Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 24-11-2017 01 Uruchomiony przez Dominik_PC (administrator) AKTIVUM-PC (25-11-2017 13:04:47) Uruchomiony z D:\@ POBIERANIE @ Załadowane profile: Dominik_PC (Dostępne profile: Dominik_PC & Gość & DefaultAppPool) Platform: Windows 10 Pro Wersja 1607 14393.1884 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Lenovo.) C:\Windows\System32\LPlatSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe () C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\ACSDAG\ACSDAGServer.exe (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (Comarch S.A.) C:\Program Files (x86)\Comarch\Comarch ERP Menadżer Kluczy\ComarchML.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe () C:\Windows\SysWOW64\srvany.exe () C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\ACSDAG\CrashServer_Test.exe () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe (COMODO) C:\Program Files (x86)\Comodo\Internet Security Essentials\isesrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ELISOFT\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\pg_ctl.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Realtek) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtlService.exe () C:\Windows\runSW.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe () C:\Windows\KMService.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWLan.exe (Realtek) C:\Windows\SwUSB.exe Brak dostępu do procesu -> ZeroConfigService.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\postgres.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (ACD Systems) C:\Program Files\ACD Systems\ACDSee Pro\9.0\acdIDInTouch2.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Winstep Software Technologies) C:\Program Files (x86)\Winstep\Nexus.exe (ownCloud) C:\Program Files (x86)\ownCloud\owncloud.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5510d series\Bin\ScanToPCActivationApp.exe (IDRIX) C:\Program Files\VeraCrypt\VeraCrypt.exe () C:\Users\Dominik_PC\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe (Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe (Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTStackServer.exe () C:\Program Files (x86)\hicloud\update_server\startUp.exe () C:\Program Files (x86)\hicloud\update_server\SPUpDateServer.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (COMODO) C:\Program Files (x86)\Comodo\Internet Security Essentials\vkise.exe (Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe (Intel Corporation) C:\Program Files\Intel\STCServ\STCServ.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicator.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE (Lenovo.) C:\Windows\System32\LPlatSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Farbar) D:\@ POBIERANIE @\FRST64(1).exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) "Path" (C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\;C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\DATA\;C:\Program Files (x86)\Common Files\Intel\Shared Files\cpp\bin\Intel64;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tool;C:\Program Files (x86)\ENCARD\;C:\Program Files\ENCARD\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\QuickTime\QTSystem\ -> %SystemRoot%\System32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SystemRoot%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\;C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\DATA\;C:\Program Files (x86)\Common Files\Intel\Shared Files\cpp\bin\Intel64;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;%SystemRoot%\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tool;C:\Program Files (x86)\ENCARD\;C:\Program Files\ENCARD\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\QuickTime\QTSystem\) <==== Repaired successfully HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation) HKLM\...\Run: [ACPW09EN] => C:\Program Files\ACD Systems\ACDSee Pro\9.0\acdIDInTouch2.exe [2087696 2015-09-14] (ACD Systems) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2015-06-08] (Power Software Ltd) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499640 2017-03-28] (Adobe Systems Inc.) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [477064 2013-12-22] (Autodesk Inc.) HKLM-x32\...\Run: [SPUpDateServerrun] => C:\Program Files (x86)\hicloud\update_server\startUp.exe [15232 2015-06-15] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation) HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-08-08] (COMODO) Winlogon\Notify\igfxcui: igfxdev.dll [X] Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [Nexus] => C:\Program Files (x86)\Winstep\Nexus.exe [13047936 2016-06-27] (Winstep Software Technologies) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [ownCloud] => C:\Program Files (x86)\ownCloud\owncloud.exe [1995776 2017-08-30] (ownCloud) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [COLS] => C:\Program Files (x86)\Comarch\Comarch ERP Menadżer Kluczy\ComarchMLTray.exe [304648 2015-04-01] (Comarch) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [HP Photosmart 5510d series (NET)] => C:\Program Files\HP\HP Photosmart 5510d series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-08] (Autodesk, Inc.) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [ACDSeeCommanderPro9] => C:\Program Files\ACD Systems\ACDSee Pro\9.0\ACDSeeCommanderPro9.exe [3212296 2015-09-21] () HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [255224 2016-11-29] (TomTom) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [Napisy24Update] => C:\Program Files (x86)\Napisy24\Napisy24Update.exe [3709896 2015-11-04] (Napisy24.pl) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [Spotify Web Helper] => C:\Users\Dominik_PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-10-29] (Spotify Ltd) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [VeraCrypt] => C:\Program Files\VeraCrypt\VeraCrypt.exe [5489808 2017-01-18] (IDRIX) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [MiPhoneManager] => C:\Users\Dominik_PC\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [146224 2017-03-28] () HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110376 2017-10-18] (Siber Systems) HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\RunOnce: [Uninstall C:\Users\Dominik_PC\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dominik_PC\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {3db5e58e-566d-11e7-8496-068d392a5e59} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {7824598f-5071-11e7-8494-068d392a5e59} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {8359fa88-88f2-11e7-84b1-068d392a5e59} - "K:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {858c904c-47bf-11e7-8491-068d392a5e59} - "J:\LaunchU3.exe" -a HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {8a147c85-a78e-11e6-83b7-068d392a5e59} - "K:\LauncherXPB.