-10-15 22:26 - 00095696 _____ C:\Users\Janusz\Desktop\pwsz-zi_harmonogram_2015-2016_zima_in_4_isi.pdf 2016-04-02 20:25 - 2015-07-06 22:44 - 00000448 _____ C:\Users\Janusz\Desktop\passy.txt 2016-04-02 20:25 - 2015-04-09 16:22 - 26323568 _____ C:\Users\Janusz\Desktop\NORSOK Stefan Niedziela.psd 2016-04-02 20:25 - 2015-04-07 16:56 - 59038080 _____ C:\Users\Janusz\Desktop\VID_20150109_193855.mp4 2016-04-02 20:25 - 2015-04-07 16:56 - 55914448 _____ C:\Users\Janusz\Desktop\VID_20141231_230350.mp4 2016-04-02 20:25 - 2014-12-23 02:16 - 00000000 ____D C:\Windows\Panther 2016-04-02 20:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\ModemLogs 2016-04-02 20:22 - 2015-04-27 14:49 - 00000000 ____D C:\Windows\Minidump 2016-03-31 11:18 - 2009-07-14 06:45 - 05320416 _____ C:\Windows\system32\FNTCACHE.DAT 2016-03-30 22:06 - 2015-08-13 16:49 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-30 14:04 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Downloaded Program Files 2016-03-29 17:57 - 2011-04-12 15:21 - 00740492 _____ C:\Windows\system32\perfh015.dat 2016-03-29 17:57 - 2011-04-12 15:21 - 00156042 _____ C:\Windows\system32\perfc015.dat 2016-03-29 17:57 - 2009-07-14 07:13 - 01670742 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-29 17:47 - 2015-09-11 15:43 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\.minecraft 2016-03-17 02:04 - 2015-01-06 00:48 - 00000000 ____D C:\Program Files (x86)\Google 2016-03-16 00:02 - 2015-01-27 16:18 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2016-03-15 18:28 - 2015-01-20 21:52 - 00000132 _____ C:\Users\Janusz\AppData\Roaming\Adobe PNG Format CS6 Prefs 2016-03-09 18:19 - 2015-10-29 15:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-01-20 21:52 - 2016-03-15 18:28 - 0000132 _____ () C:\Users\Janusz\AppData\Roaming\Adobe PNG Format CS6 Prefs 2015-01-13 19:57 - 2016-03-31 02:15 - 0001456 _____ () C:\Users\Janusz\AppData\Local\Adobe Save for Web 13.0 Prefs 2015-09-14 22:42 - 2015-09-14 22:42 - 0000187 _____ () C:\Users\Janusz\AppData\Local\Fixlux.exe.config 2015-05-13 01:36 - 2015-05-13 01:36 - 0000000 ___SH () C:\Users\Janusz\AppData\Local\LumaEmu 2016-01-04 02:59 - 2016-01-04 03:03 - 0000600 _____ () C:\Users\Janusz\AppData\Local\PUTTY.RND 2015-04-29 18:20 - 2015-04-29 18:20 - 0000218 _____ () C:\Users\Janusz\AppData\Local\recently-used.xbel 2015-02-06 19:54 - 2015-11-24 23:35 - 0007622 _____ () C:\Users\Janusz\AppData\Local\Resmon.ResmonCfg 2015-01-02 23:36 - 2015-01-02 23:36 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-11-12 21:15 - 2015-11-12 21:15 - 0000134 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-04-08 02:30 ==================== Koniec FRST.txt ============================