Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 19-06-2016 01
Uruchomiony przez Administrator (administrator)  S1 (20-06-2016 18:56:07)
Uruchomiony z E:\
Załadowane profile: Administrator (Dostępne profile: k & ASPNET & DefaultAccount & Adm1n & Administrator & Classic .NET AppPool)
Platform: Windows Server 2008 R2 Standard Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(ILC) C:\Program Files\ExecutionEnvironment\ExecutionEnvironment.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1436736 2011-06-15] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [ShowSuperHidden] 1
Lsa: [Notification Packages] scecli rassfm
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\No-IP DUC.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS [2016-06-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Interfejs Środowiska Uruchomieniowego.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS [2016-06-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\No-IP DUC.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS [2016-06-20]
Startup: C:\Users\k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\How to decrypt your files.jpg [2016-06-20] ()
Startup: C:\Users\k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\How to decrypt your files.txt [2016-06-20] ()
BootExecute: autocheck autochk * sh4native Sh4Removal
GroupPolicyScripts: Ograniczenia <======= UWAGA
GroupPolicyScripts\User: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\..\Interfaces\{977AAFDA-4F19-4C85-A63E-79867F914700}: [NameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2194386481-2434004438-2127338018-500\Software\Microsoft\Internet Explorer\Main,Start Page = res://iesetup.dll/SoftAdmin.htm
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [Brak pliku]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [Brak pliku]

Chrome: 
=======
CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Brak nazwy) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-16]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417304 2016-04-26] (BlueStack Systems, Inc.)
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [921112 2016-04-26] (BlueStack Systems, Inc.)
R2 ExecutionEnvironment; C:\Program Files\ExecutionEnvironment\ExecutionEnvironment.exe [18944 2015-01-12] (ILC) [Brak podpisu cyfrowego]
S3 FCRegSvc; C:\Windows\system32\FCRegSvc.dll [25600 2009-07-14] (Microsoft Corporation)
S2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation)
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [12784 2011-04-27] (Microsoft Corporation)
S2 postgresql-x64-9.5; C:\PostgreSQL\9.5\bin\pg_ctl.exe [94208 2016-03-29] (PostgreSQL Global Development Group) [Brak podpisu cyfrowego]
S3 RSoPProv; C:\Windows\system32\RSoPProv.exe [91648 2009-07-14] (Microsoft Corporation)
S3 sacsvr; C:\Windows\system32\sacsvr.dll [14848 2009-07-14] (Microsoft Corporation)
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-14] (Microsoft Corporation)
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S3 BstHdPlusAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe" BstHdPlusAndroidSvc Android [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S3 IDriverT; "C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" [X]
S3 NisSrv; "c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe" [X]
S4 OracleJobSchedulerXE; c:\oraclexe\app\oracle\product\11.2.0\server\Bin\extjob.exe XE [X]
S3 OracleMTSRecoveryService; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\omtsreco.exe "OracleMTSRecoveryService" [X]
S4 OracleServiceXE; c:\oraclexe\app\oracle\product\11.2.0\server\bin\ORACLE.EXE XE [X]
S3 OracleXEClrAgent; C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClrAgnt.exe agent_sid=CLRExtProc max_dispatchers=2 tcp_dispatchers=0 max_task_threads=6 max_sessions=25 ENVS="EXTPROC_DLLS=ONLY:C:\oraclexe\app\oracle\product\11.2.0\server\bin\oraclr11.dll"
S4 OracleXETNSListener; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\tnslsnr.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 ioatdma; C:\Windows\System32\Drivers\qd260x64.sys [35328 2009-06-10] (Intel Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [189440 2011-04-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [84864 2011-04-27] (Microsoft Corporation)
S0 sacdrv; C:\Windows\System32\DRIVERS\sacdrv.sys [96320 2009-07-14] (Microsoft Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S2 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X]
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS_64.sys [X]
S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVC: sacsvr -> C:\Windows\system32\sacsvr.dll (Microsoft Corporation)

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-20 18:54 - 2016-06-20 18:56 - 00000000 ____D C:\FRST
2016-06-20 10:28 - 2016-06-20 18:34 - 00367300 _____ C:\Windows\ntbtlog.txt
2016-06-20 09:32 - 2016-06-20 09:32 - 00003188 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2016-06-20 09:32 - 2015-12-19 13:52 - 00025984 _____ C:\Windows\SysWOW64\sh4native.exe
2016-06-20 09:27 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-06-20 09:27 - 2016-01-08 20:56 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll
2016-06-20 09:27 - 2016-01-08 20:37 - 00192512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iassam.dll
