Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-10-2014 02 Ran by User at 2014-10-14 10:07:54 Run:1 Running from C:\Users\User\Downloads Loaded Profile: User (Available profiles: User) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: R1 {5eeb83d0-96ea-4249-942c-beead6847053}w64; C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}w64.sys [44696 2014-09-15] (StdLib) R1 {b52a596e-357b-4007-9a88-5592a17b1be9}w64; C:\Windows\System32\drivers\{b52a596e-357b-4007-9a88-5592a17b1be9}w64.sys [48792 2014-10-12] (StdLib) R1 {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64; C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64.sys [48792 2014-10-13] (StdLib) R1 {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64; C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64.sys [48792 2014-10-13] (StdLib) R2 Update SmarterPower; C:\Program Files (x86)\SmarterPower\updateSmarterPower.exe [522488 2014-10-13] () R2 Util SmarterPower; C:\Program Files (x86)\SmarterPower\bin\utilSmarterPower.exe [522488 2014-10-13] () U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2013-07-11] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S2 desksvc; C:\Program Files (x86)\Desk 365\deskSvc.exe [X] <==== ATTENTION S2 Update ClearThink; "C:\Program Files (x86)\ClearThink\updateClearThink.exe" [X] S2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [X] <==== ATTENTION Task: {0BAFA5E8-CA98-4FE5-B36A-2B1E459FD723} - \BackgroundContainer Startup Task No Task File <==== ATTENTION Task: {2C5642C5-14A1-44F1-B345-0F5AD03C5770} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION Task: {AF143EB9-D5BA-47F7-A084-AD576B514ABC} - System32\Tasks\Yahoo! Search => C:\Users\User\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [2014-10-12] (Pay By Ads LTD) <==== ATTENTION Task: {C49A9586-795F-482B-B6A1-16670F179AAE} - System32\Tasks\Yahoo! Search Udpater => C:\Users\User\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrsetup.exe [2014-10-12] (Pay By Ads LTD) <==== ATTENTION Task: {F7DD07AB-F8ED-4301-9B7C-DD7784A57F4C} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION HKU\S-1-5-21-2436698491-710929886-1342722519-1000\...\Run: [Yahoo! Search] => C:\Users\User\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [438632 2014-10-12] (Pay By Ads LTD) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com?affID=na HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1408612740&from=cor&uid=3219913727_198313_CAAD1289&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1408612740&from=cor&uid=3219913727_198313_CAAD1289&q={searchTerms} URLSearchHook: HKLM-x32 - (No Name) - {96f454ea-9d38-474f-b504-56193e00c1a5} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO-x32: No Name -> {96f454ea-9d38-474f-b504-56193e00c1a5} -> No File BHO-x32: SmarterPower -> {bd7c9b62-a7d9-4405-be51-7fd633f08791} -> C:\Program Files (x86)\SmarterPower\SmarterPowerBHO.dll No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {96f454ea-9d38-474f-b504-56193e00c1a5} - No File C:\Program Files (x86)\Desk 365 C:\Program Files (x86)\SmarterPower C:\ProgramData\AVAST Software C:\ProgramData\TEMP C:\ProgramData\WindowsMangerProtect C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper C:\Users\User\AppData\Local\Google\Chrome C:\Users\User\AppData\Local\Pay-By-Ads C:\Users\User\AppData\Roaming\service C:\Users\User\Downloads\SpyHunter-Installer.exe C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP C:\Windows\system32\log C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}w64.sys C:\Windows\System32\drivers\{b52a596e-357b-4007-9a88-5592a17b1be9}w64.sys C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64.sys C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64.sys DeleteKey: HKLM\SOFTWARE\Wow6432Node\Google\Chrome Folder: C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions Reg: reg query "HKLM\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command" /s CMD: type "C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Preferences" CMD: dir /a "C:\Program Files" CMD: dir /a "C:\Program Files (x86)" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\User\AppData\Local CMD: dir /a C:\Users\User\AppData\LocalLow CMD: dir /a C:\Users\User\AppData\Roaming EmptyTemp: ***************** Processes closed successfully. {5eeb83d0-96ea-4249-942c-beead6847053}w64 => Service stopped successfully. {5eeb83d0-96ea-4249-942c-beead6847053}w64 => Service deleted successfully. {b52a596e-357b-4007-9a88-5592a17b1be9}w64 => Service stopped successfully. {b52a596e-357b-4007-9a88-5592a17b1be9}w64 => Service deleted successfully. {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64 => Service stopped successfully. {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64 => Service deleted successfully. {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64 => Service stopped successfully. {fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64 => Service deleted successfully. Update SmarterPower => Service deleted successfully. Util SmarterPower => Service deleted successfully. AppMgmt => Service deleted successfully. catchme => Service deleted successfully. desksvc => Service deleted successfully. Update ClearThink => Service deleted successfully. winzipersvc => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0BAFA5E8-CA98-4FE5-B36A-2B1E459FD723}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BAFA5E8-CA98-4FE5-B36A-2B1E459FD723}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BackgroundContainer Startup Task" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2C5642C5-14A1-44F1-B345-0F5AD03C5770}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C5642C5-14A1-44F1-B345-0F5AD03C5770}" => Key deleted successfully. C:\Windows\System32\Tasks\Desk 365 RunAsStdUser => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AF143EB9-D5BA-47F7-A084-AD576B514ABC}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF143EB9-D5BA-47F7-A084-AD576B514ABC}" => Key deleted successfully. C:\Windows\System32\Tasks\Yahoo! Search => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C49A9586-795F-482B-B6A1-16670F179AAE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C49A9586-795F-482B-B6A1-16670F179AAE}" => Key deleted successfully. C:\Windows\System32\Tasks\Yahoo! Search Udpater => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search Udpater" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F7DD07AB-F8ED-4301-9B7C-DD7784A57F4C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7DD07AB-F8ED-4301-9B7C-DD7784A57F4C}" => Key deleted successfully. C:\Windows\System32\Tasks\Optimizer Pro Schedule => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimizer Pro Schedule" => Key deleted successfully. HKU\S-1-5-21-2436698491-710929886-1342722519-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Yahoo! Search => value deleted successfully. