Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-06-2017 01 Uruchomiony przez lucca (administrator) LUCCA-ASUS (17-06-2017 20:30:24) Uruchomiony z E:\FRST Załadowane profile: lucca (Dostępne profile: lucca) Platform: Windows 10 Home Wersja 1607 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (阿里巴巴(中国)有限公司) C:\Program Files (x86)\AliSafeEngine\5.0.2\AliSafeEngine.exe (Alibaba Group) C:\Program Files (x86)\Alibaba\wwbizsrv\wwbizsrv.exe () C:\SMARTSYSTEM\Smart\serwer\bin\mysqld.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (阿里巴巴(中国)有限公司) C:\Program Files (x86)\AliSafeEngine\5.0.2\AliIMSafeUI.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2016-01-12] (ELAN Microelectronics Corp.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-646645915-3493183111-878668481-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{75997473-0814-450c-93ce-da3a0a442c86}: [NameServer] 192.168.88.1 Tcpip\..\Interfaces\{b8839a58-9405-41ec-916b-a4f4447e8848}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKU\S-1-5-21-646645915-3493183111-878668481-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-10-17] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-10-17] (Oracle Corporation) DPF: HKLM-x32 {021AFC0F-30F4-474D-9903-CE42D9539B17} hxxp://192.168.0.10/dvr_ocx.cab Chrome: ======= CHR Profile: C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default [2017-06-17] CHR Extension: (Prezentacje Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-16] CHR Extension: (Dokumenty Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-16] CHR Extension: (Dysk Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-16] CHR Extension: (ifirma.pl - faktury offline) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbghjinfbcclimbebalnhedfeconigkn [2016-08-13] CHR Extension: (YouTube) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-16] CHR Extension: (Facebook) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2016-02-16] CHR Extension: (Google Search) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-16] CHR Extension: (Multiple Account Checker for Gmail™) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnimhgelcnggigekhdjlifjpndgmnglm [2016-02-16] CHR Extension: (Adobe Acrobat) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04] CHR Extension: (Kalendarz Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-08] CHR Extension: (Arkusze Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-16] CHR Extension: (Pulpit zdalny Chrome) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-06-08] CHR Extension: (Dokumenty Google offline) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Mapy Google) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-02-16] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09] CHR Extension: (Gmail) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-16] CHR Extension: (Chrome Media Router) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13] CHR Extension: (Radio) - C:\Users\lucca\AppData\Local\Google\Chrome\User Data\Default\Extensions\plaapjbgohfgkalmmjpakodbpomahebn [2017-01-20] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AliSafeEngine Service; C:\Program Files (x86)\AliSafeEngine\5.0.2\AliSafeEngine.exe [594080 2016-05-10] (阿里巴巴(中国)有限公司) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2016-01-12] (ELAN Microelectronics Corp.) R2 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29181272 2008-12-18] (Microsoft Corporation) R2 nlsX86cc; C:\WINDOWS\SysWOW64\nlssrv32.exe [66560 2010-11-22] (Nalpeiron Ltd.) [Brak podpisu cyfrowego] R2 SMART SYSTEM SERWER; C:\SMARTSYSTEM\Smart\serwer\my.ini [9369 2016-05-14] () [Brak podpisu cyfrowego] R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation) R2 wwbizsrv; C:\Program Files (x86)\Alibaba\wwbizsrv\wwbizsrv.exe [2904176 2016-07-14] (Alibaba Group) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2016-01-12] (Advanced Micro Devices) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [129152 2016-04-25] (Samsung Electronics Co., Ltd.) S3 leusbser; C:\WINDOWS\system32\DRIVERS\leusbser.sys [238080 2015-12-23] (QUALCOMM Incorporated) R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ATK64AMD.sys [13680 2016-01-12] () S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 NETJME; C:\WINDOWS\System32\drivers\NETJME.sys [137728 