Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:07-11-2015 Uruchomiony przez Maciej (administrator) ELMARIACI (13-11-2015 15:47:35) Uruchomiony z C:\Pobieranie Załadowane profile: Maciej (Dostępne profile: Maciej & UpdatusUser & Gość) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe (Hewlett-Packard Company) C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (pdfforge GmbH) C:\Program Files\PDF Architect 3\creator-ws.exe (Safer-Networking Ltd.) C:\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe (Safer-Networking Ltd.) C:\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe () C:\ProgramData\wget.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [amd_dc_opt] => C:\AMD\amd_dc_opt\amd_dc_opt.exe [106496 2006-06-28] () HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3826600 2015-10-30] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1130408 2015-10-16] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\Run: [AVG-Secure-Search-Update_0913b] => C:\Users\Maciej\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid 841e7423ac6f47d0a35ed154d43bfa55-d1113e44ae21302e57bdbc3bdf4438affb0710ff --CMPID 0913b HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {794ebf05-7934-11e2-af04-001d92df13a6} - H:\AutoRun.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {794ebf0a-7934-11e2-af04-001d92df13a6} - H:\AutoRun.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {794ebf0c-7934-11e2-af04-001d92df13a6} - H:\AutoRun.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {794ebf0e-7934-11e2-af04-001d92df13a6} - H:\AutoRun.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {8812528a-5780-11e5-9ff6-001d92df13a6} - H:\Setup.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {9c09e5c0-fcb5-11e1-9871-806e6f6e6963} - G:\autorun.exe HKU\S-1-5-21-227159230-626954009-1044769965-1000\...\MountPoints2: {b5deb9ab-c85e-11e3-bb84-001d92df13a6} - "H:\WD SmartWare.exe" autoplay=true HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) BootExecute: autocheck autochk * /sync /restart /sync /restart /sync /restartsdnclean.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 192.168.1.1 Tcpip\..\Interfaces\{7173B5D7-D23C-4451-AFEB-9156F3B3EECD}: [DhcpNameServer] 10.0.0.2 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-227159230-626954009-1044769965-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-227159230-626954009-1044769965-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: PDF Architect 3 Helper -> {06E08260-0695-4EC1-A74B-1310D8899D93} -> C:\Program Files\PDF Architect 3\creator-ie-helper.dll [2015-04-24] (pdfforge GmbH) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation) BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.) Toolbar: HKLM - PDF Architect 3 Toolbar - {2DFF3579-5AA7-45B9-9328-1D38EA230861} - C:\Program Files\PDF Architect 3\creator-ie-plugin.dll [2015-04-24] (pdfforge GmbH) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab FireFox: ======== FF ProfilePath: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\tsz4po0w.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-03-04] (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-03-04] (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-227159230-626954009-1044769965-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Maciej\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [Brak pliku] FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff FF Extension: Brak nazwy - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-04-18] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 3\resources\pdfarchitect3firefoxextension FF Extension: PDF Architect 3 Creator - C:\Program Files\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-06-19] [Brak podpisu cyfrowego] StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe Chrome: ======= CHR StartupUrls: Default -> "hxxp://do-search.com/?type=hp&ts=1430335197&from=cor&uid=ST3500320AS_9QM2ZQMQXXXX9QM2ZQMQ" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll => Brak pliku CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll => Brak pliku CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\46.0.2490.86\ppGoogleNaClPluginChrome.dll => Brak pliku CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\46.0.2490.86\pdf.dll => Brak pliku CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Mozilla Firefox\plugins\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (vShare.tv plug-in) - C:\Mozilla Firefox\plugins\npvsharetvplg.dll (vShare.tv ) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll => Brak pliku CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll => Brak pliku CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\system32\npDeployJava1.dll => Brak pliku CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll => Brak pliku CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (VLC Web Plugin) - C:\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll => Brak pliku CHR Profile: C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Google Search) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28] CHR Extension: (Gmail) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [595376 2015-10-30] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3815648 2015-10-30] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-10-16] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-10-30] (AVG