2016-06-20 09:27 - 2015-11-10 20:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-06-20 09:27 - 2015-11-10 20:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-06-20 09:27 - 2015-11-10 20:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-06-20 09:27 - 2015-11-10 20:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-06-20 09:27 - 2015-11-10 20:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-06-20 09:27 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-06-20 09:27 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-06-20 09:27 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-06-20 09:27 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-20 09:27 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-06-20 09:27 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-06-20 09:27 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-06-20 09:27 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-06-20 09:27 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-06-20 09:27 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-06-20 09:27 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-06-20 09:27 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-06-20 09:27 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-06-20 09:27 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-06-20 09:26 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-06-20 09:26 - 2015-11-03 21:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-06-20 09:26 - 2015-11-03 20:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-06-20 09:26 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-06-20 09:26 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-06-20 09:26 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-06-20 09:26 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-06-20 09:26 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-06-20 09:26 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-06-20 09:25 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-06-20 09:25 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-06-20 09:25 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-06-20 09:25 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-06-20 09:25 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-06-20 09:25 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-06-20 09:25 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-06-20 09:25 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-06-20 09:25 - 2015-12-08 21:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-06-20 09:25 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-06-20 09:25 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-06-20 09:25 - 2015-12-08 20:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-06-20 09:25 - 2015-12-08 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-06-20 09:25 - 2015-12-08 20:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-06-20 09:25 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-06-20 09:25 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-06-20 09:25 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-06-20 09:25 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-06-20 09:25 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-06-20 09:25 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-06-20 09:25 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-06-20 09:25 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-06-20 09:25 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-06-20 09:25 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-06-20 09:25 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-06-20 09:25 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-06-20 09:25 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-06-20 09:24 - 2016-01-22 08:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-06-20 09:24 - 2016-01-22 08:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-06-20 09:24 - 2016-01-22 08:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-06-20 09:24 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-06-20 09:24 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-06-20 09:24 - 2015-11-14 01:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-06-20 09:24 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-06-20 09:24 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-06-20 09:24 - 2015-11-14 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-06-20 09:24 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-06-20 09:24 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-06-20 09:24 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-06-20 09:24 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-06-20 09:24 - 2015-11-05 21:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-06-20 09:24 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-06-20 09:24 - 2015-11-05 11:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-06-20 09:24 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-06-20 09:24 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-06-20 09:24 - 2015-10-13 18:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-06-20 09:24 - 2015-10-13 18:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-06-20 09:24 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-06-20 09:24 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-06-20 09:23 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-06-20 09:23 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-06-20 09:23 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-06-20 09:23 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-06-20 09:23 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-06-20 