Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 18-07-2016 Uruchomiony przez GALA (administrator) RECEPCJA (19-07-2016 14:52:21) Uruchomiony z C:\Users\GALA\Downloads Załadowane profile: GALA & Biuro (Dostępne profile: GALA & Biuro & Administrator & DefaultAppPool) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe (Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe (Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe (Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Comp S.A.) C:\Program Files\Novitus\SOHO\FISKSERV.exe (Comp S.A.) C:\Program Files\Novitus\SOHO\Slican.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Desktop.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463080 2012-01-16] (Realtek Semiconductor) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2011-12-16] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2238361084-2985199460-1943500991-1006\...\Run: [luGVx3jKo] => rundll32.exe C:\Users\Biuro\AppData\Roaming\94A1.tmp k6Kd0Yh6G8fgt00v ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\..\Interfaces\{B3E3CCFC-A4BE-43B5-9432-19CD292A7EB8}: [DhcpNameServer] 192.168.10.1 Tcpip\..\Interfaces\{DA77ED33-F712-4D9E-B381-C1051EBA819E}: [NameServer] 192.168.10.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-2238361084-2985199460-1943500991-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2238361084-2985199460-1943500991-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-2238361084-2985199460-1943500991-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki HKU\S-1-5-21-2238361084-2985199460-1943500991-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/ FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-15] () FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-15] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) Chrome: ======= CHR StartupUrls: Profile 2 -> "hxxp://google.pl/" CHR Profile: C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08] CHR Extension: (Google Drive) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-08] CHR Extension: (YouTube) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-08] CHR Extension: (Google Search) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-07] CHR Extension: (Google Wallet) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-11] CHR Extension: (Gmail) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-07] CHR Profile: C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2 CHR Extension: (Dokumenty Google) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-16] CHR Extension: (Dysk Google) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23] CHR Extension: (YouTube) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Adblock Plus) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-03] CHR Extension: (Google Search) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29] CHR Extension: (Dokumenty Google offline) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Auto Replay for YouTube™) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2015-06-12] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02] CHR Extension: (Gmail) - C:\Users\GALA\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2016-03-11] (Dell Inc.) R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2016-03-11] (Dell Inc.) R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [Brak podpisu cyfrowego] R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [Brak podpisu cyfrowego] R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [61916000 2011-04-24] (Microsoft Corporation) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego] R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation) R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [51824 2016-01-21] (Microsoft) R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego] S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [428384 2011-04-24] (Microsoft Corporation) R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31928 2016-04-22] (Dell Inc.) S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-12] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [32464 2015-09-11] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 