Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-08-2016 01
Uruchomiony przez DELL (administrator)  DELL-KOMPUTER (24-08-2016 09:27:55)
Uruchomiony z C:\Users\DELL\Downloads
Załadowane profile: DELL (Dostępne profile: DELL)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Program Files (x86)\Intel\AMT\atchksrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Dynamsoft Corporation) C:\Windows\SysWOW64\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(Dynamsoft Corporation) C:\Windows\SysWOW64\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Dynamsoft Corporation) C:\Windows\SysWOW64\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel) C:\Program Files (x86)\Intel\AMT\LMS.exe
(Intel) C:\Program Files (x86)\Intel\AMT\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\AMT\atchk.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\hp laserjet m2727\hppfaxprintersrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(HP) C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
() C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [atchk] => C:\Program Files (x86)\Intel\AMT\atchk.exe [401408 2009-12-01] (Intel Corporation)
HKLM\...\Run: [HP LaserJet M2727 MFP Series Fax] => C:\Program Files (x86)\HP\hp LaserJet M2727\hppfaxprintersrv.exe [3700736 2009-09-22] (Hewlett-Packard Company)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1314816 2009-04-23] (Analog Devices, Inc.)
HKLM-x32\...\Run: [ToolBoxFX] => C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe [53248 2010-01-27] (HP)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49152 2005-02-16] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [HPUsageTracking] => C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [36864 2007-08-31] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-07-29] (Disc Soft Ltd)
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\...\Run: [GoogleChromeAutoLaunch_4061A3059D27C63A84FB99ECD0D22755] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [961352 2016-08-03] (Google Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{30FD7FC0-74E8-4210-BD15-266DE09F6EC8}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{70640AA4-4E46-403B-9A00-228DB580ED61}: [DhcpNameServer] 8.8.8.8 0.0.0.0
ManualProxies: 

Internet Explorer:
==================
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1989210340-3911846332-1639053692-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1989210340-3911846332-1639053692-1000 -> DefaultScope {ielnksrch} URL = hxxp://www.bing.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1989210340-3911846332-1639053692-1000 -> {ielnksrch} URL = hxxp://www.bing.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-08-10] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-08-10] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-07] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-08-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-07] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-10] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-10] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\DELL\AppData\Roaming\Profiles\cos3fthz.default
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-22] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1989210340-3911846332-1639053692-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\DELL\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Extension: Brak nazwy - C:\Program Files (x86)\Mozilla Firefox\browser\features\googletestNT@mozillaonline.com [nie znaleziono]

Chrome: 
=======
CHR HomePage: ghiqerghtquqoleatuzuch -> hxxp://onet.pl/
CHR StartupUrls: ghiqerghtquqoleatuzuch -> "hxxp://onet.pl/"
CHR Profile: C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-22]
CHR Extension: (Ban Checker for Steam) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\canbadmphamemnmdfngmcabnjmjgaiki [2016-06-28]
CHR Extension: (Foxtab Speed Dial) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchmpbaclbiioedakpcldenooikekokm [2016-05-09]
CHR Extension: (Tpay.com) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmbhnokcfchfkdgechgkhcfekdfpdjld [2016-06-16]
CHR Extension: (Arkusze Google) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-07]
CHR Extension: (AdBlock) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-02]
CHR Extension: (YouTube) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\gljmkepedihfojjfmjambblgjemocehi [2016-05-09]
CHR Extension: (IE Tab) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2016-08-05]
CHR Extension: (YouTube) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijoffpmfcdnncgblkdnobhomnjnkofdm [2016-05-09]
CHR Extension: (Speed Dial 2) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik [2016-05-31]
CHR Extension: (Google Search) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpjmkngecpnnajkmdhplmeoelenkpgk [2016-05-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-07]
CHR Extension: (Gmail) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-07]
CHR Extension: (Chrome Media Router) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-17]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 atchksrv; C:\Program Files (x86)\Intel\AMT\atchksrv.exe [176128 2009-12-01] (Intel Corporation) [Brak podpisu cyfrowego]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950856 2016-07-25] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-07-29] (Disc Soft Ltd)
R2 Dynamsoft WebTWAIN Service; C:\Windows\SysWOW64\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe [1347088 2015-08-31] (Dynamsoft Corporation)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-11-12] (HP) [Brak podpisu cyfrowego]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-03-11] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24376 2015-06-30] (Hewlett-Packard Company)
R2 LMS; C:\Program Files (x86)\Intel\AMT\LMS.exe [102400 2009-12-01] (Intel) [Brak podpisu cyfrowego]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2015-10-30] (HP Inc.) [Brak podpisu cyfrowego]
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-07-23] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2015-10-30] (HP Inc.) [Brak podpisu cyfrowego]
R2 UNS; C:\Program Files (x86)\Intel\AMT\UNS.exe [2519040 2009-12-01] (Intel) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-08-18] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-08-18] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-18] (Malwarebytes)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVCx32: HpSvc -> Brak ścieżki do pliku.