09:23 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-06-20 09:23 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-06-20 09:23 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-06-20 09:23 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-06-20 09:23 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-06-20 09:23 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-06-20 09:23 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-06-20 09:23 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-06-20 09:23 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-06-20 09:23 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-06-20 09:23 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-06-20 09:23 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-06-20 09:23 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-06-20 09:23 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-06-20 09:23 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-06-20 09:23 - 2015-06-09 21:34 - 00565760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-06-20 09:23 - 2015-06-09 20:03 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-06-20 08:49 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-06-20 08:49 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-06-20 08:39 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-06-20 08:39 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-06-20 08:39 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-06-20 08:39 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-06-20 08:39 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-06-20 08:39 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-06-20 08:39 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-06-20 08:39 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-06-20 07:57 - 2016-06-20 00:27 - 14360964 _____ C:\Users\Administrator\Downloads\ProfiBiznesRynkowy.7z.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 07:56 - 2016-06-20 00:27 - 00181006 _____ C:\Users\Administrator\Downloads\ARTYKULY_MYSLNIKI.xls.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 07:54 - 2016-06-20 07:56 - 00002661 _____ C:\Users\Administrator\Downloads\legitcheck (1).hta
2016-06-20 07:42 - 2016-06-20 07:42 - 00002657 _____ C:\Users\Administrator\Downloads\legitcheck.hta
2016-06-20 07:41 - 2016-06-20 00:25 - 00001214 _____ C:\Users\Administrator\Downloads\No-IP DUC.lnk.id-E842183D.{mailrepa.lotos@aol.com} (2).CrySiS
2016-06-20 07:41 - 2016-06-20 00:25 - 00001214 _____ C:\Users\Administrator\Downloads\No-IP DUC.lnk.id-E842183D.{mailrepa.lotos@aol.com} (1).CrySiS
2016-06-20 07:40 - 2016-06-20 00:25 - 00001214 _____ C:\Users\Administrator\Downloads\No-IP DUC.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 07:39 - 2016-06-20 07:39 - 00057560 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2016-06-20 07:38 - 2016-06-20 07:38 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2016-06-20 00:29 - 2016-06-20 00:29 - 01571590 _____ C:\Users\DefaultAccount\Downloads\Power_utilits.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 01447790 _____ C:\Users\DefaultAccount\Desktop\SqlMapGUI.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00752006 _____ C:\Users\DefaultAccount\Downloads\Clear.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00465388 _____ C:\Users\DefaultAccount\Desktop\libssl32.dll.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00069428 _____ C:\Users\DefaultAccount\Documents\mbhd-f7742e51-cc7cd92f-a9b56927-83a5ee9b-a37c67f0-20160519183648.zip.aes.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00057818 _____ C:\Users\k\AppData\Local\GDIPFONTCACHEV1.DAT.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00002438 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-20 00:29 - 2016-06-20 00:29 - 00002438 _____ C:\Users\Public\Desktop\Get Started With Oracle Database 11g Express Edition .lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00002274 _____ C:\Users\Public\Desktop\MultiBit HD.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001952 _____ C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\BlueStacks.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001920 _____ C:\Users\Public\Desktop\BlueStacks.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001694 _____ C:\Users\k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001694 _____ C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001316 _____ C:\Users\Public\Desktop\Unibet Poker.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00001044 _____ C:\Users\Public\Desktop\Profi-Biznes.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000734 _____ C:\Users\DefaultAccount\Downloads\2.vbs.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000714 ___SH C:\Users\k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000650 ___SH C:\Users\k\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000650 ___SH C:\Users\DefaultAccount\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000628 _____ C:\Users\DefaultAccount\Downloads\RecentPlaces.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000620 _____ C:\Users\DefaultAccount\Desktop\Komputer — skrót.