HPEWSFXBULK; C:\Windows\System32\drivers\hpfx64bulk.sys [20504 2009-02-26] (Hewlett Packard) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation) R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation) U3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-07-19 14:52 - 2016-07-19 14:53 - 00013587 _____ C:\Users\GALA\Downloads\FRST.txt 2016-07-19 14:50 - 2016-07-19 14:52 - 00000000 ____D C:\FRST 2016-07-19 14:50 - 2016-07-19 14:50 - 00380928 _____ C:\Users\GALA\Downloads\vx451ymj.exe 2016-07-19 14:49 - 2016-07-19 14:50 - 02391552 _____ (Farbar) C:\Users\GALA\Downloads\FRST64.exe 2016-07-19 13:56 - 2016-07-19 13:56 - 02870984 _____ (ESET) C:\Users\GALA\Downloads\esetsmartinstaller_plk.exe 2016-07-19 13:56 - 2016-07-19 13:56 - 00000000 ____D C:\Program Files (x86)\ESET 2016-07-19 13:35 - 2016-07-19 13:35 - 00026936 _____ C:\ComboFix.txt 2016-07-19 13:23 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2016-07-19 13:23 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2016-07-19 13:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2016-07-19 13:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2016-07-19 13:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2016-07-19 13:23 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2016-07-19 13:23 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2016-07-19 13:23 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2016-07-19 13:17 - 2016-07-19 13:35 - 00000000 ____D C:\Qoobox 2016-07-19 13:17 - 2016-07-19 13:33 - 00000000 ____D C:\Windows\erdnt 2016-07-19 13:15 - 2016-07-19 13:16 - 05659291 ____R (Swearware) C:\Users\GALA\Downloads\ComboFix.exe 2016-07-19 12:51 - 2016-07-19 12:51 - 00000000 ____D C:\Users\GALA\AppData\Local\AvgSetupLog 2016-07-19 12:41 - 2016-07-19 12:41 - 00001176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7 Host.lnk 2016-07-19 12:41 - 2016-07-19 12:41 - 00001164 _____ C:\Users\Public\Desktop\PROSZE NIE USUWAC TV W WERSJI 7.lnk 2016-07-19 12:39 - 2016-07-19 12:39 - 04689584 _____ (TeamViewer) C:\Users\Administrator\Downloads\TeamViewer_Host_Setup.exe 2016-07-19 12:39 - 2016-07-19 12:39 - 04689584 _____ (TeamViewer) C:\Users\Administrator\Desktop\TeamViewer_Host_Setup.exe 2016-07-19 12:07 - 2016-07-19 12:55 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-07-19 12:07 - 2016-07-19 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-07-19 12:07 - 2016-07-19 12:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-07-19 12:07 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-07-19 12:07 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-07-19 12:07 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-07-19 12:05 - 2016-07-19 12:06 - 22851472 _____ (Malwarebytes ) C:\Users\Administrator\Downloads\mbam-setup-2.2.1.1043.exe 2016-07-19 12:04 - 2016-07-19 12:05 - 05659291 _____ (Swearware) C:\Users\Administrator\Downloads\ComboFix.exe 2016-07-19 12:03 - 2016-07-19 12:03 - 00002119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2016-07-19 12:03 - 2016-07-19 12:03 - 00001912 _____ C:\Windows\epplauncher.mif 2016-07-19 12:03 - 2016-07-19 12:03 - 00000000 ____D C:\Program Files\Microsoft Security Client 2016-07-19 12:03 - 2016-07-19 12:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2016-07-19 11:59 - 2016-07-19 11:59 - 00000000 ____D C:\Users\Administrator\AppData\Local\MFAData 2016-07-19 11:58 - 2016-07-19 11:59 - 00000000 ____D C:\Users\Administrator\AppData\Local\AvgSetupLog 2016-07-19 11:58 - 2016-07-19 11:58 - 14346432 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\MSEInstall.exe 2016-07-19 11:48 - 2016-07-19 11:48 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVG 2016-07-19 11:46 - 2016-07-19 11:46 - 00001432 _____ C:\Users\Administrator\Desktop\Soho.lnk 2016-07-19 11:46 - 2016-07-19 11:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\WinRAR 2016-07-19 11:45 - 2016-07-19 12:43 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TeamViewer 2016-07-19 11:44 - 2016-07-19 11:44 - 00115304 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2016-07-19 11:44 - 2016-07-19 11:44 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Intel