2016-07-16] (JMicron Technology Corp.) S3 qcfilter; C:\WINDOWS\System32\drivers\qcusbfilter.sys [48672 2015-09-25] (QUALCOMM Incorporated) S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [252448 2015-09-25] (QUALCOMM Incorporated) R3 SNP2UVC; C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] () S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.) U4 UnlockerDriver5; C:\Program Files (x86)\TC UP\Plugins\Media\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Brak podpisu cyfrowego] R1 VD_FileDisk; C:\Windows\System32\Drivers\VD_FileDisk.sys [30312 2011-01-26] (CaptainFlint Software) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-17 19:18 - 2017-06-17 19:18 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-06-17 17:05 - 2017-06-17 17:05 - 00034353 _____ C:\Users\lucca\Desktop\gmer.txt 2017-06-17 15:04 - 2017-06-17 15:04 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2017-06-16 07:35 - 2017-06-17 20:30 - 00000000 ____D C:\FRST 2017-06-15 20:28 - 2017-06-15 20:31 - 00000000 ____D C:\Program Files\Unlocker 2017-06-15 20:28 - 2017-06-15 20:28 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2017-06-15 13:01 - 2017-06-15 18:47 - 00001002 _____ C:\WINDOWS\wininit.ini 2017-06-15 12:38 - 2017-06-17 10:49 - 00000000 ____D C:\AdwCleaner 2017-06-14 12:29 - 2017-06-17 10:15 - 00000008 __RSH C:\Users\lucca\ntuser.pol 2017-06-14 12:27 - 2017-06-17 10:15 - 00000008 __RSH C:\ProgramData\ntuser.pol 2017-06-14 06:10 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-06-14 06:10 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-06-14 06:10 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll 2017-06-14 06:10 - 2017-06-03 11:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-06-14 06:09 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-06-14 06:09 - 2017-06-03 12:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-06-14 06:09 - 2017-06-03 12:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-06-14 06:09 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-06-14 06:09 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-06-14 06:09 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-06-14 06:09 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2017-06-14 06:09 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2017-06-14 06:09 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-06-14 06:09 - 2017-06-03 11:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-06-14 06:09 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-06-14 06:09 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-06-14 06:09 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-06-14 06:09 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-06-14 06:09 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-06-14 06:09 - 2017-06-03 11:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-06-14 06:09 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll 2017-06-14 06:09 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll 2017-06-14 06:09 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-06-14 06:09 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2017-06-14 06:09 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-06-14 06:09 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-06-14 06:09 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-06-14 06:09 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-06-14 06:09 - 2017-06-03 11:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-06-14 06:09 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll 2017-06-14 06:09 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-06-14 06:09 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-06-14 06:09 - 2017-06-03 11:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2017-06-14 06:09 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-06-14 06:09 - 2017-06-03 11:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-06-14 06:09 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll 2017-06-14 06:09 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-06-14 06:09 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-06-14 06:09 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-06-14 06:09 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-06-14 06:09 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-06-14 