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000586 ___SH C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000522 ___SH C:\Users\Public\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000522 ___SH C:\Users\k\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000522 ___SH C:\Users\k\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000522 ___SH C:\Users\DefaultAccount\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000522 ___SH C:\Users\DefaultAccount\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\Public\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\Public\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\Public\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\k\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000410 ___SH C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000338 _____ C:\Users\DefaultAccount\Desktop\123.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000264 ___SH C:\Users\WYDR\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000264 ___SH C:\Users\k\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000264 ___SH C:\Users\DefaultAccount\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-06-20 00:29 - 00000188 _____ C:\Users\k\Desktop\How to decrypt your files.txt
2016-06-20 00:28 - 2016-06-20 00:28 - 00987992 _____ C:\Users\ASPNET\Desktop\ChromeSetupENG.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00778540 ____H C:\Users\ASPNET\AppData\Local\IconCache.db.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00742018 _____ C:\Users\Administrator\Downloads\vnc-4_1_3-x86_win32.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00057818 _____ C:\Users\DefaultAccount\AppData\Local\GDIPFONTCACHEV1.DAT.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00057818 _____ C:\Users\ASPNET\AppData\Local\GDIPFONTCACHEV1.DAT.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00002218 ____H C:\Users\Administrator\Documents\Default.rdp.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00001694 _____ C:\Users\ASPNET\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000650 ___SH C:\Users\ASPNET\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000650 ___SH C:\Users\Administrator\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000620 _____ C:\Users\Administrator\Untitled.sql.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000586 ___SH C:\Users\ASPNET\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000522 ___SH C:\Users\ASPNET\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000522 ___SH C:\Users\ASPNET\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000522 ___SH C:\Users\Administrator\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000410 ___SH C:\Users\ASPNET\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000264 ___SH C:\Users\Classic .NET AppPool\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000264 ___SH C:\Users\ASPNET\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:28 - 2016-06-20 00:28 - 00000264 ___SH C:\Users\Administrator\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00753936 _____ C:\Users\Administrator\Desktop\HelpDeskMotoProfil.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00282394 _____ C:\Users\Administrator\Desktop\PG_Z_BAZY_KWIECIEN_2016.xls.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00181006 _____ C:\Users\Administrator\Desktop\ARTYKULY_MYSLNIKI.xls.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00103212 _____ C:\Users\Administrator\Desktop\Konsola1.msc.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00013576 _____ C:\Users\Administrator\Desktop\spacje indeksy.xls.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001678 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001492 _____ C:\Users\Administrator\Desktop\mstsc.exe K1, K2, K3.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001470 _____ C:\Users\Administrator\Desktop\help_desk_mpf.exe — skrót.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001330 _____ C:\Users\Administrator\Desktop\Run VNC Viewer K4, St2, St3.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001224 _____ C:\Users\Administrator\Desktop\ARTYKULY_BLEDY.csv.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00001074 _____ C:\Users\Administrator\Desktop\pgAdmin III.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000884 _____ C:\Users\Administrator\Desktop\SQLDeveloper.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000714 ___SH C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000698 ___SH C:\Users\Administrator\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000542 _____ C:\Users\Administrator\Desktop\DOKUMENT_SP_D_TRG.sql.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000470 _____ C:\Users\Administrator\Desktop\Rozwiązywanie problemów z programem Internet Explorer.url.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000436 _____ C:\Users\Administrator\Desktop\Mój adres IP.url.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2016-06-20 00:27 - 00000410 ___SH C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00448512 _____ C:\Users\Administrator\AppData\Local\dd_vcredistMSI6035.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00436144 _____ C:\Users\Administrator\AppData\Local\dd_vcredistMSI5F06.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00057818 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00057818 _____ C:\Users\Adm1n\AppData\Local\GDIPFONTCACHEV1.DAT.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00018126 _____ C:\Users\Administrator\AppData\Local\dd_vcredistUI6035.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00018126 _____ C:\Users\Administrator\AppData\Local\dd_vcredistUI5F06.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00012078 _____ C:\Users\Administrator\AppData\Local\dd_vcredistUI5C71.