Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-06-2017 Uruchomiony przez Mateusz_2 (administrator) KOMP-PRZENOSNY (13-06-2017 17:41:20) Uruchomiony z C:\Users\Mateusz_2\Desktop\programy_fixit Załadowane profile: Mateusz_2 & MsDtsServer120 (Dostępne profile: Mateusz_2 & MSSQLFDLauncher$ADMINMSSQL & MSOLAP$ADMINMSSQL & MSSQL$ADMINMSSQL & MsDtsServer120) Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe () C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (IObit) D:\IObit\IObit Uninstaller\IUService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Users\Mateusz_2\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe (Microsoft Corporation) D:\sqlserver\120\DTS\Binn\MsDtsSrvr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe () C:\Windows\SysWOW64\PnkBstrA.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe () D:\Windscribe\WindscribeService.exe (LogMeIn Inc.) D:\Hamachi\x64\hamachi-2.exe (LogMeIn, Inc.) D:\Hamachi\x64\LMIGuardianSvc.exe (Malwarebytes) D:\Anti-Malware\MBAMService.exe (VMware, Inc.) D:\vmware\vmware-authd.exe (LogMeIn Inc.) D:\Hamachi\hamachi-2-ui.exe (LogMeIn, Inc.) D:\Hamachi\LMIGuardianSvc.exe (Malwarebytes) D:\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Flux Software LLC) C:\Users\Mateusz_2\AppData\Local\FluxSoftware\Flux\flux.exe (Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [915160 2014-05-12] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.) HKLM\...\Run: [Shadow Defender Daemon] => C:\Program Files\Shadow Defender\DefenderDaemon.exe [466768 2015-09-07] (SHADOWDEFENDER.COM) HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [Malwarebytes TrayApp] => D:\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] () HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [29246632 2017-05-30] (Dropbox, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [47432 2013-08-15] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [31048 2013-08-15] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PDFHook] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PDF5 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.) HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [1944576 2013-03-07] (Brother Industries, Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [Kryptel Shredder] => D:\kryptel\Shredder.exe [3234504 2014-07-27] (Inv Softworks LLC) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [f.lux] => C:\Users\Mateusz_2\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8944344 2016-09-28] (Piriform Ltd) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [Steam] => D:\steam\steam.exe [3019552 2017-04-26] (Valve Corporation) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [Windscribe] => D:\Windscribe\Windscribe.exe [7948392 2016-12-08] () HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [721504 2015-09-02] (Microsoft Corporation) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [160824 2017-04-20] (BlueStack Systems, Inc.) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\Run: [AshSnap] => D:\przechwytywanie_obrazu\Ashampoo Snap 2017\ashsnap.exe [7881528 2016-04-15] (Ashampoo GmbH & Co. KG) HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\MountPoints2: {298902e8-b920-11e4-8262-f0795918e3f0} - "F:\AUTOEXEC.EXE" HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\MountPoints2: {bd94e3f0-7d5a-11e5-82a6-f0795918e3f0} - "G:\AutoRun.exe" HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\...\MountPoints2: {bd94e428-7d5a-11e5-82a6-f0795918e3f0} - "G:\AutoRun.exe" ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2011-02-04] (Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.) Startup: C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO DECRYPT FILES.txt [2016-02-09] () CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.66.1 Tcpip\..\Interfaces\{4A2C0924-2947-4EF6-AB7C-8668BF877A80}: [DhcpNameServer] 192.168.174.2 Tcpip\..\Interfaces\{A3F19873-16CE-486A-ADF8-17B7673264E7}: [DhcpNameServer] 62.21.99.94 62.21.99.95 Tcpip\..\Interfaces\{D921A3C6-14C6-4BB8-830C-FCA86B81C524}: [DhcpNameServer] 192.168.66.1 Tcpip\..\Interfaces\{FC1C1978-7705-497B-A714-02AE6DD709B7}: [DhcpNameServer] 10.110.234.1 Tcpip\..\Interfaces\{FE3CBFE1-749A-4FA7-BAD0-BDEA2C78E00C}: [DhcpNameServer] 62.21.99.94 62.21.99.95 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-3369961151-1437339172-2984589598-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: [S-1-5-80-3642287774-1615985598-572449333-1370030010-3123895339] UWAGA => Brak domyślnego URLSearchHook SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> D:\IObit\IObit Uninstaller\UninstallExplorer.dll [2016-05-23] (IObit) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-05] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-05] (Oracle Corporation) Filter: application/x-mfe-ipt - Brak wartości CLSID FireFox: ======== FF ProfilePath: C:\Users\Mateusz_2\AppData\Roaming\Mozilla\Firefox\Profiles\89rk388u.default-1487595226401 [2017-06-13] FF DefaultSearchEngine: Mozilla\Firefox\Profiles\89rk388u.default-1487595226401 -> Google FF Extension: (Reverso Translate in Context) - C:\Users\Mateusz_2\AppData\Roaming\Mozilla\Firefox\Profiles\89rk388u.default-1487595226401\Extensions\context@reverso.net.xpi [2017-06-12] FF Extension: (Eliminator Slajdów) - C:\Users\Mateusz_2\AppData\Roaming\Mozilla\Firefox\Profiles\89rk388u.default-1487595226401\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2017-03-04] FF Extension: (uBlock Origin) - C:\Users\Mateusz_2\AppData\Roaming\Mozilla\Firefox\Profiles\89rk388u.default-1487595226401\Extensions\uBlock0@raymondhill.net.xpi [2017-05-15] FF Extension: (Hotspot Shield Extension) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2015-08-31] [Brak podpisu cyfrowego] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_126.dll [2017-06-13] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll [2015-08-31] (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] () FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [Brak pliku] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-09] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-09] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-05] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3369961151-1437339172-2984589598-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mateusz_2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-11-15] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2013-07-15] ( ) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default [2017-06-13] CHR Extension: (Prezentacje Google) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-10] CHR Extension: (Dokumenty Google) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-10] CHR Extension: (Dysk Google) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-10] CHR Extension: (Web Developer) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2017-06-08] CHR Extension: (YouTube) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-10] CHR Extension: (uBlock Origin) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-06-05] CHR Extension: (Arkusze Google) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-10] CHR Extension: (Postman) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhbjgbiflinjbdggehcddcbncdddomop [2017-06-11] CHR Extension: (EditThisCookie) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-03-05] CHR Extension: (Dokumenty Google offline) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-14] CHR Extension: (Tind3r.com - web client for Tinder.) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\iopleohdgiomebidpblllpaigodfhoia [2017-02-08] CHR Extension: (Manual Geolocation) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpiefjlgcjmciajdcinaejedejjfjgki [2017-04-23] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-12] CHR Extension: (Gmail) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-10] CHR Extension: (Chrome Media Router) - C:\Users\Mateusz_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-11] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Brak podpisu cyfrowego] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] () R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [387128 2017-04-20] (BlueStack Systems, Inc.) S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [369720 2017-04-20] (BlueStack Systems, Inc.) S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [406584 2017-04-20] (BlueStack Systems, Inc.) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94720 2014-04-29] () [Brak podpisu cyfrowego] S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-05-30] (Dropbox, Inc.) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-14] (NVIDIA Corporation) R2 Hamachi2Svc; D:\Hamachi\x64\hamachi-2.exe [3760040 2017-05-22] (LogMeIn Inc.) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation) R2 IObitUnSvr; D:\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 KingoSoftService; C:\Users\Mateusz_2\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\checkupdate.exe [367584 2016-08-07] () R2 MBAMService; D:\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) R2 MsDtsServer120; D:\sqlserver\120\DTS\Binn\MsDtsSrvr.exe [216768 2015-06-10] (Microsoft Corporation) S4 MSOLAP$ADMINMSSQL; D:\sqlserver\MSAS12.ADMINMSSQL\OLAP\bin\msmdsrv.exe [51090624 2014-02-21] (Microsoft Corporation) S3 MSSQL$ADMINMSSQL; D:\sqlserver\MSSQL12.ADMINMSSQL\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation) S3 MSSQLFDLauncher$ADMINMSSQL; D:\sqlserver\MSSQL12.ADMINMSSQL\MSSQL\Binn\fdlauncher.exe [50880 2014-02-21] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation) S3 Origin Client Service; D:\Origin\OriginClientService.exe [2147216 2017-05-11] (Electronic Arts) S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3116440 2017-05-11] (Electronic Arts) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-05-29] () R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc) S4 ReportServer$ADMINMSSQL; D:\sqlserver\MSRS12.ADMINMSSQL\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2450112 2014-02-21] (Microsoft Corporation) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) S3 SQL Server Distributed Replay Client; C:\Program Files (x86)\Microsoft SQL Server\120\Tools\DReplayClient\DReplayClient.exe [139968 2014-02-21] (Microsoft Corporation) S3 SQL Server Distributed Replay Controller; C:\Program Files (x86)\Microsoft SQL Server\120\Tools\DReplayController\DReplayController.exe [345280 2014-02-21] (Microsoft Corporation) S3 SQLAgent$ADMINMSSQL; D:\sqlserver\MSSQL12.ADMINMSSQL\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH) R2 VMAuthdService; D:\vmware\vmware-authd.exe [97864 2016-10-21] (VMware, Inc.) S3 VSStandardCollectorService140; D:\visualstudio\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56552 2016-03-22] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-06-05] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-06-05] (Microsoft Corporation) R2 WindscribeService; D:\Windscribe\WindscribeService.exe [53352 2016-12-08] () S2 {0CBD4F48-3751-475D-BE88-4F271385B672}; C:\Program Files\Shadow Defender\Service.exe [74936 2015-09-07] (SHADOWDEFENDER.COM) S2 AdvancedSystemCareService8; D:\Advanced SystemCare 8\ASCService.exe [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation) S3 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2017-04-20] (BlueStack Systems) S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-04-20] (Bluestack System Inc. ) S3 BthAudioHF; C:\Windows\system32\drivers\RtkHfp.sys [94936 2013-10-22] (Realtek Semiconductor Corporation) R0 diskpt; C:\Windows\System32\drivers\diskpt.sys [413368 2015-09-07] (SHADOWDEFENDER.COM) S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2017-05-22] (LogMeIn Inc.) R1 HssDRV6; C:\Windows\system32\DRIVERS\hssdrv6.sys [44744 2014-05-17] (AnchorFree Inc.) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2016-12-10] (REALiX(tm)) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.) S4 IObitUnlocker; D:\IObit Unlocker\IObitUnlocker.sys [36568 2013-09-30] (IObit) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( ) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [251832 2017-06-13] (Malwarebytes) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation) R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider) S4 RsFx0300; C:\Windows\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation) R3 RtkA2dp; C:\Windows\system32\drivers\RtkA2dp.sys [178392 2014-09-24] (Realtek Semiconductor Corporation) S3 RtkAvrcp; C:\Windows\System32\drivers\RtkAvrcp.sys [59608 2014-05-22] (Realtek Semiconductor Corporation) R3 RtkAvrcpCtrlr; C:\Windows\System32\drivers\RtkAvrcpCtrlr.sys [69848 2013-06-21] (Realtek Semiconductor Corporation) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [580824 2014-10-14] (Realtek Semiconductor Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-10-18] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3593432 2014-10-07] (Realtek Semiconductor Corporation ) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation) R3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.) R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [121248 2016-09-12] (Oracle Corporation) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [195936 2016-09-12] (Oracle Corporation) R0 vsock; C:\Windows\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-06-05] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-06-05] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-06-05] (Microsoft Corporation) S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] S3 dbx; system32\DRIVERS\dbx.sys [X] S3 ewusbnet; \SystemRoot\system32\DRIVERS\ewusbnet.sys [X] S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X] S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X] U0 msahci; system32\drivers\msahci.sys [X] U0 Partizan; system32\drivers\Partizan.sys [X] S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X] S3 vdbus; \SystemRoot\System32\drivers\vdbus.