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-24 09:17 - 2016-08-24 09:17 - 00012762 _____ C:\Users\DELL\Downloads\Fixlog.txt
2016-08-24 09:16 - 2016-08-24 09:16 - 00004905 _____ C:\Users\DELL\Desktop\fixlist.txt
2016-08-24 09:16 - 2016-08-24 09:16 - 00000000 _____ C:\Users\DELL\Desktop\Nowy dokument tekstowy (2).txt
2016-08-22 10:58 - 2016-08-22 11:01 - 00000000 ____D C:\Program Files (x86)\Debugging Tools for Windows (x86)
2016-08-22 10:58 - 2016-08-22 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugging Tools for Windows (x86)
2016-08-22 10:56 - 2016-08-22 10:57 - 17811456 _____ C:\Users\DELL\Downloads\dbg_x86_6.11.1.402.msi
2016-08-22 10:51 - 2016-08-22 10:51 - 00277824 _____ C:\Windows\Minidump\082216-25927-01.dmp
2016-08-22 10:51 - 2016-08-22 10:51 - 00000000 ____D C:\Windows\Minidump
2016-08-22 10:50 - 2016-08-22 10:50 - 611823318 _____ C:\Windows\MEMORY.DMP
2016-08-22 09:42 - 2016-08-22 09:39 - 00048522 _____ C:\Users\DELL\Desktop\FRST.txt
2016-08-22 09:42 - 2016-08-22 09:39 - 00034085 _____ C:\Users\DELL\Desktop\Shortcut.txt
2016-08-22 09:42 - 2016-08-22 09:39 - 00027135 _____ C:\Users\DELL\Desktop\Addition.txt
2016-08-22 09:37 - 2016-08-22 09:37 - 00000000 ____D C:\Users\DELL\Downloads\FRST-OlderVersion
2016-08-22 09:35 - 2016-08-22 11:22 - 00002477 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-22 09:34 - 2016-08-24 09:19 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-22 09:34 - 2016-08-22 10:47 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-22 09:34 - 2016-08-22 09:42 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-22 09:34 - 2016-08-22 09:42 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-18 15:10 - 2016-08-18 15:10 - 00000504 _____ C:\Users\DELL\Downloads\KEY - licencyjny (1).txt
2016-08-18 13:26 - 2016-08-18 13:26 - 00000504 _____ C:\Users\DELL\Downloads\KEY - licencyjny.txt
2016-08-18 11:55 - 2016-08-18 11:55 - 00036201 _____ C:\Users\DELL\Downloads\Shortcut (1).txt
2016-08-18 11:50 - 2016-08-22 09:39 - 00034085 _____ C:\Users\DELL\Downloads\Shortcut.txt
2016-08-18 11:50 - 2016-08-22 09:39 - 00027135 _____ C:\Users\DELL\Downloads\Addition.txt
2016-08-18 11:49 - 2016-08-24 09:28 - 00015444 _____ C:\Users\DELL\Downloads\FRST.txt
2016-08-18 11:46 - 2016-08-22 10:06 - 00047223 _____ C:\Users\DELL\Desktop\gmer.txt
2016-08-18 11:38 - 2016-08-24 09:27 - 00000000 ____D C:\FRST
2016-08-18 11:38 - 2016-08-18 11:38 - 00380928 _____ C:\Users\DELL\Downloads\g0l6xwkh.exe
2016-08-18 11:37 - 2016-08-22 09:37 - 02396672 _____ (Farbar) C:\Users\DELL\Downloads\FRST64.exe
2016-08-18 11:18 - 2016-08-18 11:18 - 03784256 _____ C:\Users\DELL\Downloads\adwcleaner_6.000.exe
2016-08-18 11:09 - 2016-08-18 11:09 - 03784256 _____ C:\Users\DELL\Downloads\adwcleaner.pl 6.000.exe
2016-08-18 10:48 - 2016-08-18 10:48 - 00000000 ____D C:\Users\DELL\AppData\Local\Disc_Soft_Ltd
2016-08-18 10:17 - 2016-08-18 10:17 - 01448809 _____ (DOSBox Team) C:\Users\DELL\Downloads\DOSBox0.74-win32-installer.exe
2016-08-18 10:17 - 2016-08-18 10:17 - 00001922 _____ C:\Users\Public\Desktop\DOSBox 0.74.lnk
2016-08-18 10:17 - 2016-08-18 10:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
2016-08-18 10:17 - 2016-08-18 10:17 - 00000000 ____D C:\Program Files (x86)\DOSBox-0.74
2016-08-18 10:03 - 2016-08-18 10:03 - 00000000 ____D C:\Program Files\3DO Games Decathlon
2016-08-18 10:01 - 2016-08-18 10:01 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-08-18 10:00 - 2016-08-18 10:00 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-08-18 09:59 - 2016-08-22 09:08 - 00000000 ____D C:\Users\DELL\AppData\Roaming\DAEMON Tools Lite
2016-08-18 09:59 - 2016-08-18 10:01 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-08-18 09:59 - 2016-08-18 10:00 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-08-18 09:59 - 2016-08-18 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-08-18 09:58 - 2016-08-18 09:58 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-08-18 09:54 - 2016-08-18 09:54 - 00692072 _____ (Disc Soft Ltd.) C:\Users\DELL\Downloads\DTLiteInstaller.exe
2016-08-18 09:50 - 2016-08-18 09:50 - 00000000 ____D C:\Users\DELL\AppData\Roaming\WinRAR
2016-08-18 09:50 - 2016-08-18 09:50 - 00000000 ____D C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-18 09:50 - 2016-08-18 09:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-18 09:50 - 2016-08-18 09:50 - 00000000 ____D C:\Program Files\WinRAR