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00012046 _____ C:\Users\Administrator\AppData\Local\dd_vcredistUI5C4D.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00001694 _____ C:\Users\Adm1n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000650 ___SH C:\Users\Adm1n\Documents\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000586 ___SH C:\Users\Adm1n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000522 ___SH C:\Users\Adm1n\Downloads\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000522 ___SH C:\Users\Adm1n\Desktop\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000410 ___SH C:\Users\Adm1n\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000294 _____ C:\Users\Administrator\AppData\Local\setup.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000276 _____ C:\Users\Administrator\AppData\Local\resmon.resmoncfg.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 00000264 ___SH C:\Users\Adm1n\ntuser.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-06-20 00:25 - 00002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-06-20 00:25 - 00002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-06-20 00:25 - 00001528 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-06-20 00:25 - 00000570 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-06-20 00:25 - 00000410 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:22 - 2016-06-20 00:22 - 00000410 ___SH C:\Program Files\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:22 - 2016-06-20 00:22 - 00000410 ___SH C:\Program Files (x86)\desktop.ini.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:17 - 2016-06-20 00:17 - 00904954 _____ C:\msdia80.dll.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:17 - 2016-06-20 00:17 - 00035844 _____ C:\onet.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:04 - 2016-06-20 00:04 - 00232222 _____ C:\3.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:04 - 2016-06-20 00:04 - 00210704 _____ C:\14.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:03 - 2016-06-20 00:04 - 00000000 ____D C:\Users\k\AppData\Roaming\MultiBitHD
2016-06-17 08:53 - 2016-06-17 08:53 - 09166528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-06-15 22:18 - 2016-06-20 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 9.5
2016-06-15 22:17 - 2016-06-15 22:17 - 00000000 ____D C:\PostgreSQL
2016-06-15 22:16 - 2016-06-15 22:16 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-15 13:22 - 2016-05-24 01:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-15 13:22 - 2016-05-24 00:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-06-15 13:22 - 2016-05-21 18:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-15 13:22 - 2016-05-21 00:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-06-15 13:22 - 2016-05-21 00:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-06-15 13:22 - 2016-05-21 00:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-06-15 13:22 - 2016-05-21 00:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-06-15 13:22 - 2016-05-21 00:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-06-15 13:22 - 2016-05-21 00:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-15 13:22 - 2016-05-20 23:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-06-15 13:22 - 2016-05-20 23:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-15 13:22 - 2016-05-20 23:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-06-15 13:22 - 2016-05-20 23:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-06-15 13:22 - 2016-05-20 23:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-15 13:22 - 2016-05-20 23:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-06-15 13:22 - 2016-05-20 23:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-15 13:22 - 2016-05-20 23:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-15 13:22 - 2016-05-20 23:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-06-15 13:22 - 2016-05-20 23:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-15 13:22 - 2016-05-20 23:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-06-15 13:22 - 2016-05-20 23:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-15 13:22 - 2016-05-20 23:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-06-15 13:22 - 2016-05-20 23:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-06-15 13:22 - 2016-05-20 23:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-15 13:22 - 2016-05-20 23:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-06-15 13:22 - 2016-05-20 23:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-15 13:22 - 2016-05-20 23:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-06-15 13:22 - 2016-05-20 23:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-06-15 13:22 - 2016-05-20 23:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-15 13:22 - 2016-05-20 23:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-06-15 13:22 - 2016-05-20 23:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-06-15 13:22 - 2016-05-20 23:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-15 13:22 - 2016-05-20 23:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-06-15 13:22 - 2016-05-20 23:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-06-15 13:22 - 2016-05-20 23:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-15 13:22 - 2016-05-20 23:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-15 13:22 - 2016-05-20 23:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-15 13:22 - 2016-05-20 23:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-15 