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-13 17:43 - 2017-06-13 17:43 - 00001503 _____ C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk 2017-06-13 17:34 - 2017-06-13 17:34 - 00593952 _____ (Duplex Secure Ltd) C:\Users\Mateusz_2\Downloads\SPTDinst-v189-x64.exe 2017-06-13 17:34 - 2017-06-13 17:34 - 00496160 _____ (Duplex Secure Ltd) C:\Users\Mateusz_2\Downloads\SPTDinst-v189-x86.exe 2017-06-13 17:17 - 2017-06-13 17:18 - 03075400 _____ C:\XoristDecryptor.2.5.1.0_13.06.2017_17.17.03_log.txt 2017-06-13 17:16 - 2017-06-13 17:16 - 00801040 _____ (Kaspersky Lab ZAO) C:\Users\Mateusz_2\Downloads\xoristdecryptor.exe 2017-06-13 17:09 - 2017-06-13 17:09 - 00003480 _____ C:\Windows\System32\Tasks\ASUS Live Update1 2017-06-13 17:09 - 2017-06-13 17:09 - 00003470 _____ C:\Windows\System32\Tasks\ASUS Live Update2 2017-06-13 17:08 - 2017-06-13 17:39 - 00000148 _____ C:\Users\Mateusz_2\BullseyeCoverageError.txt 2017-06-13 17:07 - 2017-06-13 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2017-06-13 17:06 - 2017-06-13 17:08 - 00000148 _____ C:\Users\Default\BullseyeCoverageError.txt 2017-06-13 13:34 - 2017-06-13 13:34 - 00790528 _____ C:\Users\Mateusz_2\Downloads\XXX Premium Passwords 1.0(1).exe 2017-06-13 13:32 - 2017-06-13 13:32 - 00790528 _____ C:\Users\Mateusz_2\Downloads\XXX Premium Passwords 1.0.exe 2017-06-13 11:34 - 2016-03-13 12:52 - 339830670 _____ C:\Users\Mateusz_2\Desktop\Studia PWSZ INF.zip.CFER 2017-06-12 22:31 - 2017-06-12 22:31 - 08981640 _____ (Sandboxie Holdings, LLC) C:\Users\Mateusz_2\Downloads\SandboxieInstall.exe 2017-06-11 14:07 - 2017-06-11 14:07 - 00100930 _____ C:\Users\Mateusz_2\Downloads\Puszcza_Białowieska_-_ochrona_lasów.jpg.CFER 2017-06-09 19:58 - 2017-06-09 20:18 - 1468010588 _____ C:\Users\Mateusz_2\Downloads\eduweb.pl Kurs Strony WWW z WordPress - Podstawy-DW-MTU.rar.CFER 2017-06-09 19:33 - 2017-06-09 19:53 - 2092451759 _____ C:\Users\Mateusz_2\Downloads\strefakursow.pl Kurs Tworzenie profesjonalnych stron z WordPress-DW-MTU.rar.CFER 2017-06-09 14:22 - 2017-06-09 14:22 - 00239056 _____ C:\Users\Mateusz_2\Downloads\76 - published.pdf.CFER 2017-06-08 21:53 - 2017-06-13 14:45 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome 2017-06-08 15:30 - 2017-06-08 15:30 - 00033280 _____ C:\Users\Mateusz_2\Downloads\raport_testowania.xls.CFER 2017-06-08 15:27 - 2017-06-08 15:27 - 08142848 _____ C:\Users\Mateusz_2\Downloads\wyklad7(1).ppsx 2017-06-08 13:00 - 2017-06-08 13:00 - 00268166 _____ C:\Users\Mateusz_2\Downloads\Ekran smartphone.zip.CFER 2017-06-08 12:35 - 2017-06-08 12:35 - 00233876 _____ C:\Users\Mateusz_2\Downloads\Dodanie zadania.zip.CFER 2017-06-06 12:58 - 2017-06-06 12:58 - 00019243 _____ C:\Users\Mateusz_2\Downloads\Nowy-Microsoft-Word-Document.docx.CFER 2017-06-06 12:24 - 2017-06-06 12:25 - 114911068 _____ C:\Users\Mateusz_2\Downloads\Wallpapers Girls 96.rar.CFER 2017-06-06 12:16 - 2017-06-06 12:19 - 162880636 _____ C:\Users\Mateusz_2\Downloads\Beauties_Photogirls_282(2).rar.CFER 2017-06-06 12:13 - 2017-06-06 12:16 - 374329212 _____ C:\Users\Mateusz_2\Downloads\The Complete Deep Web Course 2017.rar.CFER 2017-06-06 09:46 - 2017-06-06 09:46 - 00001503 _____ C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk.CFER 2017-06-05 22:13 - 2017-06-05 22:12 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2017-06-05 21:50 - 2017-06-05 21:50 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-06-05 21:44 - 2017-06-05 21:31 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-06-05 21:44 - 2017-06-05 21:31 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-06-05 21:28 - 2017-06-05 21:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 25741312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 22360280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 20278272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 19789224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 15431168 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 15250944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 13661184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 13317120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 09323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2017-06-05 21:27 - 2017-06-05 21:27 - 09323008 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2017-06-05 21:27 - 2017-06-05 21:27 - 07444824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-06-05 21:27 - 2017-06-05 21:27 - 05977600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 04548608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02513408 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02462040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 02315496 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02176584 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02170880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-06-05 21:27 - 2017-06-05 21:27 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-06-05 21:27 - 2017-06-05 21:27 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 01968408 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01946176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01662096 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01628672 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01612504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2017-06-05 21:27 - 2017-06-05 21:27 - 01566032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01548640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01495552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01437696 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01375960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01317888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01213792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01135288 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 01108480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01094656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01063464 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00990040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00955016 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00954880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00922968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00871936 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00803192 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00787688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-06-05 21:27 - 2017-06-05 21:27 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00696832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00612096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00548032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00513456 _____ C:\Windows\SysWOW64\locale.nls 2017-06-05 21:27 - 2017-06-05 21:27 - 00513456 _____ C:\Windows\system32\locale.nls 2017-06-05 21:27 - 2017-06-05 21:27 - 00512512 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2017-06-05 21:27 - 2017-06-05 21:27 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00448285 _____ C:\Windows\system32\ApnDatabase.xml 2017-06-05 21:27 - 2017-06-05 21:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00422744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2017-06-05 21:27 - 2017-06-05 21:27 - 00388448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00379736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00275800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00274776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00245320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\wmitomi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00162850 _____ C:\Windows\SysWOW64\C_932.NLS 2017-06-05 21:27 - 2017-06-05 21:27 - 00162850 _____ C:\Windows\system32\C_932.NLS 2017-06-05 21:27 - 2017-06-05 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmitomi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00117592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-06-05 21:27 - 2017-06-05 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\parport.