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully. "HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{96f454ea-9d38-474f-b504-56193e00c1a5} => value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96f454ea-9d38-474f-b504-56193e00c1a5}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{96f454ea-9d38-474f-b504-56193e00c1a5}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bd7c9b62-a7d9-4405-be51-7fd633f08791}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{bd7c9b62-a7d9-4405-be51-7fd633f08791}" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully. "HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{96f454ea-9d38-474f-b504-56193e00c1a5} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{96f454ea-9d38-474f-b504-56193e00c1a5}" => Key not found. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper C:\Users\User\AppData\Local\Google\Chrome" => File/Directory not found. C:\Users\User\AppData\Local\Pay-By-Ads => Moved successfully. C:\Users\User\AppData\Roaming\service => Moved successfully. C:\Users\User\Downloads\SpyHunter-Installer.exe => Moved successfully. C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP => Moved successfully. C:\Windows\system32\log => Moved successfully. C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}w64.sys => Moved successfully. C:\Windows\System32\drivers\{b52a596e-357b-4007-9a88-5592a17b1be9}w64.sys => Moved successfully. C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}Gw64.sys => Moved successfully. C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}w64.sys => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome => Failed to delete key at first attempt (Error: C0000121), see next line. HKLM\SOFTWARE\Wow6432Node\Google\Chrome => Key Deleted Successfully. ========================= Folder: C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions ======================== 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0 2013-12-18 01:04 - 2013-12-18 01:04 - 0000947 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\index.html 2013-12-18 01:04 - 2013-12-18 01:04 - 0001355 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\manifest.json 2013-12-18 01:04 - 2013-12-18 01:04 - 0011677 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\style.css 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons 2013-12-18 01:04 - 2013-12-18 01:04 - 0005338 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons\128.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0000667 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons\16.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0000751 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons\19.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002239 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons\48.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002799 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\icons\64.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images 2013-12-18 01:04 - 2013-12-18 01:04 - 0004232 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\error_icon.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0004400 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\img_icon.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002674 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\img_icon_small.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0019759 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\loader.gif 2013-12-18 01:04 - 2013-12-18 01:04 - 0002035 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\logo_32.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002361 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\logo_42.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002558 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\logo_48.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0002744 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\logo_54.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0006793 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\logo_slider.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\stumbleupon_error.jpg 2013-12-18 01:04 - 2013-12-18 01:04 - 1331918 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\stumbleupon_info.