13:22 - 2016-05-20 22:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-15 13:22 - 2016-05-20 22:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-15 13:22 - 2016-05-20 22:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-15 13:22 - 2016-05-20 22:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-15 13:21 - 2016-05-21 19:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-15 13:21 - 2016-05-21 00:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-15 13:21 - 2016-05-21 00:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-06-15 13:21 - 2016-05-21 00:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-06-15 13:21 - 2016-05-21 00:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-15 13:21 - 2016-05-21 00:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-15 13:21 - 2016-05-20 23:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-06-15 13:21 - 2016-05-20 23:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-06-15 13:21 - 2016-05-20 23:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-15 13:21 - 2016-05-20 23:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-06-15 13:21 - 2016-05-20 23:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-06-15 13:21 - 2016-05-20 23:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-06-15 13:21 - 2016-05-20 23:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-06-15 13:21 - 2016-05-20 23:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-06-15 13:21 - 2016-05-20 23:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-15 13:21 - 2016-05-20 23:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-06-15 13:21 - 2016-05-20 23:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-15 13:21 - 2016-05-20 23:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-15 13:21 - 2016-05-20 23:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-15 13:21 - 2016-05-20 23:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-15 13:21 - 2016-05-20 23:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-06-15 13:21 - 2016-05-20 23:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-06-15 13:21 - 2016-05-20 22:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-15 13:21 - 2016-05-20 22:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-15 13:20 - 2016-05-18 18:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-15 13:20 - 2016-05-18 18:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-15 13:20 - 2016-05-14 00:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-15 13:20 - 2016-05-14 00:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-15 13:20 - 2016-05-14 00:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-15 13:20 - 2016-05-14 00:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-15 13:20 - 2016-05-14 00:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-15 13:20 - 2016-05-13 23:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-15 13:20 - 2016-05-13 23:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-15 13:20 - 2016-05-13 23:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-15 13:20 - 2016-05-13 23:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-15 13:20 - 2016-05-13 23:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-15 13:20 - 2016-05-12 19:20 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-15 13:20 - 2016-05-12 19:20 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-06-15 13:20 - 2016-05-12 19:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-06-15 13:20 - 2016-05-12 19:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-06-15 13:20 - 2016-05-12 19:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-06-15 13:20 - 2016-05-12 19:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-06-15 13:20 - 2016-05-12 19:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-06-15 13:20 - 2016-05-12 19:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-06-15 13:20 - 2016-05-12 17:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-06-15 13:20 - 2016-05-12 17:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-06-15 13:20 - 2016-05-12 17:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-06-15 13:20 - 2016-05-12 16:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-06-15 13:20 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-06-15 13:20 - 2016-05-12 16:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-06-15 13:20 - 2016-05-12 16:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-06-15 13:20 - 2016-05-12 15:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-15 13:20 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-15 13:20 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-15 13:20 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-15 13:20 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-15 13:20 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-15 13:20 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-15 13:20 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-15 13:20 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-15 13:20 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-15 13:20 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-15 13:20 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-06-15 13:20 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-06-15 13:20 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-15 13:19 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-15 13:19 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-15 13:19 - 2016-05-12 19:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-15 13:19 - 2016-05-12 17:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-15 13:19 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-15 13:19 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-15 13:19 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-06-15 13:19 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-15 13:19 - 2016-05-12 17:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-06-15 13:19 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-15 13:19 - 2016-05-12 16:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-06-05 13:25 - 2016-06-20 00:28 - 21387882 _____ C:\Users\ASPNET\Documents\unibet_poker_log.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-05 13:25 - 2016-06-05 13:25 - 00000000 ____D C:\Users\ASPNET\AppData\Roaming\Macromedia