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-06-05 21:27 - 2017-06-05 21:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-06-05 21:27 - 2017-06-05 21:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00069976 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsidsc.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll 2017-06-05 21:27 - 2017-06-05 21:27 - 00046600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifibus.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serenum.sys 2017-06-05 21:27 - 2017-06-05 21:27 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys 2017-06-05 21:22 - 2017-06-05 21:22 - 03714560 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 01763888 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 01697792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 01501184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 01489608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00373080 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-06-05 21:22 - 2017-06-05 21:22 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-06-05 21:22 - 2017-06-05 21:22 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2017-06-05 21:22 - 2017-06-05 21:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys 2017-06-05 21:22 - 2017-06-05 21:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-06-05 21:19 - 2017-06-05 21:19 - 07796224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 07076864 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 05273600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 02345984 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01754112 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-06-05 21:19 - 2017-06-05 21:19 - 01560064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01523216 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2017-06-05 21:19 - 2017-06-05 21:19 - 01491456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01490128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-06-05 21:19 - 2017-06-05 21:19 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 01358960 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2017-06-05 21:19 - 2017-06-05 21:19 - 01001472 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2017-06-05 21:19 - 2017-06-05 21:19 - 00756736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00567152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2017-06-05 21:19 - 2017-06-05 21:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-06-05 21:19 - 2017-06-05 21:19 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe 2017-06-05 21:19 - 2017-06-05 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-06-05 21:19 - 2017-06-05 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 03606528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 02463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 01541240 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 01376768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 00738104 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 00613632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2017-06-05 21:17 - 2017-06-05 21:17 - 00152856 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-06-05 21:17 - 2017-06-05 21:17 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 03754496 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 01124376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2017-06-05 21:14 - 2017-06-05 21:14 - 00497448 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00444248 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00333656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2017-06-05 21:14 - 2017-06-05 21:14 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2017-06-05 21:14 - 2017-06-05 21:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 02881536 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2017-06-05 21:12 - 2017-06-05 21:12 - 00121176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys 2017-06-05 21:12 - 2017-06-05 21:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 00089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll 2017-06-05 21:12 - 2017-06-05 21:12 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll 2017-06-05 21:07 - 2017-06-05 21:07 - 00179248 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-06-05 21:07 - 2017-06-05 21:07 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-06-05 21:07 - 2017-06-05 21:07 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-06-05 21:06 - 2017-06-05 21:06 - 01737080 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00435200 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00397232 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00360448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00340880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2017-06-05 21:06 - 2017-06-05 21:06 - 00178016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-06-05 21:06 - 2017-06-05 21:06 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2017-06-05 21:04 - 2017-06-05 21:04 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2017-06-05 20:51 - 2016-05-14 01:08 - 00032512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2017-06-05 20:51 - 2016-05-05 19:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2017-06-05 20:51 - 2016-05-05 18:37 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2017-06-05 20:51 - 2016-04-06 23:21 - 00114528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys 2017-06-05 20:51 - 2016-04-02 15:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll 2017-06-05 20:50 - 2016-06-18 22:06 - 00590688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2017-06-05 20:50 - 2016-06-18 22:06 - 00072408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys 2017-06-05 20:50 - 2016-06-11 21:52 - 00057184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys 2017-06-05 20:50 - 2016-06-11 20:05 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe 2017-06-05 20:50 - 2016-06-11 19:14 - 00192512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpresult.exe 2017-06-05 20:50 - 2016-06-11 18:50 - 00987136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-06-05 20:50 - 2016-06-11 18:46 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll 2017-06-05 20:50 - 2016-06-11 18:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2017-06-05 20:50 - 2016-06-11 18:37 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2017-06-05 20:50 - 2016-06-11 18:24 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-06-05 20:50 - 2016-06-11 18:20 - 00413184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2017-06-05 20:50 - 2016-06-11 18:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2017-06-05 20:50 - 2016-06-11 05:44 - 00107984 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2017-06-05 20:50 - 2016-06-11 05:44 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2017-06-05 20:50 - 2016-06-10 22:07 - 03820544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-06-05 20:50 - 2016-06-10 20:11 - 06521800 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2017-06-05 20:50 - 2016-06-10 20:11 - 01487992 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2017-06-05 20:50 - 2016-06-10 20:11 