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {a8a05670-118f-11e7-8431-068d392a5e59} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\MountPoints2: {b08c87c4-5bf3-11e7-8498-068d392a5e59} - "H:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation) HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-28] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation.) BootExecute: autocheck autochk /m /P \Device\HarddiskVolume15autocheck autochk * GroupPolicy: Ograniczenia <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{09b7491f-93d0-41ec-8bc8-0baa917aeead}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{42f828ff-f293-4b8b-b02e-872fe6a3d9f7}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{5985a1a9-8338-47a2-b6d4-a92c2951c29e}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{9cef07e1-06cf-4a3b-9b4d-6e9d7d6f25b6}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{c16595fd-0bd7-4a61-a08b-024d40fd5fa4}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-09-12] (Microsoft Corporation) BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-10-18] (Siber Systems Inc.) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation) BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-10-18] (Siber Systems Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-18] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-18] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-10-18] (Siber Systems Inc.) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-10-18] (Siber Systems Inc.) Toolbar: HKU\S-1-5-21-1172392543-3974208975-1717154680-1001 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-10-18] (Siber Systems Inc.) IE Session Restore: HKU\S-1-5-21-1172392543-3974208975-1717154680-1001 -> [funkcja włączona] Edge: ====== Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-04-14] FireFox: ======== FF DefaultProfile: j2k5dl6p.default FF ProfilePath: C:\Users\Dominik_PC\AppData\Roaming\TomTom\HOME\Profiles\gaelg05s.default [2016-12-20] FF Extension: (Emulator) - C:\Users\Dominik_PC\AppData\Roaming\TomTom\HOME\Profiles\gaelg05s.default\Extensions\Navcore.9.450.890926@tomtom.com [2015-08-02] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (RenaultTheme) - C:\Users\Dominik_PC\AppData\Roaming\TomTom\HOME\Profiles\gaelg05s.default\Extensions\RenaultTheme@tomtom.com [2015-07-18] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2016-12-20] [Przestarzałe] [Brak podpisu cyfrowego] FF ProfilePath: C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default [2017-11-25] FF Homepage: Mozilla\Firefox\Profiles\j2k5dl6p.default -> about:home FF Extension: (MEGA) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\firefox@mega.co.nz.xpi [2017-11-23] FF Extension: (EverSync - Sync bookmarks, backup favorites) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\fvdmedia@gmail.com.xpi [2017-11-11] FF Extension: (To Google Translate) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2017-04-19] FF Extension: (adblockgmail) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\jid1-dswFGkUjb2SIHv@jetpack.xpi [2016-12-14] FF Extension: (Tab Memory Usage) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\jid1-fRvgLzKONCsPew@jetpack.xpi [2017-04-17] [Przestarzałe] FF Extension: (AdBlocker for YouTube™) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi [2017-09-13] FF Extension: (RoboForm Password Manager) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\rf-firefox@siber.com.xpi [2017-11-17] FF Extension: (Session Sync) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\session-sync@gabrielivanica.com.xpi [2017-03-09] [Przestarzałe] FF Extension: (Tab Session Manager) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\Tab-Session-Manager@sienori.xpi [2017-11-20] FF Extension: (uBlock Origin) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\uBlock0@raymondhill.net.xpi [2017-11-09] FF Extension: (Session Manager) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2017-02-05] [Przestarzałe] FF Extension: (Google™ Shortcuts - All services at a glance) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{5C46D283-ABDE-4dce-B83C-08881401921C}.xpi [2017-11-23] FF Extension: (Download Status Bar) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2016-10-01] [Przestarzałe] FF Extension: (Flash and Video Download) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}.xpi [2017-11-15] FF Extension: (Adblock Plus) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-09] FF Extension: (Auto Unload Tab) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{d3c46ca0-999d-11da-a72b-0800200c9a66}.xpi [2017-04-14] [Przestarzałe] FF Extension: (Extended Statusbar) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{daf44bf7-a45e-4450-979c-91cf07434c3d}.xpi [2016-06-16] [Przestarzałe] FF Extension: (Tab Mix Plus) - C:\Users\Dominik_PC\AppData\Roaming\Mozilla\Firefox\Profiles\j2k5dl6p.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2017-08-30] [Przestarzałe] FF ProfilePath: C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default [2016-05-23] FF Extension: (CSS Stylesheet Editor) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\csseditor@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (EyeDropper) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\eyedropper@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (FontSquirrel Manager) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\fs@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Fullscreen) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\fullscreen@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Google Font Directory Manager) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\gfd@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Czech (CZ) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-cs@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Deutsch (DE) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-de@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (English (US) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-en-US@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Español (España) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-es-ES@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Suomenkielinen (FI) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-fi@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Français Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-fr@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Galego (España) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-gl@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Hebrew (IL) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-he@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Magyar (HU) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-hu@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Italiano (IT) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-it@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Japanese Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-ja@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Korean (KR) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-ko@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Nederlands (NL) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-nl@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Polski Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-pl@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Slovenski jezik Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-sl@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (српски (sr) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-sr@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Svenska (SE) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-sv-SE@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Chinese Simplified (zh-CN) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-zh-CN@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Traditional Chinese (zh-TW) Language Pack) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\langpack-zh-TW@bluegriffon.org.