Corporation 2016-07-19 11:43 - 2016-07-19 11:43 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-07-19 11:43 - 2016-07-19 11:43 - 00000000 ___RD C:\Users\Administrator\Virtual Machines 2016-07-19 11:43 - 2016-07-19 11:43 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2016-07-19 11:43 - 2016-07-19 11:43 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google 2016-07-19 11:43 - 2016-07-19 11:43 - 00000000 ____D C:\Users\Administrator\AppData\Local\Avg 2016-07-19 11:42 - 2016-07-19 11:43 - 00000000 ____D C:\Users\Administrator 2016-07-19 11:42 - 2016-07-19 11:42 - 00000020 ___SH C:\Users\Administrator\ntuser.ini 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Ustawienia lokalne 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Szablony 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Moje dokumenty 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Menu Start 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Documents\Moje wideo 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Documents\Moje obrazy 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Documents\Moja muzyka 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\Dane aplikacji 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Historia 2016-07-19 11:42 - 2016-07-19 11:42 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Dane aplikacji 2016-07-19 11:42 - 2016-02-14 08:23 - 00000000 ____D C:\Users\Administrator\AppData\Local\SoftThinks 2016-07-19 11:42 - 2016-02-09 19:16 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TuneUp Software 2016-07-19 11:42 - 2014-07-15 15:17 - 00000000 ____D C:\Users\Administrator\Documents\Visual Studio 2008 2016-07-19 11:42 - 2014-07-15 15:05 - 00000000 ____D C:\Users\Administrator\Documents\Visual Studio 2005 2016-07-19 11:42 - 2014-07-15 15:05 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help 2016-07-19 11:42 - 2010-11-21 09:16 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Media Center Programs 2016-07-19 10:51 - 2016-07-19 10:51 - 03712064 _____ C:\Users\Biuro\Downloads\AdwCleaner.exe 2016-07-19 10:47 - 2016-07-19 10:48 - 31547392 _____ C:\Users\Biuro\Downloads\SOHO_upgrade_2_37.exe 2016-07-19 10:24 - 2016-07-19 10:23 - 02697696 _____ (TeamViewer GmbH) C:\Users\Biuro\Desktop\OPTeam Support.exe 2016-07-19 10:23 - 2016-07-19 10:42 - 00000000 ____D C:\Users\Biuro\AppData\Roaming\TeamViewer 2016-07-19 10:23 - 2016-07-19 10:23 - 02697696 _____ (TeamViewer GmbH) C:\Users\Biuro\Downloads\OPTeam Support.exe 2016-07-19 10:23 - 2016-07-19 10:23 - 02697696 _____ (TeamViewer GmbH) C:\Users\Biuro\Downloads\OPTeam Support (1).exe 2016-07-18 14:21 - 2016-07-18 14:21 - 00070652 _____ C:\Users\GALA\Desktop\oferta weselna kukułka.pdf 2016-07-18 14:20 - 2016-07-18 14:20 - 00070652 _____ C:\Users\GALA\Downloads\oferta weselna.pdf 2016-07-17 01:34 - 2016-07-17 01:34 - 00000000 ____D C:\Users\GALA\AppData\Local\tkdata 2016-07-15 16:24 - 2016-07-15 16:24 - 00014045 _____ C:\Users\Biuro\Downloads\RS_229402_4_20160715162426.pdf 2016-07-15 12:21 - 2016-07-15 12:21 - 01400844 _____ C:\Users\Biuro\Downloads\Podrecznik_Uzytkownika_Systemu_OPP_2014.pdf 2016-07-15 09:00 - 2016-07-15 09:00 - 00000000 ____D C:\Users\Biuro\AppData\Local\CEF 2016-07-15 08:59 - 2016-07-15 09:01 - 00000000 ____D C:\Users\Biuro\AppData\Local\tkdata 2016-07-15 08:57 - 2016-07-19 12:48 - 00000000 ____D C:\Program Files\Common Files\McAfee 2016-07-15 08:57 - 2016-07-18 06:44 - 00000000 ____D C:\Program Files (x86)\McAfee 2016-07-15 08:46 - 2016-07-19 11:56 - 00000000 ____D C:\ProgramData\McAfee 2016-07-15 08:46 - 2016-07-18 08:55 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan 2016-07-14 11:56 - 2016-07-14 14:59 - 00000000 ____D C:\Users\Biuro\AppData\Local\Mozilla Thunderbird 2016-07-13 20:37 - 2016-07-13 20:37 - 00199530 _____ C:\Users\GALA\Downloads\Oferta na imprezy (1).pdf 2016-07-13 20:37 - 2016-07-13 20:37 - 00199530 _____ C:\Users\GALA\Desktop\Oferta na imprezy (1) (1).pdf 2016-07-13 20:35 - 2016-07-13 20:35 - 00199530 _____ C:\Users\GALA\Downloads\Oferta na imprezy.pdf 2016-07-13 08:55 - 2016-06-11 08:57 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-07-13 