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2017-06-05 20:50 - 2016-06-10 20:11 - 00125024 _____ (Microsoft Corporation) C:\Windows\system32\cryptxml.dll 2017-06-05 20:50 - 2016-06-10 20:10 - 00099136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptxml.dll 2017-06-05 20:50 - 2016-06-10 20:07 - 03273728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2017-06-05 20:50 - 2016-06-09 21:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2017-06-05 20:50 - 2016-06-09 20:18 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2017-06-05 20:50 - 2016-06-07 20:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2017-06-05 20:50 - 2016-06-07 19:13 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll 2017-06-05 20:50 - 2016-05-18 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2017-06-05 20:50 - 2016-05-18 23:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2017-06-05 20:50 - 2016-05-18 22:56 - 01291776 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2017-06-05 20:50 - 2016-05-18 22:33 - 01060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2017-06-05 20:50 - 2016-05-18 22:28 - 02635264 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2017-06-05 20:50 - 2016-05-18 22:16 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll 2017-06-05 20:50 - 2016-05-14 01:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2017-06-05 20:50 - 2016-05-14 01:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2017-06-05 20:50 - 2016-05-12 20:36 - 00034600 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe 2017-06-05 20:50 - 2016-05-12 19:39 - 00030984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe 2017-06-05 20:50 - 2016-05-06 23:59 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2017-06-05 20:50 - 2016-04-16 15:56 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2017-06-05 20:50 - 2016-04-10 00:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll 2017-06-05 20:50 - 2016-04-10 00:14 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Geolocation.dll 2017-06-05 20:50 - 2016-04-10 00:09 - 00754176 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2017-06-05 20:50 - 2016-04-10 00:02 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll 2017-06-05 20:50 - 2016-04-09 23:59 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Geolocation.dll 2017-06-05 20:50 - 2016-04-09 23:59 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll 2017-06-05 20:50 - 2016-04-09 23:56 - 00543232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2017-06-05 20:50 - 2016-04-09 23:55 - 00881152 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2017-06-05 20:50 - 2016-04-09 23:52 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll 2017-06-05 20:50 - 2016-04-07 18:06 - 00927744 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2017-06-05 20:50 - 2016-04-06 20:20 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2017-06-05 20:50 - 2016-04-06 20:17 - 18825216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2017-06-05 20:50 - 2016-04-06 18:25 - 15158272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2017-06-05 20:50 - 2016-04-06 00:37 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2017-06-05 20:50 - 2016-04-01 19:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll 2017-06-05 20:50 - 2016-04-01 18:53 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll 2017-06-05 20:50 - 2016-04-01 18:50 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2017-06-05 20:50 - 2016-02-04 18:57 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll 2017-06-05 20:50 - 2016-02-04 18:49 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2017-06-05 20:50 - 2016-02-04 18:39 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2017-06-05 20:47 - 2017-06-05 21:50 - 00000000 ____D C:\Users\WOUTempAdmin\AppData\Roaming\Sun 2017-06-05 20:47 - 2017-06-05 20:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2017-06-05 20:47 - 2017-06-05 20:47 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2017-06-05 20:44 - 2017-06-05 21:04 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3369961151-1437339172-2984589598-1010 2017-06-05 20:33 - 2017-06-05 21:50 - 00000000 ____D C:\Users\WOUTempAdmin\AppData\Local\Packages 2017-06-05 20:33 - 2017-06-05 20:33 - 00000000 ____D C:\Users\WOUTempAdmin\AppData\Local\NVIDIA 2017-06-05 20:32 - 2017-06-05 21:50 - 00000000 ____D C:\Users\WOUTempAdmin 2017-06-05 20:24 - 2017-06-05 20:24 - 00030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2017-06-05 20:24 - 2017-06-05 20:24 - 00029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2017-06-05 20:24 - 2017-06-05 20:24 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll 2017-06-05 20:24 - 2017-06-05 20:24 - 00018592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll 2017-06-05 19:30 - 2017-06-05 19:30 - 00855236 _____ C:\Users\Mateusz_2\Downloads\Cybertest-instrukcja.docx.CFER 2017-06-05 14:38 - 2017-06-05 14:38 - 00000188 _____ C:\Users\Mateusz_2\Downloads\Data(1).csv 2017-06-05 12:18 - 2017-06-05 12:18 - 00162304 _____ C:\Users\Mateusz_2\Downloads\rejestracja na egzamin - semestr letni 2016-2017.doc.CFER 2017-06-04 09:17 - 2017-06-04 09:17 - 00002841 _____ C:\Users\Mateusz_2\Downloads\45MCSPLB3T(1).txt.CFER 2017-06-03 09:54 - 2017-06-03 09:54 - 00355318 _____ C:\Users\Mateusz_2\Downloads\kupon(7).pdf.CFER 2017-06-02 14:58 - 2017-06-02 14:58 - 02052079 _____ C:\Users\Mateusz_2\Downloads\wsusoffline1092.zip.CFER 2017-06-01 08:57 - 2017-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-05-31 19:56 - 2017-05-31 19:56 - 00000149 _____ C:\Users\Mateusz_2\Downloads\Data.csv 2017-05-31 18:38 - 2017-05-31 18:39 - 00018683 _____ C:\Users\Mateusz_2\Downloads\test.docx.CFER 2017-05-31 18:27 - 2017-05-31 18:27 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\CrashRpt 2017-05-31 18:26 - 2017-05-31 18:26 - 00000812 _____ C:\Users\Public\Desktop\Ashampoo Snap 2017.lnk 2017-05-31 18:26 - 2017-05-31 18:26 - 00000230 _____ C:\Users\Public\Desktop\My Software Deals.url 2017-05-31 18:26 - 2017-05-31 18:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2017-05-31 18:24 - 2017-05-31 18:25 - 54663600 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Mateusz_2\Downloads\ashampoo_snap_2017_23566.exe 2017-05-31 14:30 - 2017-05-31 14:47 - 162880636 _____ C:\Users\Mateusz_2\Downloads\Beauties_Photogirls_282(1).rar.CFER 2017-05-30 21:25 - 2017-05-30 21:25 - 13599486 _____ C:\Users\Mateusz_2\Downloads\zdjecia.zip.CFER 2017-05-30 12:22 - 2017-05-30 12:22 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2017-05-30 10:57 - 2017-05-30 10:57 - 00000707 _____ C:\Users\Public\Desktop\OWASP ZAP 2.6.0.lnk 2017-05-30 10:57 - 2017-05-30 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OWASP 2017-05-30 10:50 - 2017-05-30 10:51 - 67074989 _____ C:\Users\Mateusz_2\Downloads\jre-8u131-windows-x64.tar.gz 2017-05-30 09:33 - 2017-05-30 09:33 - 00009704 _____ C:\Users\Mateusz_2\Downloads\Beauties_Photogirls_282.rar.CFER 2017-05-30 09:28 - 2017-05-30 09:28 - 23942082 _____ C:\Users\Mateusz_2\Downloads\LATEST-mutillidae-2.6.44.zip.CFER 2017-05-26 19:45 - 2017-05-26 19:46 - 02149376 _____ C:\Users\Mateusz_2\Downloads\piętro.dcd 2017-05-26 19:45 - 2017-05-26 19:46 - 01702912 _____ C:\Users\Mateusz_2\Downloads\parter.dcd 2017-05-25 09:48 - 2017-05-25 09:48 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2017-05-23 10:32 - 2017-05-23 10:54 - 1054879965 _____ C:\Users\Mateusz_2\Downloads\05-Otwarcie.rar.CFER 2017-05-22 23:09 - 2017-05-22 23:09 - 00333952 _____ (ESET) C:\Users\Mateusz_2\Downloads\ESETEternalBlueChecker.exe 2017-05-22 16:12 - 2017-05-22 16:12 - 00045680 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys 2017-05-22 08:50 - 2017-06-13 14:51 - 00000000 ____D C:\Users\Mateusz_2\Desktop\tata 2017-05-20 14:16 - 2017-05-20 14:16 - 00043008 _____ C:\Users\Mateusz_2\Downloads\WMiI_Word_Formation_General_English_06.03.2017_handout.doc.CFER 2017-05-17 15:13 - 2017-05-17 15:33 - 1124312803 _____ C:\Users\Mateusz_2\Downloads\04-Inicjacja.rar.CFER 2017-05-17 13:16 - 2017-05-17 13:25 - 476894032 _____ C:\Users\Mateusz_2\Downloads\03-System.rar.CFER 2017-05-17 13:10 - 2017-05-17 13:14 - 304531717 _____ C:\Users\Mateusz_2\Downloads\02-Kto-Co-Jak.rar.CFER 2017-05-17 13:06 - 2017-05-17 13:09 - 189536818 _____ C:\Users\Mateusz_2\Downloads\01-Start.rar.CFER 2017-05-17 12:45 - 2017-05-17 12:45 - 07013752 _____ (Tim Kosse) C:\Users\Mateusz_2\Downloads\FileZilla_3.25.2_win64-setup.exe 2017-05-15 14:06 - 2017-05-15 14:06 - 00013724 _____ C:\Users\Mateusz_2\Downloads\145px-Quickhull.gif.CFER 2017-05-14 11:51 - 2017-05-14 11:52 - 01267931 _____ C:\Users\Mateusz_2\Downloads\convexhull.pdf.CFER ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-13 17:41 - 2016-11-13 14:32 - 00000000 ____D C:\Users\Mateusz_2\Desktop\programy_fixit 2017-06-13 17:41 - 2016-09-14 21:33 - 00000000 ____D C:\FRST 2017-06-13 17:41 - 2015-02-19 13:19 - 00000000 __RDO C:\Users\Mateusz_2\OneDrive 2017-06-13 17:40 - 2017-04-14 22:04 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-06-13 17:40 - 2016-01-23 18:06 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\LogMeIn Hamachi 2017-06-13 17:39 - 2015-04-24 09:33 - 00000000 ____D C:\ProgramData\VMware 2017-06-13 17:39 - 2015-02-19 13:17 - 00000093 _____ C:\Users\Mateusz_2\AppData\Roaming\sp_data.sys 2017-06-13 17:38 - 2016-11-05 11:22 - 00001186 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore1d23746118d9c40.job 2017-06-13 17:37 - 2016-07-21 17:26 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi 2017-06-13 17:37 - 2016-07-21 17:26 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi 2017-06-13 17:37 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-06-13 17:37 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI 2017-06-13 17:33 - 2015-02-19 13:17 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Packages 2017-06-13 17:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2017-06-13 17:33 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf 2017-06-13 17:30 - 2015-02-19 13:23 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3369961151-1437339172-2984589598-1002 2017-06-13 17:13 - 2015-07-06 22:23 - 00004382 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-06-13 17:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-06-13 17:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Macromed 2017-06-13 17:08 - 2015-02-19 13:38 - 00004024 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8DEADDD8-2B8B-40C1-8566-8BBC7CFDD936} 2017-06-13 17:08 - 2015-02-19 13:16 - 00000000 ____D C:\Users\Mateusz_2 2017-06-13 17:06 - 2017-01-18 18:19 - 00000000 ____D C:\Users\Mateusz_2\AppData\LocalLow\Mozilla 2017-06-13 15:23 - 2016-07-02 17:04 - 00000000 ____D C:\Users\Public\Documents\RootGenius 2017-06-13 15:23 - 2016-02-22 20:27 - 00000000 ____D C:\Users\Public\Documents\MARPLOT Data 2017-06-13 15:23 - 2015-12-20 22:20 - 00000000 ____D C:\Users\Mateusz_2\OWASP ZAP 2017-06-13 15:23 - 2015-07-31 10:46 - 00000000 ____D C:\Users\Public\Documents\Explorer Suite Signatures 2017-06-13 15:23 - 2015-02-19 13:17 - 00000000 __SHD C:\Users\Mateusz_2\IntelGraphicsProfiles 2017-06-13 15:23 - 2015-02-19 12:51 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-06-13 15:23 - 2014-12-02 19:26 - 00000000 ____D C:\Users\Public\ASUS 2017-06-13 15:23 - 2013-08-22 17:36 - 00000000 __RHD C:\Users\Public\Libraries 2017-06-13 15:22 - 2015-06-14 13:20 - 00000000 ___RD C:\Users\Mateusz_2\Dropbox 2017-06-13 15:22 - 2015-03-10 21:11 - 00000000 ____D C:\Users\Mateusz_2\FileZilla FTP Client 2017-06-13 15:21 - 2016-06-06 16:55 - 00000000 ____D C:\Users\Mateusz_2\Downloads\NetworkRepairTool 2017-06-13 15:20 - 2017-04-06 12:34 - 00000000 ____D C:\Users\Mateusz_2\Downloads\bluescreen 2017-06-13 15:20 - 2016-01-17 23:14 - 00000000 ____D C:\Users\Mateusz_2\Downloads\CounterStrike1.6 2017-06-13 15:20 - 2015-10-15 19:22 - 00000000 ____D C:\Users\Mateusz_2\Downloads\blockline 2017-06-13 15:19 - 2015-05-29 18:20 - 00000000 ____D C:\Users\Mateusz_2\Documents\speed-dreams-2.settings 2017-06-13 15:19 - 2015-04-24 10:01 - 00000000 ____D C:\Users\Mateusz_2\Documents\Virtual Machines 2017-06-13 15:18 - 2017-01-27 11:17 - 00000000 ____D C:\Users\Mateusz_2\Documents\Multilizer 2017-06-13 15:18 - 2016-05-24 12:35 - 00000000 ___RD C:\Users\Mateusz_2\Documents\Scanned Documents 2017-06-13 15:18 - 2015-09-01 15:52 - 00000000 ____D C:\Users\Mateusz_2\Documents\RegRun2 2017-06-13 15:18 - 2015-02-19 16:39 - 00000000 ____D C:\Users\Mateusz_2\Documents\SITP Kolo Kalisz 2017-06-13 15:18 - 2015-02-19 16:39 - 00000000 ____D C:\Users\Mateusz_2\Documents\OSP 2017-06-13 15:18 - 2015-02-19 13:18 - 00000000 ____D C:\Users\Mateusz_2\Documents\My Bluetooth 2017-06-13 15:17 - 2015-06-27 19:41 - 00000000 ____D C:\Users\Mateusz_2\Documents\Mateusz_Sobczak 2017-06-13 14:59 - 2015-10-16 20:49 - 00000000 ____D C:\Users\Mateusz_2\Documents\mama 2017-06-13 14:59 - 2015-02-19 16:34 - 00000000 ____D C:\Users\Mateusz_2\Documents\kaplica 2017-06-13 14:59 - 2015-02-19 16:30 - 00000000 ____D C:\Users\Mateusz_2\Documents\Firma 2017-06-13 14:51 - 2016-10-22 17:58 - 00000000 ____D C:\Users\Mateusz_2\Desktop\teamviewer 2017-06-13 14:51 - 2015-10-16 20:55 - 00000000 ____D C:\Users\Mateusz_2\Documents\18-Marty 2017-06-13 14:51 - 2015-06-02 12:59 - 00000000 ____D C:\Users\Mateusz_2\Documents\basen 2017-06-13 14:51 - 2015-05-29 18:47 - 00000000 ____D C:\Users\Mateusz_2\Documents\BMW 2017-06-13 14:50 - 2016-05-19 12:32 - 00000000 ____D C:\Users\Mateusz_2\Desktop\pulpit 2017-06-13 14:48 - 2016-09-14 12:34 - 00000000 ____D C:\Users\Mateusz_2\Desktop\pendrive 2017-06-13 14:48 - 2016-05-19 12:51 - 00000000 ____D C:\Users\Mateusz_2\Desktop\program_przemka 2017-06-13 14:47 - 2017-05-01 20:22 - 00000000 ____D C:\Users\Mateusz_2\Desktop\dziadek_nagranie 2017-06-13 14:47 - 2017-03-16 12:56 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\vlc 2017-06-13 14:47 - 2017-03-14 17:00 - 00000000 ____D C:\Users\Mateusz_2\Cisco Packet Tracer 6.3 2017-06-13 14:47 - 2017-03-12 16:22 - 00000000 ____D C:\Users\Mateusz_2\Cisco Packet Tracer 7.0 2017-06-13 14:47 - 2017-03-06 09:55 - 00000000 ____D C:\Users\Mateusz_2\Desktop\netfix 2017-06-13 14:47 - 2016-12-10 16:40 - 00000000 ____D C:\Users\Mateusz_2\Desktop\diagnostyka 2017-06-13 14:47 - 2016-11-02 11:26 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Thunderbird 2017-06-13 14:47 - 2016-07-24 17:13 - 00000000 ____D C:\Users\Mateusz_2\Desktop\julita 2017-06-13 14:47 - 2016-06-23 20:55 - 00000000 ____D C:\Users\Mateusz_2\Desktop\NetworkRepairTool 2017-06-13 14:47 - 2016-05-19 12:52 - 00000000 ____D C:\Users\Mateusz_2\Desktop\gry 2017-06-13 14:47 - 2015-12-31 18:12 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Steganos Updates 2017-06-13 14:47 - 2015-10-08 21:49 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Steganos VPN 2017-06-13 14:47 - 2015-10-08 21:49 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Steganos 2017-06-13 14:47 - 2015-07-01 09:33 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\WinRAR 2017-06-13 14:47 - 2015-06-09 12:32 - 00000000 ____D C:\Users\Mateusz_2\bluej 2017-06-13 14:47 - 2015-05-19 16:02 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\TeamViewer 2017-06-13 14:47 - 2015-04-24 09:37 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\VMware 2017-06-13 14:47 - 2015-03-27 13:49 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Wireshark 2017-06-13 14:46 - 2015-02-23 22:47 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Skype 2017-06-13 14:45 - 2016-10-01 16:26 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Don't Panic! 