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (MathML) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\mathml@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Opquast Accessibility First Step) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\op1@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Snippets) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\snippets@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (SVG-edit) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\svg-edit@googlegroups.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Table Layouts) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\tablelayout@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (One-click Templates) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\templatesManager@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Thumbnailer) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\thumbnailer@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF Extension: (Tip of the Day) - C:\Users\Dominik_PC\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\eaa3xcu4.default\Extensions\tipoftheday@bluegriffon.com.xpi [2016-05-23] [Przestarzałe] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-11-25] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2017-05-09] [Przestarzałe] FF HKLM-x32\...\Firefox\Extensions: [rf-firefox@siber.com] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi FF Extension: (RoboForm Toolbar) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2017-10-18] [Przestarzałe] FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi FF HKLM-x32\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi FF HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Firefox\Extensions: [rf-firefox@siber.com] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi FF HKU\S-1-5-21-1172392543-3974208975-1717154680-1001\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] () FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [Brak pliku] FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku] FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [Brak pliku] FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-18] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-18] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-03-28] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems) FF Plugin-x32: shipin7 -> C:\Program Files (x86)\hicloud\PCPlayer\npSP7WebVideoPlugin.dll [2016-05-09] () FF Plugin-x32: shipin7safebox -> C:\Program Files (x86)\hicloud\PCPlayer\npSafePlugin.dll [2016-05-09] () FF Plugin-x32: shipin7update -> C:\Program Files (x86)\hicloud\PCPlayer\npUpdataPlugin.dll [2016-05-09] () Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.google.pl/ CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default [2017-11-22] CHR Extension: (Prezentacje Google) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-25] CHR Extension: (Dokumenty Google) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-26] CHR Extension: (Dysk Google) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-26] CHR Extension: (YouTube) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Google Search) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-26] CHR Extension: (Adobe Acrobat) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-14] CHR Extension: (Arkusze Google) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-25] CHR Extension: (Dokumenty Google offline) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-04] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-14] CHR Extension: (Gmail) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-26] CHR Extension: (Chrome Media Router) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-12] CHR Extension: (RoboForm Password Manager) - C:\Users\Dominik_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2017-08-12] CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2017-07-21] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-03-28] CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2017-07-21] Opera: ======= OPR Extension: (Brak nazwy) - C:\Users\Dominik_PC\AppData\Roaming\Opera Software\Opera Stable\Extensions\ggepjhbdgijjkbelnggboeoehacbphed [2017-07-21] OPR Extension: (Background worker) - C:\Users\Dominik_PC\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2017-04-14] OPR Extension: (RoboForm Password Manager) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome [2017-10-18] StartMenuInternet: (HKLM) OperaStable - c:\program files\opera\Launcher.exe ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ACSDAGServer; C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\ACSDAG\ACSDAGServer.exe [7168 2015-12-16] () [Brak podpisu cyfrowego] R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [576904 2013-12-22] (Autodesk Inc.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated) S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) S2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab) R2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.) R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation.) S3 ComarchAutomatSynchronizacji; C:\Program Files (x86)\Comarch ERP Optima\ComarchOptimaSerwisOperacjiAutomatycznych.exe [60424 2015-04-16] (Comarch S.A.) R2 ComarchML; C:\Program Files (x86)\Comarch\Comarch ERP Menadżer Kluczy\ComarchML.exe [2989064 2015-04-01] (Comarch S.A.) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [39616 2016-12-06] (CHENGDU YIWO Tech Development Co., Ltd) S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries) R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-04-29] (SafeNet Inc.) R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] () S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Brak podpisu cyfrowego] R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation) R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-08] (COMODO) S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\x64\vssbridge64.exe [426416 2017-11-25] (AO Kaspersky Lab) R2 KMService; C:\WINDOWS\SysWOW64\srvany.exe [8192 2015-08-09] () [Brak podpisu cyfrowego] S3 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab) R2 LPlatSvc; C:\WINDOWS\system32\LPlatSvc.exe [711248 2017-04-01] (Lenovo.) R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 MSSQL$ELISOFT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ELISOFT\MSSQL\Binn\sqlservr.exe [43130032 2015-03-29] (Microsoft Corporation) R2 MSSQL$OPTIMA; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe [43130032 2015-03-29] (Microsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-12-04] () R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation) R2 PostgreSQL4200; C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\PostgreSQL\bin\pg_ctl.exe [94720 