08:55 - 2016-06-11 06:48 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-07-13 08:55 - 2016-06-10 23:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-07-13 08:55 - 2016-06-10 23:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-07-13 08:55 - 2016-06-10 23:20 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-07-13 08:55 - 2016-06-10 23:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-07-13 08:55 - 2016-06-10 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-07-13 08:55 - 2016-06-10 23:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-07-13 08:55 - 2016-06-10 23:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-07-13 08:55 - 2016-06-10 23:17 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-07-13 08:55 - 2016-06-10 23:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-07-13 08:55 - 2016-06-10 23:08 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-07-13 08:55 - 2016-06-10 23:05 - 25814016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-07-13 08:55 - 2016-06-10 23:04 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-07-13 08:55 - 2016-06-10 23:03 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-07-13 08:55 - 2016-06-10 23:03 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-07-13 08:55 - 2016-06-10 23:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-07-13 08:55 - 2016-06-10 23:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-07-13 08:55 - 2016-06-10 22:53 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-07-13 08:55 - 2016-06-10 22:50 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-07-13 08:55 - 2016-06-10 22:49 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-07-13 08:55 - 2016-06-10 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-07-13 08:55 - 2016-06-10 22:38 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-07-13 08:55 - 2016-06-10 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-07-13 08:55 - 2016-06-10 22:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-07-13 08:55 - 2016-06-10 22:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-07-13 08:55 - 2016-06-10 22:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-07-13 08:55 - 2016-06-10 22:15 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-07-13 08:55 - 2016-06-10 22:13 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-07-13 08:55 - 2016-06-10 22:12 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-07-13 08:55 - 2016-06-10 22:11 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-07-13 08:55 - 2016-06-10 22:10 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-07-13 08:55 - 2016-06-10 21:45 - 15409664 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-07-13 08:55 - 2016-06-10 21:44 - 02869248 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-07-13 08:55 - 2016-06-10 21:30 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-07-13 08:55 - 2016-06-10 21:21 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-07-13 08:55 - 2016-06-10 21:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-07-13 08:55 - 2016-06-10 20:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-07-13 08:55 - 2016-06-10 20:53 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-07-13 08:55 - 2016-06-10 20:53 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-07-13 08:55 - 2016-06-10 20:53 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-07-13 08:55 - 2016-06-10 20:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-07-13 08:55 - 2016-06-10 20:47 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-07-13 08:55 - 2016-06-10 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-07-13 08:55 - 2016-06-10 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-07-13 08:55 - 2016-06-10 20:42 - 20348928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-07-13 08:55 - 2016-06-10 20:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-07-13 08:55 - 2016-06-10 20:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-07-13 08:55 - 2016-06-10 20:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-07-13 08:55 - 2016-06-10 20:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-07-13 08:55 - 2016-06-10 