2016-08-18 09:49 - 2016-08-18 09:49 - 02036960 _____ C:\Users\DELL\Downloads\winrar-x64-531pl.exe
2016-08-17 16:50 - 2016-08-17 16:50 - 00186994 _____ C:\Users\DELL\Documents\cc_20160817_165023.reg
2016-08-17 16:33 - 2016-08-17 16:33 - 00250912 _____ C:\Windows\SysWOW64\kz.exe
2016-08-17 16:26 - 2016-08-22 11:22 - 00002465 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-17 15:26 - 2016-08-18 15:09 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-17 15:25 - 2016-08-17 16:26 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-17 15:25 - 2016-08-17 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-17 15:25 - 2016-08-17 15:25 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-17 15:25 - 2016-08-17 15:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-17 15:25 - 2016-08-17 15:22 - 22851472 ____N (Malwarebytes ) C:\Users\DELL\Desktop\mbam-setup-cnet.35891-2.2.1.1043.exe
2016-08-17 15:25 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-08-17 15:25 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-08-17 15:25 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-08-17 15:16 - 2016-08-17 16:26 - 00000866 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-08-17 15:16 - 2016-08-17 15:16 - 00002798 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-08-17 15:16 - 2016-08-17 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-08-17 15:16 - 2016-08-17 15:16 - 00000000 ____D C:\Program Files\CCleaner
2016-08-17 15:15 - 2016-08-17 15:14 - 08227032 ____N (Piriform Ltd) C:\Users\DELL\Desktop\ccsetup521.exe
2016-08-17 14:44 - 2016-08-17 14:44 - 00040804 _____ C:\Users\DELL\Downloads\[kat.host].torrent
2016-08-17 12:51 - 2016-08-17 12:51 - 00096376 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (19).pdf
2016-08-17 12:34 - 2016-08-17 12:34 - 01036330 _____ C:\Users\DELL\Downloads\aasa_documents_signing_example (4).pdf
2016-08-17 12:34 - 2016-08-17 12:34 - 00223604 _____ C:\Users\DELL\Downloads\contract-274339-ASAG-FINES-2016.pdf
2016-08-17 12:32 - 2016-08-17 12:32 - 00030896 _____ C:\Users\DELL\Downloads\statement_customers-274339-ASAG-FINES-2016.pdf
2016-08-17 09:10 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-17 09:10 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-16 12:21 - 2016-08-16 12:21 - 00781370 _____ C:\Users\DELL\Downloads\msg_1_13_sms_365_podstawowe_informacje. (2).pdf
2016-08-16 11:34 - 2016-08-16 11:34 - 00096023 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (18).pdf
2016-08-16 11:18 - 2016-08-16 11:18 - 00096003 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (17).pdf
2016-08-16 10:57 - 2016-08-16 10:57 - 02080904 _____ C:\Users\DELL\Downloads\contract-25563-MSG-FINES-2016 (2).pdf
2016-08-16 10:50 - 2016-08-16 10:50 - 00781370 _____ C:\Users\DELL\Downloads\msg_1_13_sms_365_podstawowe_informacje. (1).pdf
2016-08-16 10:35 - 2016-08-16 10:35 - 02080904 _____ C:\Users\DELL\Downloads\contract-25563-MSG-FINES-2016 (1).pdf
2016-08-16 10:35 - 2016-08-16 10:35 - 01351967 _____ C:\Users\DELL\Downloads\msg_documents_signing_example (1).pdf
2016-08-16 10:34 - 2016-08-16 10:34 - 00800784 _____ C:\Users\DELL\Downloads\Wniosek (1).pdf
2016-08-16 10:31 - 2016-08-16 10:31 - 00781370 _____ C:\Users\DELL\Downloads\msg_1_13_sms_365_podstawowe_informacje..pdf
2016-08-16 10:29 - 2016-08-16 10:29 - 02080916 _____ C:\Users\DELL\Downloads\contract-25563-MSG-FINES-2016.pdf
2016-08-16 10:20 - 2016-08-16 10:20 - 00800784 _____ C:\Users\DELL\Downloads\Wniosek.pdf
2016-08-16 10:15 - 2016-08-16 10:15 - 01351967 _____ C:\Users\DELL\Downloads\msg_documents_signing_example.pdf