2015-12-16] (PostgreSQL Global Development Group) [Brak podpisu cyfrowego] R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc) S3 RBMS_OptimaBI; C:\Program Files (x86)\Comarch ERP Optima\Analizy BI\bin\reports book\Comarch.BI.Mobile.Service.exe [310272 2014-10-22] (Comarch) [Brak podpisu cyfrowego] S3 RBSS_OptimaBI; C:\Program Files (x86)\Comarch ERP Optima\Analizy BI\bin\reports book\Comarch.Msp.ReportsBook.Subscriptions.Service.exe [121344 2014-10-22] (Comarch) [Brak podpisu cyfrowego] R2 RealtekWlanU; C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek) S2 RTLDHCPService; C:\Program Files (x86)\netis\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek) R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] () S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2017-08-08] (Microsoft Corporation) S4 SQLAgent$ELISOFT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ELISOFT\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-29] (Microsoft Corporation) S4 SQLAgent$OPTIMA; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-29] (Microsoft Corporation) R2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103704 2017-10-09] (Microsoft Corporation) S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-12-04] (Intel® Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-25] () S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-25] () S1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R3 bcbtums; C:\WINDOWS\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.) R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) S3 EUBAKUP0; C:\WINDOWS\system32\drivers\EUBAKUP0.sys [65192 2016-11-28] (CHENGDU YIWO Tech Development Co., Ltd) R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [52392 2016-11-28] () S3 EUBKMON0; C:\WINDOWS\system32\drivers\EUBKMON0.sys [52392 2016-11-28] () R1 EUDSKACS; C:\WINDOWS\system32\drivers\eudskacs.sys [18472 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd) [Brak podpisu cyfrowego] R1 EUFDDISK; C:\WINDOWS\system32\drivers\EuFdDisk.sys [192552 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd) [Brak podpisu cyfrowego] S3 EUFDDISK0; C:\WINDOWS\system32\drivers\EUFDDISK0.sys [196776 2016-11-28] (CHENGDU YIWO Tech Development Co., Ltd) S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-07-26] (Huawei Technologies Co., Ltd.) S3 FTDIBUS; C:\WINDOWS\system32\drivers\ftdibus.sys [129448 2017-09-19] (Future Technology Devices International Ltd.) S3 FTSER2K; C:\WINDOWS\system32\drivers\ftser2k.sys [89800 2017-08-24] (Future Technology Devices International Ltd.) S3 GemCCID; C:\WINDOWS\system32\DRIVERS\GemCCID.sys [139632 2015-07-10] (Gemalto) S3 GVTDrv64; C:\WINDOWS\GVTDrv64.sys [30528 2017-05-05] () R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-04-29] (SafeNet Inc.) S3 HWHandSet; C:\WINDOWS\system32\DRIVERS\hw_quusbmdm.sys [226560 2017-07-26] (Huawei Technologies Co., Ltd.) S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\hw_cdcacm.sys [127360 2017-07-26] (Huawei Technologies Co., Ltd.) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.) S3 i8042HDR; C:\WINDOWS\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider) S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36568 2013-09-30] (IObit) R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO) R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab) S0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [70872 2017-10-15] (AO Kaspersky Lab) S1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [89952 2017-10-15] (AO Kaspersky Lab) R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29816 2016-10-14] (AO Kaspersky Lab) R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [207576 2017-11-25] (AO Kaspersky Lab) R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [594144 2017-11-25] (AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1055448 2017-11-25] (AO Kaspersky Lab) R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2016-10-12] (AO Kaspersky Lab) S3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [57056 2016-12-23] (AO Kaspersky Lab) R4 klkbdflt2; C:\WINDOWS\system32\DRIVERS\klkbdflt2.sys [48352 2016-12-21] (AO Kaspersky Lab) S3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50672 2017-10-15] (AO Kaspersky Lab) S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [44768 2017-01-20] (AO Kaspersky Lab) R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project) U0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [230312 2017-11-25] (AO Kaspersky Lab) U3 klupd_klif_arkmon_C4E91AFA; C:\ProgramData\Kaspersky Lab\AVP18.0.0\temp\C4E91AFA5AFC23BDC8CC2F6F9400EADF\klupd_klif_arkmon.sys [230312 2017-11-25] (AO Kaspersky Lab) U3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-11-25] (AO Kaspersky Lab) U3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [253200 2017-11-25] (AO Kaspersky Lab) U0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [107680 2017-11-25] (AO Kaspersky Lab) U3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173664 2017-11-25] (AO Kaspersky Lab) S4 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [93920 2016-12-20] (AO Kaspersky Lab) R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136176 2017-10-15] (AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199360 2017-10-15] (AO Kaspersky Lab) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation) R2 NPF; C:\WINDOWS\SysWoW64\drivers\npf64.sys [36600 2015-12-16] (Riverbed Technology, Inc.) S3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () S3 risdxc; C:\WINDOWS\System32\drivers\risdxc64.sys [105472 2012-07-04] (REDC) [Brak podpisu cyfrowego] S4 RsFx0300; C:\WINDOWS\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation) S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-06-23] (Realtek ) R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [5195776 2016-07-16] (Realtek Semiconductor Corporation ) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 TAOAccelerator; C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys [88632 2016-01-28] (Tencent) R2 TAOKernelDriver; C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys [127800 2016-01-28] (Tencent Technology(Shenzhen) Company Limited) S3 TFsFlt; C:\WINDOWS\System32\Drivers\TFsFltX64.sys [87864 2016-01-28] (电脑管家) S3 TRLNDISMON; C:\WINDOWS\system32\DRIVERS\TRLNDISMON.sys [31392 2015-03-23] (Tarlogic) S3 usbser; C:\WINDOWS\System32\drivers\usbser.sys [33280 2017-07-26] (Microsoft Corporation) [Brak podpisu cyfrowego] R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [131144 2017-04-28] (Oracle Corporation) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [205952 2017-04-28] (Oracle Corporation) S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [137920 2017-04-28] (Oracle Corporation) R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [467368 2017-01-18] (IDRIX) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 CnxtHdAudService; \SystemRoot\system32\drivers\CHDRT64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-25 13:03 - 2017-11-25 13:04 - 000000000 ____D C:\FRST 2017-11-25 11:42 - 2017-11-25 11:42 - 000253200 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys 2017-11-25 11:41 - 2017-11-25 11:41 - 000230312 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys 2017-11-25 11:41 - 2017-11-25 11:41 - 000173664 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys 2017-11-25 11:41 - 2017-11-25 11:41 - 000107680 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys 2017-11-25 11:41 - 2017-11-25 11:41 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys 2017-11-25 11:41 - 2017-11-25 11:41 - 000001323 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk 2017-11-25 11:41 - 2017-11-25 11:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection 2017-11-25 11:40 - 2017-11-25 12:56 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2017-11-25 11:40 - 2017-11-25 11:41 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2017-11-25 11:40 - 2017-11-25 11:41 - 000000000 ____D C:\Program Files\Common Files\AV 2017-11-25 11:40 - 2017-11-25 11:40 - 001055448 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys 2017-11-25 11:40 - 2017-11-25 11:40 - 000594144 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys 2017-11-25 11:40 - 2017-11-25 11:40 - 000207576 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys 2017-11-25 11:40 - 2017-11-25 11:40 - 000149304 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll 2017-11-25 11:40 - 2017-11-25 11:40 - 000002170 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk 2017-11-25 11:40 - 2017-11-25 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2017-11-25 11:40 - 2017-11-25 11:40 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab 2017-11-25 11:40 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll 2017-11-20 18:36 - 2017-11-20 18:36 - 036872408 _____ (Mozilla) C:\Users\Dominik_PC\Downloads\Mozilla Firefox 56.0.2.exe 2017-11-20 18:12 - 2017-11-20 18:12 - 000000000 _____ C:\WINDOWS\System32\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82} 2017-11-20 18:12 - 2017-11-09 13:13 - 000436928 _____ (COMODO) C:\ProgramData\cmdres.dll 2017-11-20 18:00 - 2017-11-20 18:00 - 000000000 ____D C:\WINDOWS\Panther 2017-11-20 10:55 - 2017-11-20 10:55 - 000000000 ____D C:\Users\Dominik_PC\Documents\Niestandardowe szablony pakietu Office 2017-11-20 09:22 - 2017-08-08 03:46 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll 2017-11-20 09:22 - 2017-08-08 03:46 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll 2017-11-20 09:22 - 2017-03-29 22:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys 2017-11-20 09:21 - 2017-11-20 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2017-11-20 09:21 - 2017-11-20 18:19 - 000000000 ____D C:\Program Files (x86)\Comodo 2017-11-20 09:19 - 2017-11-20 18:24 - 000000000 ____D C:\ProgramData\Comodo 2017-11-20 09:15 - 2017-11-25 09:18 - 000003990 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1492165389 2017-11-20 09:15 - 2017-11-25 09:18 - 000001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk 2017-11-20 09:11 - 2017-11-20 09:11 - 000001920 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2017-11-20 09:11 - 2017-11-20 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2017-11-20 09:10 - 2017-11-20 09:11 - 000000000 ____D C:\Program Files (x86)\QuickTime 2017-11-20 09:10 - 2017-11-20 09:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-11-20 09:10 - 2017-11-20 09:10 - 000000000 ____D C:\ProgramData\Apple Computer 2017-11-20 09:07 - 2017-11-20 09:07 - 000000000 ___RD C:\Program Files (x86)\Skype 2017-11-20 09:07 - 2017-11-20 09:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-11-20 08:57 - 2017-11-20 08:57 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys 2017-11-20 08:53 - 2017-11-20 18:00 - 000000000 ____D C:\ProgramData\AVAST Software 2017-11-15 09:33 - 2017-11-01 23:44 - 000581048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-11-15 09:33 - 2017-11-01 23:44 - 000341976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2017-11-15 09:33 - 2017-11-01 23:44 - 000269152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2017-11-15 09:33 - 2017-11-01 23:44 - 000139096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2017-11-15 09:33 - 2017-11-01 23:44 - 000120416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2017-11-15 09:33 - 2017-11-01 23:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2017-11-15 09:33 - 2017-11-01 23:26 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-11-15 09:33 - 2017-11-01 23:19 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2017-11-15 09:33 - 2017-11-01 23:17 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-11-15 09:33 - 2017-11-01 23:17 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll 2017-11-15 09:33 - 2017-11-01 23:16 - 012349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-11-15 09:33 - 2017-11-01 23:15 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2017-11-15 09:33 - 2017-11-01 23:14 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-11-15 09:33 - 2017-11-01 23:14 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-11-15 09:33 - 2017-11-01 23:13 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-11-15 09:33 - 2017-11-01 23:12 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-11-15 09:33 - 2017-11-01 23:12 - 000656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-11-15 09:33 - 2017-11-01 23:12 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-11-15 09:33 - 2017-11-01 23:11 - 002997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-11-15 09:33 - 2017-11-01 23:11 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-11-15 09:33 - 2017-11-01 23:11 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-11-15 09:33 - 2017-11-01 23:11 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2017-11-15 09:33 - 2017-11-01 23:06 - 013441536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-11-15 09:33 - 2017-11-01 23:05 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-11-15 09:33 - 2017-11-01 23:04 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-11-15 09:33 - 2017-11-01 23:04 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-11-15 09:33 - 2017-11-01 23:04 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-11-15 09:33 - 2017-11-01 23:03 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-11-15 09:33 - 2017-11-01 23:01 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-11-15 09:33 - 2017-11-01 23:00 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-11-15 09:33 - 2017-11-01 20:44 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-11-15 09:33 - 2017-10-09 03:41 - 000082272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2017-11-15 09:33 - 2017-10-09 03:37 - 000500576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2017-11-15 09:33 - 2017-10-09 03:36 - 001470808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2017-11-15 09:33 - 2017-10-09 03:34 - 000965464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2017-11-15 09:33 - 2017-10-09 03:34 - 000082608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll 2017-11-15 09:33 - 2017-10-09 03:30 - 000558424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2017-11-15 09:33 - 2017-10-09 03:30 - 000381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-11-15 09:33 - 2017-10-09 03:30 - 000169304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2017-11-15 09:33 - 2017-10-09 03:28 - 000482384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2017-11-15 09:33 - 