20:32 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-07-13 08:55 - 2016-06-10 20:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-07-13 08:55 - 2016-06-10 20:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-07-13 08:55 - 2016-06-10 20:24 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-07-13 08:55 - 2016-06-10 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-07-13 08:55 - 2016-06-10 20:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-07-13 08:55 - 2016-06-10 20:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-07-13 08:55 - 2016-06-10 20:14 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-07-13 08:55 - 2016-06-10 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-07-13 08:55 - 2016-06-10 20:10 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-07-13 08:55 - 2016-06-10 20:09 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-07-13 08:55 - 2016-06-10 20:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-07-13 08:55 - 2016-06-10 19:58 - 13806080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-07-13 08:55 - 2016-06-10 19:45 - 02392576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-07-13 08:55 - 2016-06-10 19:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-07-13 08:55 - 2016-06-10 19:41 - 01315840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-07-13 08:54 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2016-07-13 08:54 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-07-13 08:54 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2016-07-13 08:54 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2016-07-13 08:54 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2016-07-13 08:54 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2016-07-13 08:54 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2016-07-13 08:54 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe 2016-07-13 08:54 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe 2016-07-13 08:54 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe 2016-07-13 08:54 - 2016-06-14 17:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-07-11 08:22 - 2016-07-11 08:22 - 00063444 _____ C:\Users\Biuro\Downloads\Etykieta_2016-07-11_08-22-53.pdf 2016-07-08 11:56 - 2016-07-08 11:56 - 00011667 _____ C:\Users\Biuro\Downloads\czerwiec zestawienie prac.xlsx 2016-07-08 11:55 - 2016-07-08 11:55 - 00028672 _____ C:\Users\Biuro\Downloads\rachunek czerwiec.xls 2016-07-08 10:52 - 2016-07-08 10:52 - 00011546 _____ C:\Users\GALA\Downloads\Usadzenie gosci (1).xlsx 2016-07-08 10:05 - 2016-07-08 10:05 - 00000000 ____D C:\Users\Biuro\Desktop\sala przeciek 2016-07-07 11:09 - 2016-07-07 11:09 - 00795607 _____ C:\Users\Biuro\Downloads\cvKinga.pdf 2016-07-05 15:48 - 2016-07-14 10:26 - 00000000 ____D C:\Users\Biuro\AppData\Local\Mozilla Firefox 2016-07-04 12:47 - 2016-07-04 12:47 - 00011546 _____ C:\Users\GALA\Downloads\Usadzenie gosci.xlsx 2016-06-27 12:11 - 2016-06-27 12:11 - 00089988 _____ C:\Users\GALA\Downloads\SCENARIUSZ!gotowy (1).odt 2016-06-27 11:41 - 2016-06-27 11:41 - 00089988 _____ C:\Users\GALA\Downloads\SCENARIUSZ!gotowy.odt 2016-06-21 11:53 - 2016-07-19 12:43 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-06-21 11:53 - 2016-06-21 11:53 - 08271224 _____ (TeamViewer) C:\Users\GALA\Desktop\TeamViewer_Host_Setup.exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-07-19 14:46 - 2014-04-07 13:39 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-07-19 13:32 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2016-07-19 13:04 - 2013-12-11 23:43 - 00000000 ____D C:\Temp 2016-07-19 13:03 - 2009-07-14 06:45 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-07-19 13:03 - 2009-07-14 06:45 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-07-19 12:55 - 2011-03-02 12:29 - 00876854 _____ C:\Windows\system32\perfh015.dat 2016-07-19 12:55 - 2011-03-02 12:29 - 00210362 _____ C:\Windows\system32\perfc015.dat 2016-07-19 12:55 - 2009-07-14 07:13 - 02039652 _____ C:\Windows\system32\PerfStringBackup.INI 2016-07-19 12:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-07-19 12:51 - 2015-11-13 20:33 - 00000000 ____D C:\ProgramData\AVG 