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0045101 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\images\stumbleupon_logo.png 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\includes 2013-12-18 01:04 - 2013-12-18 01:04 - 0000531 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\includes\login.js 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\js 2013-12-18 01:04 - 2013-12-18 01:04 - 0007241 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\js\Application.js 2013-12-18 01:04 - 2013-12-18 01:04 - 0009548 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\js\View.js 2013-12-18 01:04 - 2013-12-18 01:04 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\js\lib 2013-12-18 01:04 - 2013-12-18 01:04 - 0001681 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dcgfeeneehecjobkopmnpaiffolcnhli\1.3.1_0\js\lib\emile.min.js 2014-01-28 18:16 - 2014-01-28 18:16 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned 2014-01-28 18:16 - 2014-01-28 18:16 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0 2014-01-28 18:16 - 2014-01-28 18:16 - 0001629 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0\manifest.json 2014-01-28 18:16 - 2014-01-28 18:16 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0\icons 2014-01-28 18:16 - 2014-01-28 18:16 - 0003623 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0\icons\logo_64.png 2014-01-28 18:16 - 2014-01-28 18:16 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0\includes 2014-01-28 18:16 - 2014-01-28 18:16 - 0002716 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\llacpiflndledoknicaghdoedbnbcned\1.15.2.0_0\includes\fixFacebookRedirect.js 2014-01-28 18:07 - 2014-01-28 18:07 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg 2014-01-28 18:07 - 2014-01-28 18:07 - 0000000 ____D () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0 2014-01-28 18:07 - 2014-01-28 18:07 - 0000757 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\bg.js 2014-01-28 18:07 - 2014-01-28 18:07 - 0000143 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\content.js 2014-01-28 18:07 - 2014-01-28 18:07 - 0007294 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\icon_128.png 2014-01-28 18:07 - 2014-01-28 18:07 - 0000834 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\icon_16.png 2014-01-28 18:07 - 2014-01-28 18:07 - 0002640 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\icon_48.png 2014-01-28 18:07 - 2014-01-28 18:07 - 0001015 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\icon_toolbar.png 2014-01-28 18:07 - 2014-01-28 18:07 - 0001020 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\manifest.json 2014-01-28 18:07 - 2014-01-28 18:07 - 0000033 _____ () C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg\1.0_0\README.md ====== End of Folder: ====== ========= reg query "HKLM\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command" /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command (domy˜lny) REG_SZ "C:\Program Files (x86)\Opera\Launcher.exe" ========= End of Reg: ========= ========= type "C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Preferences" ========= { "Keybindings": { "Settings": { "AdvancedEnabled": true } }, "browser": { "clear_data": { "form_data": true }, "last_clear_browsing_data_time": "13056404965834790", "window_placement": { "height": 539, "left": 0, "maximized": true, "top": 5, "width": 1024 }, "window_placement_DevToolsApp": { "always_on_top": false, "bottom": 740, "height": 640, "left": 100, "maximized": false, "right": 740, "top": 100, "width": 640 } }, "devtools": { "dock_side": "undocked", "split_location": 217 }, "dns_prefetching": { "host_referral_list": [ 2 ], "startup_list": [ 1 ] }, "download": { "directory_upgrade": true }, "extensions": { "alerts": { "initialized": true }, "autoupdate": { "last_check": "13057703439163311", "next_check": "13057748709675190" }, "blacklistupdate": { "version": "2013.1203.1746.24" }, "known_disabled": [ "dcgfeeneehecjobkopmnpaiffolcnhli" ], "last_opera_version": "24.0.1558.64", "settings": { "bcibcaaakpeekhbnddgnajbmjdcemfkf": { "active_permissions": { "api": [ "addonsPrivate", "management" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "t", "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13031783435812811", "is_pending_third_party_install": false, "location": 5, "manifest": { "app": { "launch": { "web_url": "https://addons.opera.com/" }, "urls": [ "https://addons.opera.com/" ] }, "description": "Opera Addons Portal", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAbTKr4g11sfL12IByl8cC1NThF3SIMBhYJlyF4vYe0RhuAztV06xdKladCVB3msDBaKfZwPF/+tgBIly76R/X4XiFyNeD01Tb4XYy8iBohVh8/ZP8c93OVTZ+0pTGE10UUjqtBPtcs6q2kz5z9eZ4LLCl2RX6/Kf8h6vsjuigUQIDAQAB", "manifest_version": 2, "name": "Opera Addons Portal", "permissions": [ "addonsPrivate", "management" ], "version": "1" }, "page_ordinal": "n", "path": "C:\\Program Files (x86)\\Opera\\18.0.1284.68\\resources\\opera_addons", "was_installed_by_default": false }, "dcgfeeneehecjobkopmnpaiffolcnhli": { "active_permissions": { "api": [ "contextMenus", "speeddial", "tabs" ], "explicit_host": [ "http://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "http://*.stumbleupon.com/*", "http://stumbleupon.com/*", "https://*.stumbleupon.com/*", "https://stumbleupon.com/*" ] }, "creation_flags": 65545, "disable_reasons": 1, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ "contextMenus", "speeddial", "tabs" ], "explicit_host": [ "http://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "http://*.stumbleupon.com/*", "http://stumbleupon.com/*", "https://*.stumbleupon.com/*", "https://stumbleupon.com/*" ] }, "initial_keybindings_set": true, "install_time": "13031795046427665", "is_pending_third_party_install": false, "location": 1, "manifest": { "background": { "page": "index.html" }, "content_scripts": [ { "js": [ "includes/login.js" ], "matches": [ "http://*.stumbleupon.com/*", "https://*.stumbleupon.com/*", "http://stumbleupon.com/*", "https://stumbleupon.com/*" ] } ], "description": "The StumbleUpon Extension for Opera is the easiest way to discover new and interesting photos, videos, web pages and more from across the Web.", "developer": { "name": "Opera Software ASA", "url": "http://opera.com" }, "homepage_url": "http://help.stumbleupon.com/", "icons": { "128": "icons/128.png", "16": "icons/16.png", "19": "icons/19.png", "48": "icons/48.png", "64": "icons/64.