06:09 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-06-14 06:09 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-06-14 06:09 - 2017-03-04 08:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2017-06-14 06:09 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2017-06-14 06:08 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-06-14 06:08 - 2017-06-03 11:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-06-14 06:08 - 2017-06-03 10:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-06-14 05:58 - 2017-06-03 11:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-06-14 05:58 - 2017-06-03 11:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-06-14 05:58 - 2017-06-03 11:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-06-14 05:58 - 2017-06-03 11:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-06-14 05:58 - 2017-06-03 11:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2017-06-14 05:58 - 2017-06-03 11:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-06-14 05:58 - 2017-06-03 11:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-06-14 05:58 - 2017-06-03 11:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-06-14 05:58 - 2017-06-03 10:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-06-14 05:58 - 2017-06-03 10:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-06-14 05:58 - 2017-06-03 10:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-06-14 05:58 - 2017-06-03 10:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-06-14 05:58 - 2017-06-03 10:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-06-14 05:58 - 2017-06-03 10:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-06-14 05:58 - 2017-06-03 10:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-14 05:58 - 2017-06-03 10:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-06-14 05:57 - 2017-06-03 12:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-06-14 05:57 - 2017-06-03 12:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-14 05:57 - 2017-06-03 12:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-06-14 05:57 - 2017-06-03 11:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-06-14 05:57 - 2017-06-03 11:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-14 05:57 - 2017-06-03 11:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-06-14 05:57 - 2017-06-03 11:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-06-14 05:57 - 2017-06-03 11:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-06-14 05:57 - 2017-06-03 11:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-06-14 05:57 - 2017-06-03 11:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-06-14 05:57 - 2017-06-03 11:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-06-14 05:57 - 2017-06-03 11:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-06-14 05:57 - 2017-06-03 11:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-14 05:57 - 2017-06-03 11:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-06-14 05:57 - 2017-06-03 11:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll 2017-06-14 05:57 - 2017-06-03 11:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-06-14 05:57 - 2017-06-03 11:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll 2017-06-14 05:57 - 2017-06-03 11:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-06-14 05:57 - 2017-06-03 11:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-06-14 05:57 - 2017-06-03 11:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-06-14 05:57 - 2017-06-03 10:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2017-06-14 05:57 - 2017-06-03 10:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-06-14 05:57 - 2017-06-03 10:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-06-14 05:57 - 2017-06-03 10:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-06-14 05:57 - 2017-06-03 10:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-06-14 05:57 - 2017-06-03 10:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-06-14 05:57 - 2017-06-03 10:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-14 05:57 - 2017-06-03 10:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-06-14 05:57 - 2017-05-25 07:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-06-14 05:57 - 2017-03-04 08:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-06-14 