2016-06-05 13:24 - 2016-06-20 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibet Poker
2016-06-05 13:24 - 2016-06-20 00:23 - 00000000 ____D C:\Program Files (x86)\Unibet Poker
2016-06-05 13:24 - 2016-06-05 13:24 - 00000000 ____D C:\Users\ASPNET\AppData\Roaming\com.relax-gaming.skywalker
2016-06-05 13:18 - 2016-06-20 00:28 - 31623362 _____ C:\Users\ASPNET\Downloads\UnibetPoker.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-05-24 08:55 - 2016-05-24 08:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Database
2016-05-24 08:55 - 2016-05-24 08:55 - 00000000 ____D C:\Users\Administrator\AppData\Local\Xenocode
2016-05-24 08:33 - 2016-06-20 00:24 - 00000000 ____D C:\ProgramData\Komunikator
2016-05-24 08:28 - 2016-06-20 00:22 - 00000000 ____D C:\Program Files\ExecutionEnvironment
2016-05-24 08:21 - 2016-05-24 08:21 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2016-05-24 08:21 - 2016-05-24 08:21 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-05-24 08:21 - 2016-05-24 08:21 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-05-24 08:20 - 2016-05-24 08:20 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-05-24 08:20 - 2016-05-24 08:20 - 00000000 ____D C:\Program Files\MSBuild
2016-05-24 08:16 - 2016-06-20 18:42 - 00000000 ____D C:\ProgramData\ExecutionEnvironment
2016-05-23 23:27 - 2016-06-20 00:29 - 34439428 _____ C:\Users\DefaultAccount\Downloads\Warframe.msi.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-05-23 17:44 - 2016-05-23 17:44 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TeamViewer
2016-05-23 17:43 - 2016-06-20 00:28 - 07890802 _____ C:\Users\Administrator\Desktop\TeamViewerQS_pl.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-05-23 14:50 - 2016-05-23 14:50 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-20 18:55 - 2009-07-14 09:32 - 00793548 _____ C:\Windows\system32\perfh015.dat
2016-06-20 18:55 - 2009-07-14 09:32 - 00179290 _____ C:\Windows\system32\perfc015.dat
2016-06-20 18:55 - 2009-07-14 07:10 - 01813656 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-20 18:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-20 18:53 - 2013-03-16 09:56 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-20 18:48 - 2016-03-18 06:38 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-20 18:48 - 2009-07-14 06:49 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-20 18:48 - 2009-07-14 06:49 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-20 18:40 - 2010-12-22 12:37 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-20 18:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv
2016-06-20 18:39 - 2016-03-18 06:38 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-20 18:39 - 2009-07-14 07:06 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-20 14:32 - 2016-05-05 15:47 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-06-20 12:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-06-20 10:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-06-20 09:46 - 2010-12-22 13:56 - 01788858 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-06-20 09:09 - 2009-07-14 06:49 - 00266656 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-20 08:47 - 2013-08-27 15:28 - 00000000 ____D C:\Windows\system32\MRT
2016-06-20 08:44 - 2010-12-22 13:05 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-20 07:38 - 2010-12-22 12:34 - 00000000 ____D C:\Users\Administrator
2016-06-20 00:29 - 2016-05-19 21:47 - 00000000 ____D C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Litecoin Core
2016-06-20 00:29 - 2016-05-19 21:46 - 13217681 _____ C:\Users\DefaultAccount\Downloads\litecoin-0.10.4.0-win64-setup.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-19 20:21 - 31011494 _____ C:\Users\DefaultAccount\Downloads\multibit-hd-windows-0.3.0.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-18 11:26 - 154361894 _____ C:\Users\DefaultAccount\Downloads\result_2_in_1.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-10 19:16 - 03397355 _____ C:\Users\DefaultAccount\Downloads\mail reg check.zip.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-09 18:40 - 02367756 _____ C:\Users\DefaultAccount\Desktop\ValidatorPRO.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-06 20:38 - 08531830 _____ C:\Users\DefaultAccount\Desktop\sqlmap.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-06 20:38 - 00000000 ____D C:\Users\DefaultAccount\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 2.7