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2jytTqLgbqqDPVFLD3301eOccVskBHq6+hmyKenbenMD5ig789wZnQ5Fs3WEvmU/M2R2hUXpV9TLDWWViEKglRTpI2a1rq+9yfPA1fANIs67zOZsT/z3PMApTjkHUrG0JAXLpGml+nzpauE4PaKLpsIUv9eLZ9xucIxvyedRJHQIDAQAB", "manifest_version": 2, "name": "StumbleUpon", "old_id": "https://addons.opera.com/extensions/details/stumbleupon/", "permissions": [ "tabs", "contextMenus", "http://*/*", "https://*/*" ], "speeddial": { "url": "https://stumbleupon.com/" }, "update_url": "https://extension-updates.opera.com/api/omaha/update/", "version": "1.3.1" }, "path": "dcgfeeneehecjobkopmnpaiffolcnhli\\1.3.1_0", "state": 0, "was_installed_by_default": false }, "fmjgglhlikhebkngohcpcmhiooigdmki": { "active_permissions": { "api": [ "syncPrivate" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "w", "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13031783435813811", "is_pending_third_party_install": false, "location": 5, "manifest": { "app": { "launch": { "web_url": "https://auth.opera.com/account/login/result" }, "urls": [ "https://auth.opera.com/account/access-token", "https://auth-test.opera.com/account/access-token" ] }, "description": "Give special permissions to Sync login return URL", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQlD4x9NgYIjng4LxpWdiMPGBpyzKoEZkjfotGhxRnO9VX++GW1TLtJmndB4Z399RQo0f2mGqOQXb6SPtwmfPNj2k1ia9d6BjyDsy6ygBBxWmrNk+dtLNEmLtnYR+MeXsYyBSRV0TqizmTj8UaoKFGk6ozXETyAM6YaVnOK+64TQIDAQAB", "manifest_version": 2, "name": "Sync Login Flow", "permissions": [ "syncPrivate" ], "version": "1" }, "page_ordinal": "n", "path": "C:\\Program Files (x86)\\Opera\\18.0.1284.68\\resources\\sync_login", "was_installed_by_default": false }, "imodfccolnjcdccplejdejgjfofdemag": { "blacklist": true }, "llacpiflndledoknicaghdoedbnbcned": { "active_permissions": { "api": [ ], "explicit_host": [ "http://facebook.com/*", "http://www.facebook.com/*", "https://facebook.com/*", "https://www.facebook.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "http://facebook.com/*", "http://www.facebook.com/*", "https://facebook.com/*", "https://www.facebook.com/*" ] }, "creation_flags": 65545, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ ], "explicit_host": [ "http://facebook.com/*", "http://www.facebook.com/*", "https://facebook.com/*", "https://www.facebook.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "http://facebook.com/*", "http://www.facebook.com/*", "https://facebook.com/*", "https://www.facebook.com/*" ] }, "initial_keybindings_set": true, "install_time": "13035399411363505", "is_pending_third_party_install": false, "location": 1, "manifest": { "content_scripts": [ { "all_frames": true, "include_globs": [ "https://www.facebook.com/*", "https://facebook.com/*", "http://www.facebook.com/*", "http://facebook.com/*" ], "js": [ "includes/fixFacebookRedirect.js" ], "matches": [ "https://www.facebook.com/*", "https://facebook.com/*", "http://www.facebook.com/*", "http://facebook.com/*" ], "run_at": "document_start" } ], "content_security_policy": "script-src 'self'; object-src 'self'", "description": "Removes redirection of external links on facebook to protect your privacy and improve page load time.", "developer": { "name": "Sanchit Karve", "url": "http://www.sanchitkarve.com" }, "homepage_url": "http://www.sanchitkarve.com/projects/facebookredirectfixer/", "icons": { "128": "icons/logo_64.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTPkCSSHe5+GyyRazemhRgnlTQPswec6JPCMoNNuOocg/9Cj9YfpQ87slnlfl5xMQotbNvccqvVatAuE9xr2OAmD7FtV8p9ss+jqX+AeuRiY23hrf/5cmvoVr9BjqSqxt0mTrV2kgEGYkmxLKfIjH+mdyz1oW8VJg6z4nv3/cfEQIDAQAB", "manifest_version": 2, "name": "Facebook Redirect Fixer", "old_id": "https://addons.opera.com/extensions/details/facebook-redirect-fixer/", "permissions": [ "https://www.facebook.com/*", "https://facebook.com/*", "http://www.facebook.com/*", "http://facebook.com/*" ], "update_url": "https://extension-updates.opera.com/api/omaha/update/", "version": "1.15.2.0", "web_accessible_resources": [ "icons/logo_64.png", "includes/fixFacebookRedirect.js" ] }, "path": "llacpiflndledoknicaghdoedbnbcned\\1.15.2.0_0", "state": 1, "was_installed_by_default": false }, "objncbokngchniifnaijjjilieiahogg": { "active_permissions": { "api": [ "tabs" ], "explicit_host": [ "*://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "*://*.pinterest.com/*" ] }, "creation_flags": 65545, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ "tabs" ], "explicit_host": [ "*://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "*://*.pinterest.com/*" ] }, "initial_keybindings_set": true, "install_time": "13035398854151254", "is_pending_third_party_install": false, "location": 1, "manifest": { "background": { "scripts": [ "bg.js" ] }, "browser_action": { "default_icon": "icon_toolbar.png", "default_title": "Pin on Pinterest" }, "content_scripts": [ { "js": [ "content.js" ], "matches": [ "*://*.pinterest.com/*" ] } ], "content_security_policy": "script-src 'self' https://ssl.google-analytics.com; object-src 'self'", "description": "Pinterest for Opera", "developer": { "name": "pinterest" }, "icons": { "128": "icon_128.png", "16": "icon_16.png", "48": "icon_48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJkyahc8lWwx2akQGcqnWoJHbtnzyLsk9ciReCgzM7C/Bq7jD9MGG7jOvtlxD5WKMno7sG1gukiYIckeBzZtW7Jxsz1nlv9WMXo+7SJrBz3zh2XyO3YsubKDE6AkwGxCvNOdFy9OjEh//1GFn1CVzcF527fmlYn98S2uD3luHwqQIDAQAB", "manifest_version": 2, "name": "Pinterest", "permissions": [ "tabs", "*://*/*" ], "update_url": "https://extension-updates.opera.com/api/omaha/update/", "version": "1.0" }, "path": "objncbokngchniifnaijjjilieiahogg\\1.0_0", "state": 1, "was_installed_by_default": false } }, "toolbar": [ "objncbokngchniifnaijjjilieiahogg" ] }, "geolocation": { "eula_accepted": true }, "net": { "http_server_properties": { "servers": { "0-channel-proxy-04-frc3.facebook.com:443": { "supports_spdy": true }, "1.bp.blogspot.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "1.bp.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "2-channel-proxy-06-ash2.facebook.com:443": { "supports_spdy": true }, "2-channel-proxy-07-ash2.facebook.com:443": { "supports_spdy": true }, "2.bp.blogspot.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "2.bp.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "3.bp.blogspot.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "3.bp.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "3130320.fls.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "4.bp.blogspot.