05:56 - 2017-06-03 12:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-06-14 05:56 - 2017-06-03 12:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-06-14 05:56 - 2017-06-03 12:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-06-14 05:56 - 2017-06-03 12:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-06-14 05:56 - 2017-06-03 11:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-06-14 05:56 - 2017-06-03 11:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-06-14 05:56 - 2017-06-03 11:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-06-14 05:56 - 2017-06-03 11:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-06-14 05:56 - 2017-06-03 11:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-06-14 05:56 - 2017-06-03 11:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-06-14 05:56 - 2017-06-03 11:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-06-14 05:56 - 2017-06-03 11:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-06-14 05:56 - 2017-06-03 11:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-06-14 05:56 - 2017-06-03 11:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-14 05:56 - 2017-06-03 11:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll 2017-06-14 05:56 - 2017-06-03 11:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-06-14 05:56 - 2017-06-03 11:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll 2017-06-14 05:56 - 2017-06-03 11:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-06-14 05:56 - 2017-06-03 11:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2017-06-14 05:56 - 2017-06-03 11:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-06-14 05:56 - 2017-06-03 10:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-06-14 05:56 - 2017-06-03 10:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-14 05:56 - 2017-06-03 10:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-06-14 05:56 - 2017-06-03 10:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-06-14 05:56 - 2017-06-03 10:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-06-14 05:56 - 2017-06-03 10:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-06-14 05:56 - 2017-06-03 10:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll 2017-06-14 05:56 - 2017-06-03 10:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-06-14 05:56 - 2017-06-03 08:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls 2017-06-14 05:55 - 2017-06-03 12:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-06-14 05:55 - 2017-06-03 12:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-06-14 05:55 - 2017-06-03 12:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-06-14 05:55 - 2017-06-03 12:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-06-14 05:55 - 2017-06-03 12:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-06-14 05:55 - 2017-06-03 11:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-06-14 05:55 - 2017-06-03 11:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-06-14 05:55 - 2017-06-03 11:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-06-14 05:55 - 2017-06-03 11:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-06-14 05:55 - 2017-06-03 11:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-06-14 05:55 - 2017-06-03 11:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-06-14 05:55 - 2017-06-03 11:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-14 05:55 - 2017-06-03 11:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-06-14 05:55 - 2017-06-03 10:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll 2017-06-03 11:59 - 2017-06-03 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetClientOCX 2017-06-03 11:59 - 2017-06-03 11:59 - 00000000 ____D C:\Program Files (x86)\NetClientOCX 2017-06-03 08:33 - 2017-06-03 08:33 - 00000089 _____ C:\Users\lucca\.ubnt-discovery.properties 2017-06-02 10:38 - 2017-06-02 10:38 - 01588750 _____ C:\Users\lucca\Downloads\winbox.exe 2017-06-02 10:38 - 2017-06-02 10:38 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Mikrotik 2017-06-02 06:45 - 2017-06-02 06:45 - 00109550 _____ C:\Users\lucca\Downloads\faktura_121_2017_02-06-2017 (1).pdf 2017-06-02 06:44 - 2017-06-02 06:44 - 00110313 _____ C:\Users\lucca\Downloads\faktura_121_2017_02-06-2017.pdf 2017-06-02 06:41 - 2017-06-02 06:41 - 00109944 _____ C:\Users\lucca\Downloads\faktura_109_2017_26-05-2017 (1).pdf 2017-06-02 05:37 - 2017-06-02 05:37 - 00110434 _____ C:\Users\lucca\Downloads\faktura_120_2017_02-06-2017.pdf 2017-06-02 05:36 - 2017-06-02 05:36 - 00110683 _____ C:\Users\lucca\Downloads\faktura_120_2017_31-05-2017 (1).pdf 2017-06-01 14:15 - 2017-06-01 14:45 - 00025024 _____ C:\Users\lucca\Desktop\Faktura i specyfikacja NR 3.xlsx 2017-06-01 07:14 - 2017-06-01 07:14 - 00111183 _____ C:\Users\lucca\Downloads\faktura_120_2017_31-05-2017.pdf 2017-05-31 11:19 - 2017-05-31 11:19 - 00133108 _____ C:\Users\lucca\Downloads\faktura_exp_tow_119_2017_31-05-2017 (1).pdf 2017-05-31 11:17 - 2017-05-31 11:17 - 00133092 _____ C:\Users\lucca\Downloads\faktura_exp_tow_119_2017_31-05-2017.pdf 2017-05-31 10:20 - 2017-05-31 10:20 - 00111268 _____ C:\Users\lucca\Downloads\faktura_118_2017_31-05-2017.pdf 2017-05-31 07:10 - 2017-05-31 07:10 - 00132960 _____ C:\Users\lucca\Downloads\faktura_exp_tow_117_2017_31-05-2017.pdf 2017-05-30 12:56 - 2017-05-30 12:56 - 00033375 _____ C:\Users\lucca\Downloads\Potwierdzenie_transakcji_nr_0006456297_300517.pdf 2017-05-30 11:26 - 2017-05-30 11:26 - 00110727 _____ C:\Users\lucca\Downloads\faktura_116_2017_30-05-2017.pdf 2017-05-30 07:27 - 2017-06-06 05:45 - 00000000 ____D C:\RecData 2017-05-29 09:54 - 2017-05-29 09:54 - 00249489 _____ C:\Users\lucca\Downloads\seryjny_wydruk (6).pdf 2017-05-29 08:29 - 2017-05-29 08:31 - 41177556 _____ C:\Users\lucca\Downloads\Ucho15-16 (1).rar 2017-05-29 08:22 - 2017-05-29 08:23 - 15487352 _____ C:\Users\lucca\Downloads\Ucho15-16.rar 2017-05-29 06:56 - 2017-05-29 07:12 - 37847152 _____ (Meteoryt Sp z o.o. ) C:\Users\lucca\Downloads\AsystentMagazyn_2016.exe 2017-05-29 06:53 - 2017-06-14 03:15 - 00000027 _____ C:\Users\lucca\OneDrive\Dokumenty\Asystent7-21.dat 2017-05-29 04:42 - 2017-05-29 04:42 - 09338196 _____ C:\Users\lucca\Downloads\3516C_IMX322_X_6.1.6.1.FLS.zip 2017-05-29 04:33 - 2017-05-29 04:33 - 04861184 _____ C:\Users\lucca\Downloads\Searcher_6.1.4.2.exe 2017-05-29 04:31 - 2017-05-29 04:31 - 01467751 _____ C:\Users\lucca\Downloads\6357136446017020001813519055.zip 2017-05-29 04:08 - 2017-05-29 04:08 - 00110333 _____ C:\Users\lucca\Downloads\faktura_113_2017_29-05-2017 (1).pdf 2017-05-29 04:07 - 2017-05-29 04:07 - 00110268 _____ C:\Users\lucca\Downloads\faktura_113_2017_29-05-2017.pdf 2017-05-29 02:16 - 2017-05-29 02:16 - 03240512 _____ C:\Users\lucca\Downloads\IPCOCX_X.exe 2017-05-27 07:16 - 2017-05-27 07:16 - 00376646 _____ C:\Users\lucca\Downloads\kontakt-do-kuriera.pdf.pdf 2017-05-27 05:02 - 2017-05-27 05:02 - 00079609 _____ C:\Users\lucca\Downloads\etykieta_2017-05-27_05-02-02.pdf 2017-05-27 04:39 - 2017-05-27 04:39 - 00079269 _____ C:\Users\lucca\Downloads\etykieta_2017-05-27_04-38-12.pdf 2017-05-27 04:35 - 2017-05-27 04:35 - 00058804 _____ C:\Users\lucca\Downloads\etykieta_2017-05-27_04-34-10.pdf 2017-05-26 11:05 - 2017-05-26 11:05 - 00109802 _____ C:\Users\lucca\Downloads\faktura_110_2017_26-05-2017 (1).pdf 2017-05-26 10:46 - 2017-05-26 10:46 - 00110091 _____ C:\Users\lucca\Downloads\faktura_113_2017_26-05-2017.pdf 2017-05-26 10:42 - 2017-05-26 10:42 - 00249310 _____ C:\Users\lucca\Downloads\seryjny_wydruk (5).pdf 2017-05-26 08:13 - 2017-05-31 07:15 - 00000000 ____D C:\Users\lucca\Desktop\ZDJECIA NITTIS 2017-05-26 07:23 - 2017-05-26 07:23 - 00110280 _____ C:\Users\lucca\Downloads\faktura_111_2017_26-05-2017.pdf 2017-05-26 06:19 - 2017-05-26 06:19 - 00110661 _____ C:\Users\lucca\Downloads\faktura_110_2017_26-05-2017.pdf 2017-05-26 05:49 - 2017-05-26 05:49 - 00110589 _____ C:\Users\lucca\Downloads\faktura_109_2017_26-05-2017.pdf 2017-05-25 12:18 - 2017-05-25 12:18 - 00110635 _____ C:\Users\lucca\Downloads\faktura_106_2017_24-05-2017 (1).pdf 2017-05-25 12:16 - 2017-05-25 12:16 - 00123575 _____ C:\Users\lucca\Downloads\podglad_faktura_106_2017_24-05-2017.pdf 2017-05-25 12:06 - 2017-05-25 12:06 - 00110794 _____ C:\Users\lucca\Downloads\faktura_108_2017_25-05-2017 (1).pdf 2017-05-25 10:50 - 2017-05-25 10:50 - 01767163 _____ C:\Users\lucca\Downloads\gkPlugin.exe 2017-05-25 10:50 - 2017-05-25 10:50 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\gkPlugin 2017-05-25 10:50 - 2017-05-25 10:50 - 00000000 ____D C:\gkPlugin 2017-05-25 10:16 - 2017-06-12 09:59 - 00000579 _____ C:\Users\lucca\Desktop\CMS.lnk 2017-05-25 09:15 - 2017-05-25 09:15 - 