2016-08-10 14:52 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-10 14:52 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-10 14:52 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-10 14:52 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-10 14:52 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-10 14:52 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-10 14:52 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-10 14:52 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-10 14:52 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-10 14:52 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-10 14:52 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-10 14:52 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-10 14:52 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-10 14:52 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-10 14:52 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-10 14:52 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-10 14:52 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-10 14:52 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-10 14:52 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-10 14:52 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-10 14:52 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-10 14:52 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-10 14:52 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-10 14:52 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-10 14:52 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-10 14:52 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-10 14:52 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-10 14:52 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-10 14:52 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-10 14:52 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-10 14:52 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-10 14:52 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-10 14:52 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-10 14:52 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-10 14:52 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-10 14:52 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-10 14:52 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-10 14:52 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-10 14:52 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-10 14:52 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-10 14:52 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-10 14:52 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-10 14:52 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-10 14:52 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-10 14:52 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-10 14:52 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-10 14:52 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-10 14:52 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-10 14:52 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-10 14:52 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-10 14:52 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-10 14:52 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-10 14:52 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-10 14:52 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-10 14:52 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-10 14:52 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-10 14:52 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-10 14:52 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-10 14:52 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-10 14:52 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-10 14:52 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-10 14:52 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-10 14:52 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-10 14:52 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-10 14:52 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-10 14:52 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-10 14:52 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-10 14:52 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-10 14:52 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-10 14:52 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-10 14:52 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-10 14:52 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-10 14:52 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-10 14:52 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-10 14:52 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-10 14:52 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-10 14:52 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-10 14:52 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-10 14:52 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-10 14:52 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-10 14:51 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-10 14:17 - 2016-08-10 14:17 - 00095849 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (16).pdf