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "4.bp.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "4371920.fls.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "4406640.fls.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "4494477.fls.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "4t4qjto8n6vcba9cabf6v2lrng9ast6r-a-fc-opensocial.googleusercontent.com:443": { "supports_spdy": true }, "5-channel-proxy-13-prn1.facebook.com:443": { "supports_spdy": true }, "6-channel-proxy-04-frc3.facebook.com:443": { "supports_spdy": true }, "account.infinitecrisis.com:443": { "supports_spdy": true }, "accounts.google.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100, "5": 32, "6": 0 }, "supports_spdy": true }, "ad-emea.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "ad.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "ad.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "ads.google.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "afs.googlesyndication.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "agisboutique.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "ajax.googleapis.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "ajax.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "alebabka.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "amatorskiegotowanie.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "analytics.twitter.com:443": { "supports_spdy": true }, "api-read.facebook.com:443": { "supports_spdy": true }, "api.facebook.com:443": { "supports_spdy": true }, "apis.google.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100, "5": 34, "6": 0 }, "supports_spdy": true }, "bid.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "cdn.syndication.twimg.com:443": { "supports_spdy": true }, "cdnjs.cloudflare.com:443": { "supports_spdy": true }, "chart.apis.google.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "chart.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "clients1.google.com:443": { "supports_spdy": true }, "cm.g.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "cm.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "code.jquery.com:443": { "supports_spdy": true }, "contextweb.pixel.invitemedia.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "csi.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "csi.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "cx.atdmt.com:443": { "supports_spdy": true }, "developer.android.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "domnawygnanku.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "encrypted-tbn0.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "encrypted-tbn1.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "encrypted-tbn2.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "encrypted-tbn3.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "ewelowe.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "external-fra.xx.fbcdn.net:443": { "supports_spdy": true }, "f3b6566f880klfc2thi-tjqzdyxa1413207585-sonar.xx.fbcdn.net:443": { "supports_spdy": true }, "fbcdn-creative-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-photos-c-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-photos-e-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-photos-f-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-photos-g-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-profile-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-a-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-b-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-c-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-d-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-e-a.akamaihd.net:443": { "supports_spdy": true }, "fbcdn-sphotos-g-a.akamaihd.net:443": { "supports_spdy": true }, "fbstatic-a.akamaihd.net:443": { "supports_spdy": true }, "filozofiasmaku.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "fls.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "fonts.googleapis.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "fonts.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "fonts.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "fonts.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "gcdn.2mdn.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "gdata.youtube.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "gdata.youtube.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "gg.google.com:443": { "supports_spdy": true }, "googleads.g.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "googleads.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "googleads4.g.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "googleads4.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "gotowanie-z-pasja.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "gp3.googleusercontent.com:443": { "supports_spdy": true }, "gp4.googleusercontent.com:443": { "supports_spdy": true }, "gp5.googleusercontent.com:443": { "supports_spdy": true }, "gp6.googleusercontent.com:443": { "supports_spdy": true }, "granitowy.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "graph.facebook.com:443": { "supports_spdy": true }, "i.ytimg.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "i1.ytimg.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "id.google.pl:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "img.youtube.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "img1.blogblog.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "img1.blogblog.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "img2.blogblog.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "kolorowowkuchni.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "kuchniaagaty.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "laura-we-wloszech.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "lh3.ggpht.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "lh3.googleusercontent.com:443": { "supports_spdy": true }, "lh4.ggpht.