2016-06-20 00:29 - 2016-05-06 20:34 - 17034004 _____ C:\Users\DefaultAccount\Downloads\python-2.7.amd64.msi.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-06 20:07 - 14071774 _____ C:\Users\DefaultAccount\Downloads\Python-2.6.9.tgz.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-06 20:03 - 09749486 _____ C:\Users\DefaultAccount\Downloads\SqlMapGUI v.1.0.0.4 by JohnDoe.zip.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-06 17:45 - 05396512 _____ C:\Users\DefaultAccount\Downloads\SQLi Dumper 7.2.rar.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-05-05 15:40 - 313317370 _____ C:\Users\DefaultAccount\Downloads\BlueStacks2_native_ccdcde4ff24090ebb95cd7b3e90de107.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:29 - 2016-04-09 18:25 - 00000000 _RSHD C:\Users\DefaultAccount
2016-06-20 00:29 - 2016-03-18 06:36 - 00000000 __RSD C:\Users\k\AppData\Roaming\Security
2016-06-20 00:29 - 2013-06-14 12:25 - 00000000 ____D C:\Users\WYDR
2016-06-20 00:29 - 2012-02-08 19:55 - 00000000 ____D C:\Users\k
2016-06-20 00:28 - 2016-03-18 06:36 - 00000000 _RSHD C:\Users\ASPNET
2016-06-20 00:28 - 2011-01-18 11:48 - 00000000 ____D C:\Users\Administrator\Desktop\Szablony
2016-06-20 00:28 - 2010-12-22 13:55 - 10929488 _____ C:\Users\Administrator\Downloads\mseinstall.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2014-12-06 09:17 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
2016-06-20 00:27 - 2014-02-19 12:03 - 00000000 ____D C:\Users\Administrator\Desktop\atro pb
2016-06-20 00:27 - 2013-03-20 14:22 - 72803041 _____ C:\Users\Administrator\Desktop\stany mag przed pobieraczka.csv.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2012-10-04 14:08 - 14360964 _____ C:\Users\Administrator\Desktop\ProfiBiznesRynkowy.7z.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2012-01-31 18:14 - 51236178 _____ C:\Users\Administrator\Desktop\dotNetFx40_Full_x86_x64.exe.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:27 - 2011-01-12 10:42 - 00000000 ____D C:\Users\Administrator\Desktop\sqldeveloper
2016-06-20 00:26 - 2016-05-06 20:38 - 00000000 ____D C:\Python27
2016-06-20 00:26 - 2010-12-30 16:19 - 00000000 ____D C:\SerwerWydrukow
2016-06-20 00:26 - 2010-12-22 12:37 - 03342405 ____H C:\Users\Administrator\AppData\Local\IconCache.db.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:25 - 2016-05-19 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiBit HD
2016-06-20 00:25 - 2015-11-06 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle Database 11g Express Edition
2016-06-20 00:25 - 2011-02-03 09:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-06-20 00:25 - 2010-12-30 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Profi-Biznes
2016-06-20 00:25 - 2010-12-22 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
2016-06-20 00:23 - 2016-05-19 20:30 - 00000000 ____D C:\Program Files (x86)\MultiBit HD
2016-06-20 00:23 - 2016-05-05 15:55 - 00000000 ____D C:\ProgramData\BlueStacks
2016-06-20 00:22 - 2016-05-19 21:47 - 00000000 ____D C:\Program Files\Litecoin
2016-06-20 00:22 - 2016-05-05 15:55 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2016-06-20 00:22 - 2011-02-03 09:12 - 00000000 ____D C:\Program Files (x86)\7-Zip
2016-06-20 00:22 - 2011-01-03 16:03 - 00000000 ____D C:\ProfiBiznesAdmin
2016-06-20 00:22 - 2010-12-22 13:56 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-06-20 00:19 - 2010-12-30 15:15 - 00000000 ____D C:\PB_install
2016-06-20 00:17 - 2015-11-06 16:47 - 00000000 ____D C:\MP
2016-06-20 00:07 - 2012-09-04 12:18 - 00000000 ____D C:\BackupBazy
2016-06-20 00:07 - 2011-10-03 12:06 - 00000000 ____D C:\dbu
2016-06-20 00:04 - 2013-03-16 09:34 - 00000000 ____D C:\8ac5935e028291f32075e4
2016-06-17 08:53 - 2013-03-16 09:56 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-17 08:53 - 2013-03-16 09:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-17 08:53 - 2013-03-16 09:56 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-16 17:50 - 2012-08-30 10:45 - 00003580 _____ C:\Windows\System32\Tasks\Generator DMP
2016-06-16 17:45 - 2010-12-30 15:05 - 00000000 ____D C:\MotoProfil
2016-06-15 22:40 - 2010-12-22 13:58 - 00484008 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-06-04 12:08 - 2016-03-18 06:37 - 00000000 ____D C:\Users\ASPNET\AppData\Local\Google
2016-05-24 09:01 - 2010-12-27 14:32 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\SQL Developer
2016-05-24 08:17 - 2009-07-14 07:07 - 00000000 ____D C:\Windows\system32\ServerManager

==================== Pliki w katalogu głównym wybranych folderów =======

2016-06-20 00:26 - 2016-06-20 00:26 - 0436144 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistMSI5F06.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0448512 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistMSI6035.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0012046 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistUI5C4D.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0012078 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistUI5C71.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0018126 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistUI5F06.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0018126 _____ () C:\Users\Administrator\AppData\Local\dd_vcredistUI6035.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0000276 _____ () C:\Users\Administrator\AppData\Local\resmon.resmoncfg.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS
2016-06-20 00:26 - 2016-06-20 00:26 - 0000294 _____ () C:\Users\Administrator\AppData\Local\setup.txt.id-E842183D.{mailrepa.lotos@aol.com}.CrySiS

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-17 00:26

==================== Koniec  FRST.txt ============================