2016-08-10 13:59 - 2016-08-10 13:59 - 00096031 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (15).pdf
2016-08-10 13:55 - 2016-08-10 13:55 - 00096009 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (14).pdf
2016-08-08 15:40 - 2016-08-08 15:40 - 00718698 _____ C:\Users\DELL\Downloads\hpg_1_6_hapi_-_podstawowe_informacje.pdf
2016-08-08 14:36 - 2016-08-08 14:36 - 00657822 _____ C:\Users\DELL\Downloads\Wzór_podpisywania_umowy.pdf
2016-08-08 14:36 - 2016-08-08 14:36 - 00456518 _____ C:\Users\DELL\Downloads\8272-HPG-FINES-2016-umowa.pdf
2016-08-08 13:44 - 2016-08-08 13:44 - 00031016 _____ C:\Users\DELL\Downloads\8272-HPG-FINES-2016-oświadczenie_fines.pdf
2016-08-08 13:44 - 2016-08-08 13:44 - 00029438 _____ C:\Users\DELL\Downloads\8272-HPG-FINES-2016-oswiadczenie.pdf
2016-08-08 13:29 - 2016-08-08 13:29 - 00253165 _____ C:\Users\DELL\Downloads\Wzór_podpisywania_zalacznika_nr.3.pdf
2016-08-08 13:29 - 2016-08-08 13:29 - 00029464 _____ C:\Users\DELL\Downloads\8258-HPG-FINES-2016-oswiadczenie.pdf
2016-08-04 13:25 - 2016-08-04 13:25 - 01158744 _____ C:\Users\DELL\Downloads\documents_signing_example_first (4).pdf
2016-08-04 13:24 - 2016-08-04 13:24 - 00387763 _____ C:\Users\DELL\Downloads\scan_1470309845269_0001.pdf
2016-08-04 13:24 - 2016-08-04 13:24 - 00387763 _____ C:\Users\DELL\Desktop\scan_1470309845269_0001.pdf
2016-08-04 13:22 - 2016-08-04 13:22 - 01158744 _____ C:\Users\DELL\Downloads\documents_signing_example_first (3).pdf
2016-08-04 13:21 - 2016-08-04 13:21 - 00331731 _____ C:\Users\DELL\Downloads\application_customer_form-66049-VSG-FINES-2016.pdf
2016-08-04 13:19 - 2016-08-04 13:19 - 00092666 _____ C:\Users\DELL\Downloads\scan_1470308420004_0001 (1).pdf
2016-08-04 13:19 - 2016-08-04 13:19 - 00092666 _____ C:\Users\DELL\Desktop\scan_1470308420004_0001.pdf
2016-08-04 13:19 - 2016-08-04 13:19 - 00088677 _____ C:\Users\DELL\Desktop\scan_1470308371335_0001.pdf
2016-08-04 13:18 - 2016-08-04 13:18 - 00088677 _____ C:\Users\DELL\Downloads\scan_1470308371335_0001 (2).pdf
2016-08-04 13:04 - 2016-08-04 13:04 - 00092666 _____ C:\Users\DELL\Downloads\scan_1470308420004_0001.pdf
2016-08-04 13:04 - 2016-08-04 13:04 - 00088677 _____ C:\Users\DELL\Downloads\scan_1470308371335_0001 (1).pdf
2016-08-04 13:02 - 2016-08-04 13:02 - 00088677 _____ C:\Users\DELL\Downloads\scan_1470308371335_0001.pdf
2016-08-04 12:57 - 2016-08-04 12:57 - 00030656 _____ C:\Users\DELL\Downloads\statement_customers-66049-VSG-FINES-2016.pdf
2016-08-03 15:13 - 2016-08-03 15:13 - 00096053 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_5) (11).pdf
2016-08-03 10:59 - 2016-08-03 10:59 - 00771950 _____ C:\Users\DELL\Downloads\faktura_2016-08-01_133829 (1).pdf
2016-08-03 10:58 - 2016-08-03 10:58 - 00771950 _____ C:\Users\DELL\Downloads\faktura_2016-08-01_133829.pdf
2016-08-02 13:26 - 2016-08-02 13:26 - 00674461 _____ C:\Users\DELL\Downloads\hpg_1_5_hapi_-_podstawowe_informacje.pdf
2016-08-02 10:26 - 2016-08-02 10:26 - 00096144 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_5) (10).pdf
2016-08-01 13:22 - 2016-08-01 13:22 - 01036330 _____ C:\Users\DELL\Downloads\aasa_documents_signing_example (3).pdf
2016-08-01 13:19 - 2016-08-01 13:19 - 00227986 _____ C:\Users\DELL\Downloads\contract-256525-ASAG-FINES-2016.pdf
2016-08-01 13:17 - 2016-08-01 13:17 - 00030934 _____ C:\Users\DELL\Downloads\statement_customers-256525-ASAG-FINES-2016.pdf
2016-08-01 11:34 - 2016-08-01 11:34 - 00095900 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (13).pdf
2016-07-28 14:03 - 2016-07-28 14:03 - 00000000 _____ C:\Users\DELL\Desktop\Nowy obraz mapy bitowej (3).bmp
2016-07-26 13:44 - 2016-08-24 09:27 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-26 13:44 - 2016-07-26 13:44 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-07-26 13:44 - 2016-07-26 13:44 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-26 13:44 - 2016-07-26 13:44 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-07-26 13:34 - 2016-07-26 13:34 - 00000000 ____D C:\ProgramData\GeoComply