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "lh4.googleusercontent.com:443": { "settings": { "4": 100, "5": 22, "6": 0 }, "supports_spdy": true }, "lh5.googleusercontent.com:443": { "supports_spdy": true }, "lh6.ggpht.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "lniany-zaulek.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "maps.google.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "maps.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "maps.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "miodowakropelka.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "mojetworyprzetwory.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "mojezdjeciama.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "mt0.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "mt1.googleapis.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "nissiax83.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "oauth.googleusercontent.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100, "5": 27, "6": 0 }, "supports_spdy": true }, "p4-awpvv2jlsxe4i-qx22cnebhg2oqcoh-203494-i1-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-awpvv2jlsxe4i-qx22cnebhg2oqcoh-203494-i2-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-awpvv2jlsxe4i-qx22cnebhg2oqcoh-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-axufuam3heiki-x4k6j33qkvs6wcui-471796-i1-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-axufuam3heiki-x4k6j33qkvs6wcui-471796-i2-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-axufuam3heiki-x4k6j33qkvs6wcui-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-cg67g7ouqiyek-kabogw75lu4spiew-677701-i1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-cg67g7ouqiyek-kabogw75lu4spiew-677701-i2-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-cg67g7ouqiyek-kabogw75lu4spiew-677701-s1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-cg67g7ouqiyek-kabogw75lu4spiew-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-ctgbgipqzbcm6-5252mtyp5pxk7u7u-475464-i1-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-ctgbgipqzbcm6-5252mtyp5pxk7u7u-475464-i2-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-ctgbgipqzbcm6-5252mtyp5pxk7u7u-475464-s1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-ctgbgipqzbcm6-5252mtyp5pxk7u7u-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-dnqk4otddkvci-grbuaocumcldzts2-662637-i1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-dnqk4otddkvci-grbuaocumcldzts2-662637-i2-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-dnqk4otddkvci-grbuaocumcldzts2-662637-s1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-dnqk4otddkvci-grbuaocumcldzts2-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-fir5cpucnytbm-zsx6a7v6k42lsikt-966270-i1-v6exp3-ds.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-fir5cpucnytbm-zsx6a7v6k42lsikt-966270-i2-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-fir5cpucnytbm-zsx6a7v6k42lsikt-966270-s1-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-fir5cpucnytbm-zsx6a7v6k42lsikt-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "p4-fof3foys3afqi-losizndoxjjekhui-if-v6exp3-v4.metric.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "pagead2.googlesyndication.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "pagead2.googlesyndication.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "partner.googleadservices.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "pieknaitalia.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "plus.google.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100 }, "supports_spdy": true }, "plus.googleapis.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "pro-link.googlecode.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "ps-usa-pl.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "pubads.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "qchennewariacje.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "r1---sn-2apm-f5fe7.googlevideo.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "s.yimg.com:443": { "supports_spdy": true }, "s.youtube.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "s.ytimg.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "s.ytimg.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "s0.2mdn.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "s0.2mdn.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "s1.2mdn.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "s1.2mdn.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "scontent-a-fra.xx.fbcdn.net:443": { "supports_spdy": true }, "scontent-b-ams.xx.fbcdn.net:443": { "supports_spdy": true }, "scontent-b-fra.xx.fbcdn.net:443": { "supports_spdy": true }, "slodki-kompromis.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "ssl.google-analytics.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100, "5": 22, "6": 0 }, "supports_spdy": true }, "ssl.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100 }, "supports_spdy": true }, "ssl.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "stats.g.doubleclick.net:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "stats.g.doubleclick.net:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "strawberriesfrompoland.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "syndication.twitter.com:443": { "supports_spdy": true }, "t0.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "t1.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "t2.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "t3.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "thernity.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "tpc.googlesyndication.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "tpc.googlesyndication.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "translate.google.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "translate.google.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "translate.google.pl:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "translate.googleapis.