2017-06-13 14:45 - 2016-09-14 15:46 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2017-06-13 14:45 - 2016-07-02 16:56 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Shuame 2017-06-13 14:45 - 2016-06-04 18:01 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi 2017-06-13 14:45 - 2016-05-21 21:35 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\NuGet 2017-06-13 14:45 - 2016-02-05 13:20 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactorLexus 2017-06-13 14:45 - 2015-12-30 21:34 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\MPC-HC 2017-06-13 14:45 - 2015-11-22 20:26 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2017-06-13 14:45 - 2015-09-12 18:40 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\NapiProjekt 2017-06-13 14:45 - 2015-08-31 18:35 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Boot Genius 2017-06-13 14:45 - 2015-08-31 17:28 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fix Genius 2017-06-13 14:45 - 2015-08-17 11:42 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Origin 2017-06-13 14:45 - 2015-07-16 13:10 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Process Hacker 2 2017-06-13 14:45 - 2015-07-01 09:30 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-06-13 14:45 - 2015-06-27 20:41 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2017-06-13 14:45 - 2015-06-27 15:00 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kryptel 2017-06-13 14:45 - 2015-06-22 12:54 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js 2017-06-13 14:45 - 2015-06-09 12:32 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueJ 2017-06-13 14:45 - 2015-05-13 19:25 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\ProductData 2017-06-13 14:45 - 2015-04-13 12:28 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XAMPP for Windows 2017-06-13 14:45 - 2015-04-09 12:52 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TinyTroopers 2017-06-13 14:45 - 2015-02-19 18:55 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z 2017-06-13 14:39 - 2016-06-04 18:03 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Kodi 2017-06-13 14:38 - 2016-09-20 15:49 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Kingosoft 2017-06-13 14:38 - 2016-06-13 10:42 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\JetBrains 2017-06-13 14:38 - 2015-05-13 19:24 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\IObit 2017-06-13 14:37 - 2016-11-13 16:50 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\GofinDruki 2017-06-13 14:37 - 2016-09-14 22:06 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\gtk-2.0 2017-06-13 14:37 - 2016-06-25 15:39 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Internet Download Accelerator 2017-06-13 14:37 - 2016-03-18 21:00 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\DVDVideoSoft 2017-06-13 14:37 - 2015-03-10 21:11 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\FileZilla 2017-06-13 14:37 - 2015-03-10 21:09 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\FileZilla Server 2017-06-13 14:37 - 2015-02-21 19:01 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\DAEMON Tools Lite 2017-06-13 14:37 - 2015-02-20 21:15 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\GanymedeNet 2017-06-13 14:37 - 2015-02-19 15:52 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\HpUpdate 2017-06-13 14:36 - 2016-09-20 15:49 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\uts 2017-06-13 14:36 - 2016-06-13 19:55 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\1-abc 2017-06-13 14:36 - 2016-06-01 17:02 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\ControlCenter4 2017-06-13 14:36 - 2015-11-30 14:17 - 00000000 ____D C:\Users\Mateusz_2\AppData\Roaming\Audacity 2017-06-13 14:36 - 2015-11-15 16:02 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\SmartView2 2017-06-13 14:36 - 2015-05-29 15:42 - 00000000 ____D C:\Users\Mateusz_2\AppData\LocalLow\IObit 2017-06-13 14:36 - 2015-04-24 09:37 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\VMware 2017-06-13 14:36 - 2015-02-19 13:17 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\NVIDIA 2017-06-13 14:35 - 2015-02-19 15:28 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Microsoft Help 2017-06-13 14:23 - 2017-03-12 16:22 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\LocalStorage 2017-06-13 14:23 - 2016-02-22 20:29 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\MARPLOT 2017-06-13 14:23 - 2015-06-15 11:38 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\gtk-2.0 2017-06-13 14:23 - 2015-06-02 09:01 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\GWX 2017-06-13 14:22 - 2017-04-23 18:08 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Bluestacks 2017-06-13 14:22 - 2017-04-04 14:16 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\FileZilla 2017-06-13 14:22 - 2017-02-24 20:23 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\CrypTool2 2017-06-13 14:22 - 2016-11-05 16:57 - 00000000 ____D C:\ProgramData\Softland 2017-06-13 14:22 - 2016-09-20 15:37 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\AWSToolkit 2017-06-13 14:22 - 2016-09-14 15:46 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2017-06-13 14:22 - 2016-05-13 21:47 - 00000000 ____D C:\Users\Mateusz_2\.ssh 2017-06-13 14:22 - 2016-03-29 15:28 - 00000000 ____D C:\ProgramData\tmp 2017-06-13 14:22 - 2016-02-17 18:11 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\ALOHA 2017-06-13 14:22 - 2016-01-14 11:06 - 00000000 ____D C:\Users\Mateusz_2\.oracle_jre_usage 2017-06-13 14:22 - 2015-11-18 12:08 - 00000000 ___RD C:\Sandbox 2017-06-13 14:22 - 2015-08-31 21:06 - 00000000 ____D C:\ProgramData\Protexis 2017-06-13 14:22 - 2015-08-17 11:38 - 00000000 ____D C:\ProgramData\Origin 2017-06-13 14:22 - 2015-07-22 10:42 - 00000000 ____D C:\ProgramData\Protexis64 2017-06-13 14:22 - 2015-07-16 13:13 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\DOSBox 2017-06-13 14:22 - 2015-06-15 11:34 - 00000000 ____D C:\Users\Mateusz_2\.gimp-2.8 2017-06-13 14:22 - 2015-06-14 13:07 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Dropbox 2017-06-13 14:22 - 2015-06-03 10:09 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} 2017-06-13 14:22 - 2015-05-13 19:26 - 00000000 ____D C:\ProgramData\ProductData 2017-06-13 14:22 - 2015-05-13 19:24 - 00000000 ____D C:\ProgramData\IObit 2017-06-13 14:22 - 2015-05-08 22:00 - 00000000 ____D C:\Users\Mateusz_2\.VirtualBox 2017-06-13 14:22 - 2015-04-13 12:45 