2017-10-09 03:26 - 002529120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-11-15 09:33 - 2017-10-09 03:23 - 020967832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-11-15 09:33 - 2017-10-09 03:16 - 000178008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2017-11-15 09:33 - 2017-10-09 03:02 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2017-11-15 09:33 - 2017-10-09 03:02 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll 2017-11-15 09:33 - 2017-10-09 03:00 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCredential.dll 2017-11-15 09:33 - 2017-10-09 02:59 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2017-11-15 09:33 - 2017-10-09 02:58 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2017-11-15 09:33 - 2017-10-09 02:56 - 007626240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-11-15 09:33 - 2017-10-09 02:53 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2017-11-15 09:33 - 2017-10-09 02:52 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-11-15 09:33 - 2017-10-09 02:51 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll 2017-11-15 09:33 - 2017-10-09 02:50 - 001373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-11-15 09:33 - 2017-10-09 02:46 - 006474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-11-15 09:33 - 2017-10-09 02:45 - 000779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll 2017-11-15 09:33 - 2017-10-09 02:44 - 004423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-11-15 09:33 - 2017-10-09 02:44 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-11-15 09:32 - 2017-11-02 00:06 - 000223584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 002032472 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-11-15 09:32 - 2017-11-01 23:53 - 001578848 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000678752 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000613720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000612192 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000484184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000379232 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000259936 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000190296 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-11-15 09:32 - 2017-11-01 23:53 - 000067928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2017-11-15 09:32 - 2017-11-01 23:53 - 000034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-11-15 09:32 - 2017-11-01 23:48 - 002253656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-11-15 09:32 - 2017-11-01 23:46 - 000635456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-11-15 09:32 - 2017-11-01 23:46 - 000484184 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2017-11-15 09:32 - 2017-11-01 23:44 - 002187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-11-15 09:32 - 2017-11-01 23:44 - 000658272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-11-15 09:32 - 2017-11-01 23:44 - 000402264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-11-15 09:32 - 2017-11-01 23:43 - 001090912 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-11-15 09:32 - 2017-11-01 23:43 - 000983904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-11-15 09:32 - 2017-11-01 23:43 - 000811864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-11-15 09:32 - 2017-11-01 23:43 - 000687968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-11-15 09:32 - 2017-11-01 23:43 - 000647520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2017-11-15 09:32 - 2017-11-01 23:43 - 000385856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2017-11-15 09:32 - 2017-11-01 23:43 - 000299360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2017-11-15 09:32 - 2017-11-01 23:43 - 000144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2017-11-15 09:32 - 2017-11-01 23:43 - 000124072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2017-11-15 09:32 - 2017-11-01 23:42 - 000089552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys 2017-11-15 09:32 - 2017-11-01 23:40 - 000455512 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-11-15 09:32 - 2017-11-01 23:36 - 000947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-11-15 09:32 - 2017-11-01 23:33 - 000485520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2017-11-15 09:32 - 2017-11-01 23:22 - 000822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-11-15 09:32 - 2017-11-01 23:21 - 012205056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-11-15 09:32 - 2017-11-01 23:20 - 022571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-11-15 09:32 - 2017-11-01 23:20 - 019415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-11-15 09:32 - 2017-11-01 23:20 - 018365952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-11-15 09:32 - 2017-11-01 23:16 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-11-15 09:32 - 2017-11-01 23:15 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-11-15 09:32 - 2017-11-01 23:14 - 006066176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-11-15 09:32 - 2017-11-01 23:14 - 003662848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-11-15 09:32 - 2017-11-01 23:12 - 002028032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-11-15 09:32 - 2017-11-01 23:12 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-11-15 09:32 - 2017-11-01 23:12 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2017-11-15 09:32 - 2017-11-01 23:12 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2017-11-15 09:32 - 2017-11-01 23:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-11-15 09:32 - 2017-11-01 23:09 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys 2017-11-15 09:32 - 2017-11-01 23:08 - 013107712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-11-15 09:32 - 2017-11-01 23:06 - 023678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-11-15 09:32 - 2017-11-01 23:05 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-11-15 09:32 - 2017-11-01 23:05 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll 2017-11-15 09:32 - 2017-11-01 23:05 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-11-15 09:32 - 2017-11-01 23:05 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-11-15 09:32 - 2017-11-01 23:05 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2017-11-15 09:32 - 2017-11-01 23:04 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2017-11-15 09:32 - 2017-11-01 23:04 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2017-11-15 09:32 - 2017-11-01 23:04 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2017-11-15 09:32 - 2017-11-01 23:04 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2017-11-15 09:32 - 2017-11-01 23:03 - 008119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-11-15 09:32 - 2017-11-01 23:03 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-11-15 09:32 - 2017-11-01 23:03 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2017-11-15 09:32 - 2017-11-01 23:01 - 001984512 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-11-15 09:32 - 2017-11-01 23:00 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-11-15 09:32 - 2017-11-01 23:00 - 002097664 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-11-15 09:32 - 2017-11-01 23:00 - 001518080 