2016-07-25 16:19 - 2016-07-25 16:19 - 00030602 _____ C:\Users\DELL\Downloads\statement_customers-97027-TKG-FINES-2016.pdf
2016-07-25 16:07 - 2016-07-25 16:07 - 00095957 _____ C:\Users\DELL\Downloads\Umowa Chwilówki_(copy_4) (12).pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-24 09:27 - 2009-07-14 06:45 - 00027728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-24 09:27 - 2009-07-14 06:45 - 00027728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-24 09:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-24 09:17 - 2014-05-27 10:23 - 00001168 _____ C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-08-22 10:42 - 2016-05-05 15:42 - 00000270 _____ C:\Windows\Tasks\{5C7C831D-1DFC-FB63-E76B-389191C4B849}.job
2016-08-22 09:42 - 2016-05-11 16:42 - 00000103 _____ C:\Users\DELL\AppData\Roaming\WB.CFG
2016-08-22 09:35 - 2016-05-07 13:59 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-22 09:29 - 2016-05-05 15:58 - 00000000 ____D C:\AdwCleaner
2016-08-22 09:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-08-18 15:47 - 2016-05-09 09:11 - 01641276 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-08-18 15:47 - 2011-02-04 19:20 - 00740196 _____ C:\Windows\system32\perfh015.dat
2016-08-18 15:47 - 2011-02-04 19:20 - 00155770 _____ C:\Windows\system32\perfc015.dat
2016-08-18 15:47 - 2009-07-14 07:13 - 01641276 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-18 11:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration
2016-08-17 16:49 - 2016-05-09 10:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-17 16:28 - 2016-05-13 14:07 - 00002403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-08-17 16:28 - 2016-05-11 13:20 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-08-17 16:28 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-08-17 16:28 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-08-17 16:27 - 2016-05-13 14:30 - 00002206 _____ C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-08-17 16:26 - 2016-05-11 13:20 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-08-17 16:26 - 2016-05-05 17:53 - 00001065 _____ C:\Users\DELL\Desktop\Skanowanie.lnk
2016-08-17 16:26 - 2014-05-27 10:40 - 00001198 _____ C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
2016-08-17 16:22 - 2016-05-05 15:57 - 00000000 ____D C:\Users\DELL\AppData\Local\ResurrectedLatched
2016-08-17 15:17 - 2014-05-27 10:47 - 00000000 ____D C:\Windows\Panther
2016-08-16 10:58 - 2016-05-05 17:49 - 00000000 ____D C:\Users\DELL\Desktop\skany
2016-08-11 09:17 - 2009-07-14 06:45 - 00522168 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-10 09:53 - 2016-05-13 14:02 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-10 09:49 - 2016-05-13 13:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-02 16:51 - 2016-05-11 09:21 - 00000000 ____D C:\Program Files (x86)\PokerStars.EU
2016-08-02 09:24 - 2016-05-11 09:22 - 00000000 ____D C:\Users\DELL\AppData\Local\PokerStars.EU
2016-07-28 14:59 - 2016-05-31 09:37 - 00000000 ___RD C:\Users\DELL\Documents\Scanned Documents
2016-07-26 13:43 - 2016-05-07 14:02 - 00000000 ____D C:\Users\DELL\AppData\Local\Adobe
2016-07-26 13:43 - 2016-05-05 15:57 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-26 13:43 - 2016-05-05 15:57 - 00000000 ____D C:\Windows\system32\Macromed

==================== Pliki w katalogu głównym wybranych folderów =======

2010-08-28 22:43 - 2010-08-28 22:43 - 0096256 ____N (Google, inc) C:\Users\DELL\AppData\Roaming\AdbWinApi.dll
2010-08-28 22:43 - 2010-08-28 22:43 - 0060928 ____N (Google, inc) C:\Users\DELL\AppData\Roaming\AdbWinUsbApi.dll
2016-05-11 16:42 - 2016-08-22 09:42 - 0000103 _____ () C:\Users\DELL\AppData\Roaming\WB.CFG
2016-05-05 17:39 - 2016-05-05 17:46 - 0000332 _____ () C:\ProgramData\hpzinstall.log

Pliki do przeniesienia lub usunięcia:
====================
C:\Windows\Tasks\{5C7C831D-1DFC-FB63-E76B-389191C4B849}.job


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll
[2011-04-13 17:25] - [2011-04-13 17:25] - 0357888 ____N (Microsoft Corporation) 3E6E0400094FED8E07299D515E918EEC

C:\Windows\SysWOW64\dnsapi.dll
[2011-04-13 17:25] - [2011-04-13 17:25] - 0270336 ____N (Microsoft Corporation) BA412CC81129FFF70C01308222BC5303

C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-12 10:13

==================== Koniec  FRST.txt ============================