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\CrashDumps 2017-06-13 14:22 - 2015-03-02 19:01 - 00000000 ____D C:\Users\Mateusz_2\.android 2017-06-13 14:22 - 2015-02-20 16:15 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\cache 2017-06-13 14:22 - 2015-02-19 13:00 - 00000000 ____D C:\ProgramData\USBChargerPlus 2017-06-13 14:22 - 2014-12-02 19:26 - 00000000 ____D C:\ProgramData\install_clap 2017-06-13 14:22 - 2014-12-02 19:21 - 00000000 ____D C:\ProgramData\P4G 2017-06-13 14:22 - 2014-12-02 19:15 - 00000000 ____D C:\ProgramData\Realtek 2017-06-13 14:22 - 2014-12-02 19:04 - 00000000 ____D C:\ProgramData\NVIDIA 2017-06-13 14:22 - 2014-10-21 06:30 - 00000000 ____D C:\ProgramData\WildTangent 2017-06-13 14:22 - 2014-10-21 06:29 - 00000000 ____D C:\ProgramData\WebStorage 2017-06-13 14:21 - 2016-06-01 16:43 - 00000000 ____D C:\ProgramData\ControlCenter4 2017-06-13 14:21 - 2015-04-09 14:23 - 00000000 ____D C:\ProgramData\Ashampoo 2017-06-13 14:21 - 2015-02-21 19:00 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2017-06-13 14:21 - 2015-02-20 16:12 - 00000000 ____D C:\ProgramData\FLEXnet 2017-06-13 14:21 - 2014-10-21 06:29 - 00000000 ____D C:\ProgramData\ASUS WebStorage 2017-06-13 14:21 - 2014-10-21 06:28 - 00000000 ____D C:\ProgramData\ASUSLogos 2017-06-13 14:15 - 2017-04-23 18:07 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2017-06-13 14:14 - 2015-02-19 13:17 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\VirtualStore 2017-06-13 14:10 - 2015-02-21 19:59 - 00000000 ____D C:\AdwCleaner 2017-06-13 13:56 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-13 11:35 - 2014-10-21 13:14 - 01000532 _____ C:\Windows\system32\perfh015.dat 2017-06-13 11:35 - 2014-10-21 13:14 - 00247740 _____ C:\Windows\system32\perfc015.dat 2017-06-13 11:35 - 2014-03-18 17:26 - 02384364 _____ C:\Windows\system32\PerfStringBackup.INI 2017-06-09 08:00 - 2017-04-23 18:10 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2017-06-08 21:25 - 2017-01-10 10:58 - 00002185 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-06-06 12:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2017-06-05 22:31 - 2017-01-18 10:57 - 00000276 _____ C:\Windows\Tasks\Uninstaller_SkipUac_Mateusz_2.job 2017-06-05 22:30 - 2016-05-19 12:54 - 00003152 _____ C:\Windows\System32\Tasks\SmartDefrag_Startup 2017-06-05 22:30 - 2016-05-19 12:54 - 00003150 _____ C:\Windows\System32\Tasks\SmartDefrag_Update 2017-06-05 22:14 - 2015-02-19 17:57 - 00000000 ____D C:\ProgramData\Oracle 2017-06-05 22:13 - 2015-02-19 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-06-05 22:13 - 2015-02-19 17:57 - 00000000 ____D C:\Program Files (x86)\Java 2017-06-05 21:42 - 2013-08-22 16:44 - 00640200 _____ C:\Windows\system32\FNTCACHE.DAT 2017-06-05 21:35 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData 2017-06-05 21:35 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions 2017-06-05 21:35 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender 2017-06-05 21:35 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-06-05 21:35 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe 2017-06-05 21:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates 2017-06-05 21:34 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2017-06-05 21:20 - 2013-08-22 15:25 - 00000199 _____ C:\Windows\win.ini 2017-06-05 20:17 - 2014-10-21 06:29 - 00000000 ____D C:\ProgramData\Package Cache 2017-06-03 12:09 - 2016-08-18 19:25 - 00002254 ____H C:\Users\Mateusz_2\Documents\Default.rdp 2017-06-01 08:57 - 2015-06-14 13:07 - 00000000 ____D C:\Program Files (x86)\Dropbox 2017-05-30 22:45 - 2015-02-19 13:49 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2017-05-29 15:49 - 2016-05-19 19:40 - 00000404 _____ C:\Windows\BRWMARK.INI 2017-05-29 15:49 - 2016-05-19 19:40 - 00000027 _____ C:\Windows\BRPP2KA.INI 2017-05-27 22:17 - 2016-04-06 10:18 - 00001649 ____H C:\Users\Mateusz_2\.swfinfo 2017-05-25 14:00 - 2016-10-21 19:07 - 00000600 _____ C:\Users\Mateusz_2\AppData\Local\PUTTY.RND 2017-05-24 22:16 - 2015-06-10 20:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-05-24 22:16 - 2015-02-19 15:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-05-22 17:04 - 2016-05-21 15:52 - 00000000 ____D C:\Users\Mateusz_2\Documents\Visual Studio 2015 2017-05-21 12:55 - 2016-09-14 21:27 - 00000031 _____ C:\Users\Mateusz_2\AppData\Local\burnaware.ini 2017-05-21 12:55 - 2016-09-14 21:00 - 00000600 _____ C:\Users\Mateusz_2\AppData\Roaming\burnaware.ini 2017-05-19 09:06 - 2015-05-19 16:03 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2017-05-16 11:31 - 2015-02-19 16:44 - 00000000 ____D C:\Users\Mateusz_2\AppData\Local\Adobe ==================== Pliki w katalogu głównym wybranych folderów ======= 2016-09-14 21:00 - 2017-05-21 12:55 - 0000600 _____ () C:\Users\Mateusz_2\AppData\Roaming\burnaware.ini 2016-04-15 16:16 - 2016-02-09 03:31 - 0001010 _____ () C:\Users\Mateusz_2\AppData\Roaming\HOW TO DECRYPT FILES.txt 2017-05-07 17:04 - 2017-05-07 17:04 - 0000004 _____ () C:\Users\Mateusz_2\AppData\Roaming\pid.txt 2017-05-07 17:04 - 2017-05-07 17:04 - 0000036 _____ () C:\Users\Mateusz_2\AppData\Roaming\pidloc.txt.CFER 2015-02-19 13:17 - 2017-06-13 17:39 - 0000093 _____ () C:\Users\Mateusz_2\AppData\Roaming\sp_data.sys 2016-04-15 16:16 - 2016-02-09 03:31 - 0001010 _____ () C:\Users\Mateusz_2\AppData\Roaming\Microsoft\HOW TO DECRYPT FILES.txt 2015-02-19 13:18 - 2017-06-13 17:40 - 290991016 _____ () C:\Users\Mateusz_2\AppData\Local\BTServer.log 2016-09-14 21:27 - 2017-05-21 12:55 - 0000031 _____ () C:\Users\Mateusz_2\AppData\Local\burnaware.ini 2016-04-15 16:16 - 2016-02-09 03:31 - 0001010 _____ () C:\Users\Mateusz_2\AppData\Local\HOW TO DECRYPT FILES.txt 2016-10-21 19:07 - 2017-05-25 14:00 - 0000600 _____ () C:\Users\Mateusz_2\AppData\Local\PUTTY.RND 2015-12-27 14:55 - 2015-12-27 14:55 - 0007494 _____ () C:\Users\Mateusz_2\AppData\Local\recently-used.xbel 2016-09-20 15:34 - 2016-09-20 15:36 - 25397336 _____ (One Click Root) C:\Users\Mateusz_2\AppData\Local\TempOneClickRoot.exe 2016-09-20 15:49 - 2016-09-20 16:46 - 0000179 _____ () C:\Users\Mateusz_2\AppData\Local\uts.ini 2017-03-12 16:22 - 2017-03-12 16:22 - 0017408 _____ () C:\Users\Mateusz_2\AppData\Local\WebpageIcons.db 2015-02-19 15:52 - 2015-02-19 15:52 - 0000057 _____ () C:\ProgramData\Ament.ini 2016-04-15 16:16 - 2016-02-09 03:31 - 0001010 _____ () C:\ProgramData\HOW TO DECRYPT FILES.txt 2015-02-20 15:53 - 2015-02-20 15:53 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc Niektóre pliki w TEMP: ==================== 2017-06-13 17:08 - 2017-06-13 17:08 - 0010520 _____ () C:\Users\Mateusz_2\AppData\Local\Temp\BullseyeCoverage-x86-3.dll 2017-06-05 22:19 - 2017-06-13 14:36 - 0000000 ____D () C:\Users\Mateusz_2\AppData\Local\Temp\DEVRTL.dll 2017-06-13 14:24 - 2017-06-13 14:36 - 0000000 ____D () C:\Users\Mateusz_2\AppData\Local\Temp\Explorer.EXE 2017-06-05 22:12 - 2017-06-05 22:12 - 0739904 _____ (Oracle Corporation) C:\Users\Mateusz_2\AppData\Local\Temp\jre-8u131-windows-au.exe 2016-04-15 16:16 - 2016-02-09 03:31 - 0790528 _____ () C:\Users\Mateusz_2\AppData\Local\Temp\qA6H14jhTiNY3yR.exe 2017-06-12 17:57 - 2017-06-12 17:57 - 8981640 _____ (Sandboxie Holdings, LLC) C:\Users\Mateusz_2\AppData\Local\Temp\SandboxieInstall.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-05-30 13:39 ==================== Koniec FRST.txt ============================