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-11-15 09:32 - 2017-11-01 23:00 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-11-15 09:32 - 2017-11-01 23:00 - 000760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-11-15 09:32 - 2017-11-01 23:00 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-11-15 09:32 - 2017-11-01 22:58 - 003616256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-11-15 09:32 - 2017-11-01 22:58 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 002170712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 001670488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 001409880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 001054040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000992088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000825688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2017-11-15 09:32 - 2017-10-09 03:41 - 000813400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000779608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000766808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000704344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000569688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000513368 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000412504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe 2017-11-15 09:32 - 2017-10-09 03:41 - 000202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll 2017-11-15 09:32 - 2017-10-09 03:41 - 000076120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe 2017-11-15 09:32 - 2017-10-09 03:40 - 001117016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2017-11-15 09:32 - 2017-10-09 03:37 - 007780184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-11-15 09:32 - 2017-10-09 03:37 - 000199000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2017-11-15 09:32 - 2017-10-09 03:37 - 000097120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll 2017-11-15 09:32 - 2017-10-09 03:36 - 000699224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2017-11-15 09:32 - 2017-10-09 03:35 - 001181528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-11-15 09:32 - 2017-10-09 03:33 - 000652344 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2017-11-15 09:32 - 2017-10-09 03:30 - 000509784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-11-15 09:32 - 2017-10-09 03:28 - 022220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-11-15 09:32 - 2017-10-09 03:28 - 000241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-11-15 09:32 - 2017-10-09 03:27 - 000206176 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2017-11-15 09:32 - 2017-10-09 03:26 - 001102680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2017-11-15 09:32 - 2017-10-09 03:25 - 000392024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2017-11-15 09:32 - 2017-10-09 03:24 - 000304232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2017-11-15 09:32 - 2017-10-09 03:22 - 001600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-11-15 09:32 - 2017-10-09 03:02 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe 2017-11-15 09:32 - 2017-10-09 03:02 - 000299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe 2017-11-15 09:32 - 2017-10-09 03:01 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-11-15 09:32 - 2017-10-09 03:00 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll 2017-11-15 09:32 - 2017-10-09 02:58 - 009129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-11-15 09:32 - 2017-10-09 02:58 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2017-11-15 09:32 - 2017-10-09 02:57 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2017-11-15 09:32 - 2017-10-09 02:57 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCredential.dll 2017-11-15 09:32 - 2017-10-09 02:55 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2017-11-15 09:32 - 2017-10-09 02:55 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll 2017-11-15 09:32 - 2017-10-09 02:55 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2017-11-15 09:32 - 2017-10-09 02:54 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2017-11-15 09:32 - 2017-10-09 02:53 - 001478656 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2017-11-15 09:32 - 2017-10-09 02:52 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-11-15 09:32 - 2017-10-09 02:52 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-11-15 09:32 - 2017-10-09 02:52 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll 2017-11-15 09:32 - 2017-10-09 02:51 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2017-11-15 09:32 - 2017-10-09 02:51 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll 2017-11-15 09:32 - 2017-10-09 02:50 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2017-11-15 09:32 - 2017-10-09 02:49 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-11-15 09:32 - 2017-10-09 02:48 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-11-15 09:32 - 2017-10-09 02:46 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-11-15 09:32 - 2017-10-09 02:44 - 006664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-11-15 09:32 - 2017-10-09 02:44 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-11-15 09:32 - 2017-10-09 02:44 - 002321408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-11-15 09:32 - 2017-10-09 02:44 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-11-15 09:32 - 2017-10-09 02:44 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-11-15 09:32 - 2017-10-09 02:43 - 001231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-11-15 09:32 - 2017-10-09 02:41 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-11-15 09:32 - 2017-10-09 01:29 - 000788624 _____ C:\WINDOWS\SysWOW64\locale.nls 2017-11-15 09:32 - 2017-10-09 01:29 - 000788624 _____ C:\WINDOWS\system32\locale.nls 2017-11-15 09:32 - 2017-03-04 07:29 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-11-15 09:32 - 2017-03-04 07:07 - 000909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-11-08 16:49 - 2017-11-08 16:49 - 000000000 ____D C:\Users\Public\Documents\sun 2017-11-08 16:47 - 2017-11-08 16:47 - 000001158 _____ C:\Users\Public\Desktop\OpenOffice 4.1.4.lnk 2017-11-08 16:47 - 2017-11-08 16:47 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.4 2017-11-08 16:44 - 2017-11-08 16:44 - 000001223 _____ C:\Users\Public\Desktop\LibreOffice 5.3.lnk 2017-11-08 16:44 - 2017-11-08 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3 2017-11-08 16:44 - 2017-11-08 16:44 - 000000000 ____D C:\Program Files (x86)\LibreOffice 5 ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-25 12:48 - 2016-09-22 06:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-11-25 11:41 - 2016-07-16 12:45 - 000000000 ____D C:\WINDOWS\INF 2017-11-25 11:40 - 2016-07-16 12:47 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2017-11-25 09:18 - 2017-04-14 11:22 - 000000000 ____D C:\Program Files\Opera 2017-11-23 11:44 - 2015-04-25 18:15 - 000000000 ____D C:\Users\Dominik_PC\AppData\Local\Packages 2017-11-23 10:55 - 2016-09-22 06:10 - 009221380 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-11-23 10:55 - 2016-07-16 23:05 - 004265648 _____ C:\WINDOWS\system32\perfh015.dat 2017-11-23 10:55 - 2016-07-16 23:05 - 001284684 _____ C:\WINDOWS\system32\perfc015.dat 2017-11-23 10:49 - 2017-05-05 13:39 - 000000000 __SHD C:\Users\Dominik_PC\IntelGraphicsProfiles 2017-11-23 10:49 - 2016-09-22 06:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-11-23 10:49 - 2016-09-22 06:08 - 000000000 ____D C:\ProgramData\NVIDIA 2017-11-23 10:49 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-11-23 10:49 - 2015-06-04 21:19 - 000214916 _____ C:\WINDOWS\SysWOW64\HASPLog.txt 2017-11-23 10:49 - 2015-06-04 21:19 - 000041451 _____ C:\WINDOWS\SysWOW64\HaspLogDetailed.txt 2017-11-23 10:49 - 2015-04-26 23:33 - 000000000 ____D C:\Users\Dominik_PC\AppData\Local\ownCloud 2017-11-23 10:49 - 2015-04-25 18:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-11-23 09:51 - 2016-07-16 07:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2017-11-22 15:44 - 2017-03-20 21:22 - 000001238 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-11-22 15:44 - 2017-03-20 21:22 - 000001226 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-11-22 15:44 - 2016-11-17 20:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-11-22 13:46 - 2015-08-18 15:32 - 000000000 ____D C:\Program Files (x86)\Azuon 2017-11-22 08:53 - 2016-07-16 12:47 - 000000000 ___HD C:\Program Files\WindowsApps 2017-11-21 08:49 - 2015-04-25 20:17 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-11-20 18:54 - 2015-04-26 02:21 - 000000000 ____D C:\Users\Dominik_PC\AppData\Roaming\FileZilla 2017-11-20 18:23 - 2016-11-18 08:12 - 000000000 ____D C:\Users\Dominik_PC\AppData\LocalLow\Mozilla 2017-11-20 18:23 - 2016-09-22 06:10 - 000000000 ____D C:\Users\Dominik_PC 2017-11-20 18:07 - 2016-09-22 06:10 - 000000000 ____D C:\Users\Gość 2017-11-20 18:07 - 2016-09-22 06:10 - 000000000 ____D C:\Users\DefaultAppPool 2017-11-20 18:06 - 2017-07-21 20:30 - 000000000 ____D C:\Program Files (x86)\Sticky Password 2017-11-20 17:41 - 2015-04-25 23:55 - 000000000 ____D C:\Users\Dominik_PC\AppData\Local\CrashDumps 2017-11-20 09:10 - 2015-08-09 18:31 - 000000000 ____D C:\Program Files\Easy 7-Zip 2017-11-20 09:10 - 2015-04-25 18:41 - 000000000 ____D C:\Program Files (x86)\IrfanView 2017-11-20 09:07 - 2015-05-06 22:40 - 000002642 _____ C:\Users\Public\Desktop\Skype.lnk 2017-11-20 09:07 - 2015-05-06 22:39 - 000000000 ____D C:\ProgramData\Skype 2017-11-17 08:33 - 2015-04-25 18:36 - 000000000 ____D C:\Users\Dominik_PC\AppData\Roaming\Mozilla 2017-11-17 08:16 - 2017-09-29 22:21 - 000000000 ____D C:\Program Files\rempl 2017-11-16 21:12 - 2016-09-22 06:22 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-11-16 21:12 - 2015-04-25 18:47 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-11-16 00:06 - 2015-04-25 19:01 - 000002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-11-16 00:06 - 2015-04-25 19:01 - 000002272 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-11-15 11:21 - 2015-04-26 00:59 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-11-15 11:20 - 2016-09-22 06:08 - 005250352 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-11-15 11:19 - 2016-07-16 12:47 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2017-11-15 11:19 - 2016-07-16 12:47 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ___RD C:\Program Files\Windows Defender 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\inetsrv 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\appraiser 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\ShellExperiences 2017-11-15 11:19 - 2016-07-16 12:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2017-11-15 09:52 - 2016-07-16 12:36 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-11-15 09:52 - 2015-04-25 20:20 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-11-15 09:39 - 2017-10-10 20:30 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2017-11-15 09:39 - 2015-04-25 20:20 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-11-15 09:35 - 2015-08-30 23:05 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2017-11-14 22:59 - 2016-09-22 06:22 - 000003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-11-14 22:59 - 2016-09-22 06:22 - 000003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-11-14 14:42 - 2017-02-20 12:02 - 000004486 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-11-14 14:42 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-11-14 14:42 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\Macromed 2017-11-08 16:47 - 2015-04-25 19:04 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4 2017-11-08 16:44 - 2015-08-09 18:48 - 000000000 ____D C:\Program Files (x86)\LibreOffice 4 2017-11-08 16:38 - 2016-03-17 09:29 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2017-11-08 16:15 - 2017-06-11 10:12 - 000001249 _____ C:\Users\Public\Desktop\UHDS AllInOne.lnk 2017-11-08 16:10 - 2017-04-17 11:45 - 000000000 ____D C:\Users\Dominik_PC\AppData\Roaming\Moonchild Productions 2017-11-08 09:23 - 2013-08-22 14:25 - 000000269 _____ C:\WINDOWS\win.ini 2017-11-05 01:47 - 2016-07-16 12:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-11-05 01:47 - 2016-07-16 12:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-10-30 20:31 - 2017-06-06 20:54 - 000000000 ____D C:\Users\Dominik_PC\AppData\Local\Share Link ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-11-20 18:12 - 2017-11-09 13:13 - 000436928 _____ (COMODO) C:\ProgramData\cmdres.dll 2015-05-24 16:23 - 2015-05-24 16:23 - 000000132 _____ () C:\Users\Dominik_PC\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe 2015-04-28 21:30 - 2015-04-28 22:25 - 014524416 _____ () C:\Users\Dominik_PC\AppData\Roaming\Sandra.mdb 2016-02-06 00:22 - 2016-02-06 00:22 - 000000001 _____ () C:\Users\Dominik_PC\AppData\Local\RawCopy.1.02.agreement 2016-02-06 00:23 - 2016-02-06 00:23 - 000000001 _____ () C:\Users\Dominik_PC\AppData\Local\RawCopy.sourcedisk.index 2015-07-08 10:50 - 2015-07-08 10:50 - 000007605 _____ () C:\Users\Dominik_PC\AppData\Local\Resmon.ResmonCfg 2015-04-30 07:47 - 2015-05-12 19:14 - 000006012 _____ () C:\Users\Dominik_PC\AppData\Local\unins000.dat 2015-05-12 19:14 - 2015-05-12 19:14 - 000707744 _____ () C:\Users\Dominik_PC\AppData\Local\unins000.exe 2015-04-30 07:47 - 2015-05-12 19:14 - 000011761 _____ () C:\Users\Dominik_PC\AppData\Local\unins000.msg Niektóre pliki w TEMP: ==================== 2017-10-12 07:53 - 2017-10-12 07:53 - 000740416 _____ (Oracle Corporation) C:\Users\Dominik_PC\AppData\Local\Temp\jre-8u144-windows-au.exe 2017-10-18 15:04 - 2017-10-18 15:04 - 001856576 _____ (Oracle Corporation) C:\Users\Dominik_PC\AppData\Local\Temp\jre-8u151-windows-au.exe 2017-11-20 10:43 - 2017-11-20 09:39 - 078346672 _____ (Malwarebytes ) C:\Users\Dominik_PC\AppData\Local\Temp\mbam-setup.exe 2017-10-18 15:01 - 2017-10-18 15:01 - 022484256 _____ (Siber Systems) C:\Users\Dominik_PC\AppData\Local\Temp\RoboForm-v8-Setup.exe 2017-11-08 16:14 - 2017-11-08 16:15 - 081669677 _____ (Smok ) C:\Users\Dominik_PC\AppData\Local\Temp\setup.exe 2017-11-08 16:15 - 2017-11-08 16:15 - 000141840 _____ (tmssoftware.com) C:\Users\Dominik_PC\AppData\Local\Temp\wusetup.exE 2017-05-05 14:05 - 2006-05-24 06:10 - 000455600 ____R (Macrovision Corporation) C:\Users\Dominik_PC\AppData\Local\Temp\_is3C3A.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-11-19 13:36 ==================== Koniec FRST.txt ============================