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "twitter.com:443": { "supports_spdy": true }, "wszystkooitalii.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www-fc-opensocial.googleusercontent.com:443": { "supports_spdy": true }, "www.bdswiss.com:443": { "supports_spdy": true }, "www.blogblog.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.blogger.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.blogger.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.dusiowakuchnia.pl:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.facebook.com:443": { "supports_spdy": true }, "www.google-analytics.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.google-analytics.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.google.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.google.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.google.pl:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "settings": { "4": 100, "5": 30, "6": 0 }, "supports_spdy": true }, "www.google.pl:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.googleadservices.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.googleadservices.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.googleapis.com:443": { "supports_spdy": true }, "www.googletagmanager.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.googletagmanager.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.googletagservices.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.gstatic.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "www.gstatic.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.justmydelicious.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.youtube-nocookie.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "www.youtube.com:443": { "supports_spdy": true }, "www.youtube.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "wyzwania-losu.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "youtube.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "yt3.ggpht.com:443": { "alternate_protocol": { "port": 443, "protocol_str": "quic" }, "supports_spdy": true }, "yt3.ggpht.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } }, "zwyklimy.blogspot.com:80": { "alternate_protocol": { "port": 80, "protocol_str": "quic" } } }, "version": 3 } }, "plugins": { "plugins_list": [ { "enabled": true, "name": "Adobe Acrobat", "path": "C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AIR\\nppdf32.dll", "version": "11.0.05.3" }, { "enabled": true, "name": "Picasa", "path": "C:\\Program Files (x86)\\Google\\Picasa3\\npPicasa3.dll", "version": "3, 1, 0, 0" }, { "enabled": true, "name": "Google Update", "path": "C:\\Program Files (x86)\\Google\\Update\\1.3.24.15\\npGoogleUpdate3.dll", "version": "1.3.24.15" }, { "enabled": true, "name": "Java Deployment Toolkit 7.0.450.18", "path": "C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npDeployJava1.dll", "version": "10.45.2.18" }, { "enabled": true, "name": "Java(TM) Platform SE 7 U45", "path": "C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll", "version": "10.45.2.18" }, { "enabled": true, "name": "Silverlight Plug-In", "path": "C:\\Program Files (x86)\\Microsoft Silverlight\\5.1.30514.0\\npctrl.dll", "version": "5.1.30514.0" }, { "enabled": true, "name": "Shockwave Flash", "path": "C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_15_0_0_152.dll", "version": "15,0,0,152" }, { "enabled": true, "name": "Windows Activation Technologies", "path": "C:\\Windows\\system32\\Wat\\npWatWeb.dll", "version": "7.1.7600.16395" }, { "enabled": true, "name": "Adobe Flash Player" }, { "enabled": true, "name": "Adobe Reader" }, { "enabled": true, "name": "Google Update" }, { "enabled": true, "name": "Java(TM)" }, { "enabled": true, "name": "Picasa" }, { "enabled": true, "name": "Silverlight" }, { "enabled": true, "name": "Windows Activation Technologies" } ] }, "profile": { "content_settings": { "clear_on_exit_migrated": true, "pattern_pairs": { "[*.]fryzjerzy.zumi.pl,[*.]fryzjerzy.zumi.pl": { "geolocation": [ 2, 1387562499.087124 ] }, "[*.]iitv.info,*": { "popups": [ 1, 1411931469.543673 ] }, "[*.]katalog.trojmiasto.pl,[*.]katalog.trojmiasto.pl": { "geolocation": [ 1, 1401558891.360984 ] }, "[*.]www.esky.pl,[*.]www.esky.pl": { "geolocation": [ 2, 1389091375.071839 ] }, "[*.]www.kinoman.tv,*": { "popups": [ 1, 1395959039.268389 ] }, "[*.]www.lotto.pl,[*.]www.lotto.pl": { "geolocation": [ 2, 1389341500.366417 ] }, "[*.]www.marbledesign.pl,*": { "popups": [ 1, 1395415821.311672 ] }, "[*.]www.pinterest.com,*": { "popups": [ 1, 1395479431.164321 ] }, "[*.]www.torlock.com,*": { "popups": [ 1, 1395991468.124809 ] }, "[*.]www.yac.mx,*": { "popups": [ 1, 1409305915.294101 ] }, "http://www.bet365.com,*": { "plugins": [ 2, 1411064677.470442 ] }, "https://www.stargames.com,*": { "plugins": [ 2, 1411064718.460776 ] } }, "pref_version": 1, "whitelist_version": 1 }, "created_by_version": "18.0.1284.68", "creation_timestamp": "13031783435798811", "default_content_settings": { }, "per_host_zoom_levels": { "startpage": -3.8017840169239308, "www.bankmillennium.pl": -0.5778829311823857, "www.google.pl": -0.5778829311823857 } }, "savefile": { "default_directory": "C:\\Users\\User\\Downloads", "type": 1 }, "selectfile": { "last_directory": "C:\\Users\\User\\Desktop\\2014.09.25 verona targi" }, "statistics": { "collection_asked": true, "collection_enabled": false }, "sync": { "login_screen_reminder": 1 }, "themes": { "selected_id": "work-hard" }, "turbo": { "client_id": "5447a90caf42b32da281883471c6a2542ea1bc1fc87212f2fa517f1b6ac11b31", "enabled": false, "show_learn_more": false } } ========= End of CMD: ========= ========= dir /a "C:\Program Files" ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\Program Files 2014-10-13 20:40 . 2014-10-13 20:40 .. 