2016-07-19 12:51 - 2015-11-13 20:33 - 00000000 ____D C:\Program Files (x86)\AVG 2016-07-19 12:50 - 2014-04-07 13:39 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-07-19 12:50 - 2014-01-17 11:49 - 00115304 _____ C:\Users\GALA\AppData\Local\GDIPFONTCACHEV1.DAT 2016-07-19 12:49 - 2013-12-11 23:37 - 00000000 ____D C:\Program Files\Intel 2016-07-19 12:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-07-19 12:49 - 2009-07-14 06:45 - 00437992 _____ C:\Windows\system32\FNTCACHE.DAT 2016-07-19 12:48 - 2016-01-19 12:26 - 00000000 ____D C:\ProgramData\MFAData 2016-07-19 12:48 - 2016-01-19 12:24 - 00000000 ____D C:\Users\Biuro\AppData\Local\Avg 2016-07-19 12:37 - 2014-12-16 12:59 - 00000000 ____D C:\Users\Biuro\AppData\Local\ICSharpCode.net 2016-07-19 12:25 - 2015-11-13 20:30 - 00000000 ____D C:\Program Files (x86)\Opera 2016-07-19 12:23 - 2015-11-13 20:31 - 00000000 ____D C:\Users\GALA\AppData\Roaming\DVDVideoSoft 2016-07-19 12:23 - 2015-05-16 21:29 - 00000000 ____D C:\Windows\system32\appmgmt 2016-07-19 12:01 - 2016-01-19 12:29 - 00000000 ____D C:\$AVG 2016-07-19 11:57 - 2013-12-11 23:40 - 00000000 ____D C:\Program Files (x86)\Dell Wireless 2016-07-19 11:43 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-07-19 11:28 - 2016-03-15 09:31 - 00000000 ____D C:\Users\Biuro\Desktop\zawody 2016 2016-07-19 10:07 - 2014-01-28 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SOHO 2016-07-18 11:23 - 2016-03-26 17:38 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask 2016-07-17 01:34 - 2013-12-12 08:28 - 00000000 ____D C:\Program Files\Common Files\Intel 2016-07-17 01:00 - 2015-03-23 14:19 - 00000000 ____D C:\Users\Biuro\AppData\Local\ElevatedDiagnostics 2016-07-15 08:58 - 2014-06-28 20:13 - 00000000 ____D C:\ProgramData\Package Cache 2016-07-15 08:47 - 2014-07-16 08:41 - 00000000 ____D C:\Users\Biuro\AppData\Local\Adobe 2016-07-15 08:46 - 2013-12-11 23:33 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-07-15 08:46 - 2013-12-11 23:33 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-07-15 08:46 - 2013-12-11 23:33 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2016-07-15 08:46 - 2013-12-11 23:33 - 00000000 ____D C:\Windows\system32\Macromed 2016-07-15 06:45 - 2015-04-06 10:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-07-14 17:17 - 2014-12-23 16:28 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-07-14 10:02 - 2014-04-15 13:34 - 00000000 ____D C:\skany 2016-07-14 07:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-07-14 00:40 - 2014-01-17 12:37 - 00000000 ____D C:\Windows\system32\MRT 2016-07-14 00:31 - 2014-01-17 12:37 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-07-12 07:43 - 2016-02-04 12:15 - 00000000 ____D C:\Users\Biuro\Desktop\wniosek 2016 2016-07-12 07:43 - 2016-01-12 08:52 - 00000000 ____D C:\Users\Biuro\Desktop\oferty 2016-07-12 07:42 - 2016-01-12 08:53 - 00000000 ____D C:\Users\Biuro\Desktop\zlecenia 2016-07-11 09:04 - 2014-07-15 11:54 - 00000000 ____D C:\Users\Biuro\Documents\sprawy firmowe 2016-07-11 08:31 - 2014-07-15 11:34 - 00000000 ____D C:\Users\Biuro\Documents\dokumenty 2016-07-04 10:19 - 2015-07-20 10:17 - 00000000 ____D C:\Users\Biuro\Desktop\zdjęcia przeszkód 2016-07-04 10:19 - 2015-01-16 15:07 - 00000000 ____D C:\Users\Biuro\Desktop\Sprawy Firmowe 2016-06-24 08:07 - 2015-03-19 09:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-06-24 08:07 - 2015-03-19 09:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-06-24 00:38 - 2015-03-19 09:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-06-21 16:59 - 2015-07-06 20:44 - 00019451 _____ C:\Users\GALA\Desktop\Dania dodatkowe.odt 2016-06-21 13:16 - 2014-07-15 11:28 - 00115304 _____ C:\Users\Biuro\AppData\Local\GDIPFONTCACHEV1.DAT 2016-06-21 12:13 - 2010-11-21 05:27 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-06-21 11:53 - 2014-06-28 20:26 - 00000000 ____D C:\Users\GALA\AppData\Roaming\TeamViewer ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-04-12 03:37 - 2015-04-12 03:37 - 0000016 _____ () C:\ProgramData\mntemp ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-07-17 00:13 ==================== Koniec FRST.txt ============================