00110554 _____ C:\Users\lucca\Downloads\faktura_108_2017_25-05-2017.pdf 2017-05-24 12:04 - 2017-05-24 12:04 - 00078862 _____ C:\Users\lucca\Downloads\etykieta_2017-05-24_12-03-15.pdf 2017-05-24 12:03 - 2017-05-24 12:03 - 00058819 _____ C:\Users\lucca\Downloads\etykieta_2017-05-24_12-02-50.pdf 2017-05-24 11:57 - 2017-05-24 11:57 - 00078862 _____ C:\Users\lucca\Downloads\etykieta_2017-05-24_11-56-07.pdf 2017-05-24 09:13 - 2017-05-24 09:13 - 00133214 _____ C:\Users\lucca\Downloads\faktura_exp_tow_107_2017_24-05-2017 (2).pdf 2017-05-24 09:03 - 2017-05-24 09:03 - 00133481 _____ C:\Users\lucca\Downloads\faktura_exp_tow_107_2017_24-05-2017 (1).pdf 2017-05-24 08:57 - 2017-05-24 08:57 - 00132920 _____ C:\Users\lucca\Downloads\faktura_exp_tow_107_2017_24-05-2017.pdf 2017-05-24 08:29 - 2017-05-24 08:29 - 00110873 _____ C:\Users\lucca\Downloads\faktura_106_2017_24-05-2017.pdf 2017-05-24 05:50 - 2017-05-24 05:50 - 00110160 _____ C:\Users\lucca\Downloads\faktura_105_2017_24-05-2017.pdf 2017-05-24 05:49 - 2017-05-24 05:49 - 00110097 _____ C:\Users\lucca\Downloads\faktura_104_2017_24-05-2017.pdf 2017-05-23 08:23 - 2017-05-23 08:23 - 00111049 _____ C:\Users\lucca\Downloads\faktura_103_2017_23-05-2017.pdf 2017-05-23 05:50 - 2017-05-23 05:50 - 00109796 _____ C:\Users\lucca\Downloads\faktura_102_2017_23-05-2017.pdf 2017-05-22 11:05 - 2017-05-22 11:05 - 00233060 _____ C:\Users\lucca\Downloads\OFERTA TAPETY P. DABROWSCY C.D.pdf 2017-05-22 09:48 - 2017-05-22 09:48 - 00110835 _____ C:\Users\lucca\Downloads\faktura_100_2017_22-05-2017 (1).pdf 2017-05-22 09:46 - 2017-05-22 09:46 - 00109899 _____ C:\Users\lucca\Downloads\faktura_101_2017_22-05-2017.pdf 2017-05-22 09:44 - 2017-05-22 09:44 - 00110835 _____ C:\Users\lucca\Downloads\faktura_100_2017_22-05-2017.pdf 2017-05-22 09:31 - 2017-05-22 09:31 - 00110556 _____ C:\Users\lucca\Downloads\faktura_99_2017_22-05-2017.pdf 2017-05-22 07:48 - 2017-05-22 07:49 - 137736642 _____ C:\Users\lucca\Downloads\2017-05-22_06-58-37.mp4 2017-05-20 12:47 - 2017-05-20 12:47 - 00014648 _____ C:\Users\lucca\OneDrive\Dokumenty\REKLAMACJA BROOMAN MODO.odt 2017-05-20 08:25 - 2017-05-20 08:25 - 00109915 _____ C:\Users\lucca\Downloads\faktura_99_2017_20-05-2017.pdf 2017-05-20 05:38 - 2017-05-20 05:42 - 00000000 ____D C:\Users\lucca\Desktop\Nowy folder (3) 2017-05-19 11:13 - 2017-05-19 11:13 - 00111710 _____ C:\Users\lucca\Downloads\faktura_98_2017_19-05-2017.pdf 2017-05-19 06:50 - 2017-05-19 06:50 - 00109960 _____ C:\Users\lucca\Downloads\faktura_97_2017_19-05-2017 (1).pdf 2017-05-19 06:49 - 2017-05-19 06:49 - 00110372 _____ C:\Users\lucca\Downloads\faktura_97_2017_19-05-2017.pdf 2017-05-19 06:05 - 2017-05-19 06:05 - 00079577 _____ C:\Users\lucca\Downloads\etykieta_2017-05-19_06-04-36.pdf 2017-05-19 06:05 - 2017-05-19 06:05 - 00079151 _____ C:\Users\lucca\Downloads\etykieta_2017-05-19_06-04-57.pdf 2017-05-19 06:04 - 2017-05-19 06:04 - 00080275 _____ C:\Users\lucca\Downloads\etykieta_2017-05-19_06-03-59.pdf 2017-05-19 06:00 - 2017-05-19 06:00 - 00059872 _____ C:\Users\lucca\Downloads\etykieta_2017-05-19_05-59-56.pdf 2017-05-18 11:55 - 2017-05-18 11:55 - 00033535 _____ C:\Users\lucca\Downloads\Potwierdzenie_transakcji_nr_0006014922_180517.pdf 2017-05-18 09:09 - 2017-05-18 09:09 - 00111659 _____ C:\Users\lucca\Downloads\faktura_97_2017_18-05-2017.pdf 2017-05-18 06:39 - 2017-05-18 06:39 - 00178188 _____ C:\Users\lucca\Downloads\0025178.pdf 2017-05-18 03:10 - 2017-05-18 03:10 - 00110938 _____ C:\Users\lucca\Downloads\faktura_96_2017_18-05-2017.pdf ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-06-17 20:30 - 2017-03-13 04:00 - 00000000 ____D C:\ProgramData\AliAntiVirusED 2017-06-17 20:28 - 2016-10-01 10:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-06-17 20:27 - 2016-07-16 08:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-06-17 20:24 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-06-17 20:24 - 2016-02-29 08:06 - 00000000 ____D C:\Users\lucca\AppData\Local\ElevatedDiagnostics 2017-06-17 20:23 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-06-17 20:23 - 2016-01-12 19:37 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-06-17 20:22 - 2016-10-01 09:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-06-17 19:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache 2017-06-17 19:25 - 2016-07-17 00:05 - 05913120 _____ C:\WINDOWS\system32\perfh015.dat 2017-06-17 19:25 - 2016-07-17 00:05 - 01696864 _____ C:\WINDOWS\system32\perfc015.dat 2017-06-17 19:25 - 2016-01-12 19:37 - 00005638 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-17 19:20 - 2016-10-01 09:40 - 04484536 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-17 19:18 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-06-17 19:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-06-17 19:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-06-17 19:18 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF 2017-06-17 16:20 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-06-17 10:15 - 2016-10-01 09:47 - 00000000 ____D C:\Users\lucca 2017-06-17 10:12 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-17 10:11 - 2016-01-20 13:23 - 00000000 ____D C:\Users\lucca\AppData\LocalLow\Temp 2017-06-17 10:10 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2017-06-17 10:04 - 2016-02-16 07:45 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-06-16 10:09 - 2016-01-28 14:48 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Foxmail7 2017-06-16 09:55 - 2016-10-06 07:48 - 00000000 ____D C:\ProgramData\firebird 2017-06-15 20:10 - 2016-01-12 19:37 - 00000000 ____D C:\Users\lucca\AppData\Local\Packages 2017-06-15 20:00 - 2016-06-20 09:30 - 00000000 ____D C:\Users\lucca\AppData\Local\aef 2017-06-15 20:00 - 2016-06-20 09:30 - 00000000 ____D C:\ProgramData\boost_interprocess 2017-06-15 18:43 - 2017-03-13 07:40 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-06-15 16:58 - 2016-06-20 09:20 - 00000000 ____D C:\Users\lucca\AppData\Roaming\TaobaoProtect 2017-06-15 16:24 - 2016-04-19 08:30 - 00000000 ____D C:\CMS 2017-06-15 12:58 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-06-15 12:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-06-15 12:58 - 2016-03-06 21:56 - 00000000 ____D C:\Program Files\Microsoft Office 2017-06-14 12:26 - 2016-10-06 07:47 - 00000000 ____D C:\Program Files\PhotoSoft 2017-06-14 12:26 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Portable Devices 2017-06-14 12:26 - 2016-01-15 12:46 - 00000000 ____D C:\Program Files\GIMP 2 2017-06-14 07:08 - 2016-01-12 20:35 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-06-14 06:51 - 2015-10-30 16:30 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\mrt.exe 2017-06-13 04:05 - 2016-05-09 08:35 - 00000000 ____D C:\Users\lucca\Desktop\EXPORT EU 2017-06-09 22:38 - 2016-06-22 04:06 - 00000000 ____D C:\KMPlayer 2017-06-09 08:38 - 2016-04-20 15:51 - 00000000 ____D C:\Capture 2017-06-09 04:59 - 2017-01-10 05:40 - 00000000 ____D C:\Users\lucca\Desktop\yunitarget 2017-06-03 08:36 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-06-03 08:36 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-31 02:17 - 2016-01-12 20:40 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-05-29 07:15 - 2017-03-03 10:06 - 00001499 _____ C:\Users\lucca\Desktop\Magazyn 2016.lnk 2017-05-29 07:15 - 2017-03-03 10:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magazyn 2016 2017-05-29 02:16 - 2016-04-19 18:51 - 00000000 ____D C:\WINDOWS\Netview_X OCX 2017-05-29 02:16 - 2016-04-19 18:51 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netview_X OCX 2017-05-25 10:16 - 2016-04-19 08:31 - 00000000 ____D C:\Users\lucca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CMS 2017-05-19 06:52 - 2016-11-06 17:16 - 00000000 ____D C:\kopie zapasowe EasyUploader 2017-05-19 06:51 - 2016-10-06 07:47 - 00001064 _____ C:\Users\lucca\Desktop\EasyUploader v3.lnk 2017-05-18 12:00 - 2017-04-20 10:01 - 00012800 _____ C:\Users\lucca\Desktop\Lucca Заказ не произвели.xls ==================== Pliki w katalogu głównym wybranych folderów ======= 2016-07-19 09:47 - 2016-08-26 08:18 - 0005120 _____ () C:\Users\lucca\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-10-17 06:20 - 2016-10-17 06:36 - 0000600 _____ () C:\Users\lucca\AppData\Local\PUTTY.RND 2017-04-05 13:19 - 2017-04-05 13:19 - 0000737 _____ () C:\Users\lucca\AppData\Local\recently-used.xbel 2016-11-21 15:07 - 2017-03-29 10:28 - 0000744 _____ () C:\Users\lucca\AppData\Local\recently-used.xbel.bak 2016-05-14 09:48 - 2016-05-14 09:48 - 0000115 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-06-17 16:02 ==================== Koniec FRST.txt ============================