2013-12-16 16:41 7-Zip 2009-07-14 05:20 Common Files 2013-12-16 16:11 CONEXANT 2009-07-14 06:54 174 desktop.ini 2013-12-16 16:29 DIFX 2011-04-12 15:32 DVD Maker 2014-10-13 20:40 Enigma Software Group 2013-12-16 16:54 Intel 2014-09-11 09:06 Internet Explorer 2013-12-16 16:41 Java 2014-10-14 09:58 McAfee Security Scan 2011-04-12 15:32 Microsoft Games 2013-12-17 21:06 Microsoft Office 2014-07-26 11:59 Microsoft Silverlight 2009-07-14 07:32 MSBuild 2009-07-14 07:32 Reference Assemblies 2009-07-14 07:09 Uninstall Information 2013-07-11 19:35 Windows Defender 2014-07-10 08:09 Windows Journal 2011-04-12 15:21 Windows Mail 2013-12-22 10:19 Windows Media Player 2013-12-16 15:58 Windows NT 2011-04-12 15:21 Windows Photo Viewer 2010-11-21 05:31 Windows Portable Devices 2011-04-12 15:21 Windows Sidebar 1 plik(¢w) 174 bajt¢w 26 katalog(¢w) 56ÿ201ÿ756ÿ672 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a "C:\Program Files (x86)" ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\Program Files (x86) 2014-10-14 09:59 . 2014-10-14 09:59 .. 2013-12-16 16:42 Adobe 2014-08-21 11:34 AutoCAD DWG to PDF Converter 2014-10-13 20:39 Common Files 2014-10-13 20:44 Desk 365 2009-07-14 06:54 174 desktop.ini 2014-03-20 21:55 FileZilla FTP Client 2014-10-13 20:51 Google 2014-08-21 11:47 IGC 2013-12-16 16:29 InstallShield Installation Information 2013-12-16 16:13 Intel 2014-09-11 09:06 Internet Explorer 2013-12-16 16:41 Java 2013-12-16 16:41 K-Lite Codec Pack 2014-10-13 16:26 Kaspersky Lab 2013-12-16 16:29 Lenovo 2013-12-17 21:09 Microsoft Office 2014-07-26 11:59 Microsoft Silverlight 2013-12-17 21:09 Microsoft Visual Studio 2013-12-17 21:06 Microsoft Visual Studio 8 2013-12-22 01:02 Microsoft Works 2013-12-19 21:09 Microsoft.NET 2013-12-17 21:09 MSBuild 2013-12-16 16:29 My Company Name 2014-03-27 21:38 NapiProjekt 2014-09-27 18:53 Opera 2014-04-24 19:47 PRO100 2009-07-14 07:32 Reference Assemblies 2014-04-29 15:22 SketchUp 2014-10-14 09:39 SmarterPower 2009-07-14 06:57 Uninstall Information 2014-07-22 12:52 uTorrentControl_v6 2014-09-28 21:01 VideoLAN 2013-07-11 19:35 Windows Defender 2011-04-12 15:21 Windows Mail 2013-12-22 10:19 Windows Media Player 2009-07-14 07:32 Windows NT 2011-04-12 15:21 Windows Photo Viewer 2010-11-21 05:31 Windows Portable Devices 2011-04-12 15:21 Windows Sidebar 2014-10-14 09:58 WinZipper 1 plik(¢w) 174 bajt¢w 41 katalog(¢w) 56ÿ201ÿ752ÿ576 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\ProgramData ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\ProgramData 2014-10-14 09:58 . 2014-10-14 09:58 .. 2013-12-16 16:56 Adobe 2009-07-14 07:08 Application Data [C:\ProgramData] 2014-10-13 16:09 AVAST Software 2014-04-29 15:30 Caphyon 2013-12-16 15:58 Dane aplikacji [C:\ProgramData] 2009-07-14 07:08 Desktop [C:\Users\Public\Desktop] 2009-07-14 07:08 Documents [C:\Users\Public\Documents] 2013-12-16 15:58 Dokumenty [C:\Users\Public\Documents] 2013-12-16 16:38 0 DP45977C.lfl 2009-07-14 07:08 Favorites [C:\Users\Public\Favorites] 2013-12-16 16:02 Intel 2014-10-14 09:33 Kaspersky Lab 2014-02-21 00:11 McAfee 2013-12-16 15:58 Menu Start [C:\ProgramData\Microsoft\Windows\Start Menu] 2014-01-24 00:06 Microsoft 2014-09-11 08:34 Microsoft Help 2014-09-30 21:56 266 ntuser.pol 2013-12-16 15:58 Pulpit [C:\Users\Public\Desktop] 2014-04-29 15:22 SketchUp 2009-07-14 07:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 2013-12-16 16:41 Sun 2013-12-16 15:58 Szablony [C:\ProgramData\Microsoft\Windows\Templates] 2014-08-21 11:25 TEMP 2009-07-14 07:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 2013-12-16 15:58 Ulubione [C:\Users\Public\Favorites] 2 plik(¢w) 266 bajt¢w 25 katalog(¢w) 56ÿ202ÿ276ÿ864 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\User\AppData\Local ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\Users\User\AppData\Local 2014-10-14 10:08 . 2014-10-14 10:08 .. 2014-03-12 18:49 Adobe 2014-01-21 21:51 cache 2013-12-16 15:58 Dane aplikacji [C:\Users\User\AppData\Local] 2014-09-08 11:23 Diagnostics 2014-06-21 13:41 EmieSiteList 2014-06-21 13:41 EmieUserList 2014-10-13 20:21 109ÿ296 GDIPFONTCACHEV1.DAT 2013-12-16 17:35 GHISLER 2013-12-22 22:10 Google 2013-12-16 15:58 Historia [C:\Users\User\AppData\Local\Microsoft\Windows\History] 2014-10-13 23:24 3ÿ081ÿ634 IconCache.db 2014-05-15 20:15 4ÿ096 keyfile3.drm 2014-03-21 13:15 Microsoft 2014-02-24 22:30 Microsoft Games 2014-03-10 13:11 Microsoft Help 2013-12-17 21:50 Opera Software 2014-01-07 10:44 Programs 2014-10-13 20:31 Spotify 2014-10-14 10:08 Temp 2013-12-16 15:58 Temporary Internet Files [C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files] 2014-04-24 19:48 VirtualStore 3 plik(¢w) 3ÿ195ÿ026 bajt¢w 20 katalog(¢w) 56ÿ202ÿ272ÿ768 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\User\AppData\LocalLow ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\Users\User\AppData\LocalLow 2014-10-13 14:41 . 2014-10-13 14:41 .. 2013-12-16 16:43 Adobe 2014-06-21 13:41 EmieSiteList 2014-06-21 13:41 EmieUserList 2013-12-20 17:17 Microsoft 2013-12-16 16:41 Sun 2014-07-22 23:43 uTorrentControl_v6 0 plik(¢w) 0 bajt¢w 8 katalog(¢w) 56ÿ202ÿ272ÿ768 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\User\AppData\Roaming ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: CAAD-1289 Katalog: C:\Users\User\AppData\Roaming 2014-10-14 10:08 . 2014-10-14 10:08 .. 2013-12-16 16:43 Adobe 2014-08-21 11:34 AutoCAD DWG to PDF Converter 2014-01-21 21:44 Desk 365 2014-10-14 09:33 Dropbox 2014-07-20 12:36 dvdcss 2014-09-17 00:02 EurekaLog 2014-03-20 22:11 FileZilla 2013-12-16 17:28 GHISLER 2013-12-16 15:58 Identities 2014-08-21 11:49 IGC 2013-12-16 16:03 Intel Corporation 2013-12-16 16:38 Macromedia 2011-04-12 15:32 Media Center Programs 2014-07-22 11:08 Microsoft 2014-08-29 13:57 9ÿ324 Microsoft Access 97-2003.EML 2014-08-29 13:58 9ÿ320 Microsoft Excel 97-2003.EML 2013-12-16 16:46 MPC-HC 2014-03-27 22:40 NapiProjekt 2013-12-17 21:50 Opera Software 2014-04-29 15:29 SketchUp 2014-10-14 09:58 Spotify 2014-03-26 23:22 TeamViewer 2014-04-29 15:28 Trimble Navigation Limited 2014-08-22 09:52 uTorrent 2014-03-20 15:58 WinZipper 2 plik(¢w) 18ÿ644 bajt¢w 25 katalog(¢w) 56ÿ202ÿ272ÿ768 bajt¢w wolnych ========= End of CMD: ========= EmptyTemp: => Removed 173.2 MB temporary data. The system needed a reboot. ==== End of Fixlog ====