Technologies CZ, s.r.o.) S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-04-01] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego] R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-05-21] (Hewlett-Packard Company) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15904544 2014-02-05] (NVIDIA Corporation) S3 PDF Architect 3; C:\Program Files\PDF Architect 3\ws.exe [2244312 2015-04-24] (pdfforge GmbH) S3 PDF Architect 3 CrashHandler; C:\Program Files\PDF Architect 3\crash-handler-ws.exe [901336 2015-04-24] (pdfforge GmbH) R2 PDF Architect 3 Creator; C:\Program Files\PDF Architect 3\creator-ws.exe [740568 2015-04-24] (pdfforge GmbH) R2 SDScannerService; C:\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AmdTools; C:\Windows\System32\DRIVERS\AmdTools.sys [31744 2006-06-27] (AMD, Inc.) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2012-06-20] () R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [156080 2015-08-10] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [256432 2015-10-19] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-08-14] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [192944 2015-10-21] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.) S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2012-12-27] (Phoenix Technologies) [Brak podpisu cyfrowego] R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-06-20] () R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-27] (NVIDIA Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2012-09-12] (Duplex Secure Ltd.) U3 ar9ks1kn; C:\Windows\system32\Drivers\ar9ks1kn.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder) S3 Cardex; \??\C:\Windows\system32\drivers\TBPANEL.SYS [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-11-13 15:45 - 2015-11-13 15:47 - 00000000 ____D C:\FRST 2015-11-11 16:49 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-11-11 16:49 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-11-11 16:49 - 2015-10-29 18:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-11-11 16:49 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-11-11 16:48 - 2015-10-20 18:46 - 02955776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-11-11 16:48 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-11-11 16:48 - 2015-10-20 18:45 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-11-11 16:48 - 2015-10-20 18:45 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-11-11 16:48 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-11-11 16:48 - 2015-10-20 18:45 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-11-11 16:48 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-11-11 16:48 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-11-11 16:48 - 2015-10-20 01:52 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-11-11 16:48 - 2015-10-20 01:52 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-11-11 16:48 - 2015-10-20 01:48 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-11-11 16:48 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-11-11 16:48 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-11-11 16:48 - 2015-10-20 01:45 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-11-11 16:48 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-11-11 16:48 - 2015-10-20 01:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-11-11 16:48 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-11-11 16:48 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-11-11 16:48 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-11-11 16:48 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-11-11 16:48 - 2015-10-20 00:29 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-11-11 16:48 - 2015-10-20 00:28 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-11-11 16:48 - 2015-10-20 00:28 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-11-11 16:48 - 2015-10-17 17:42 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-11-11 16:48 - 2015-10-13 17:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-11-11 16:48 - 2015-10-13 17:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-11-11 16:48 - 2015-10-13 05:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-11-11 16:48 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-11-11 16:48 - 2015-10-01 18:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-11-11 16:48 - 2015-09-23 14:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-11-11 16:48 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2015-11-02 16:54 - 2015-11-02 16:54 - 00000000 ____D C:\Users\Gość\AppData\Roaming\AVG 2015-11-02 16:44 - 2015-11-02 16:44 - 00000000 ____D C:\Users\Maciej\AppData\Roaming\AVG 2015-11-02 16:43 - 2015-11-02 16:43 - 00000906 _____ C:\Users\Public\Desktop\AVG Protection.lnk 2015-11-02 16:37 - 2015-11-02 16:41 - 00000000 ____D C:\ProgramData\Avg 2015-11-02 16:35 - 2015-11-02 16:37 - 00000000 ____D C:\Users\Maciej\AppData\Local\AvgSetupLog 2015-10-26 17:53 - 2015-11-01 09:14 - 00000000 ____D C:\Mozilla Firefox 2015-10-22 19:16 - 2015-11-06 09:41 - 00070705 _____ C:\Users\Maciej\Desktop\plan_zagospodarowania_przestrzennego.bak 2015-10-22 18:49 - 2015-11-06 09:45 - 00070384 _____ C:\Users\Maciej\Desktop\plan_zagospodarowania_przestrzennego.dwg 2015-10-21 16:24 - 2015-10-21 16:24 - 00229296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys 2015-10-21 16:14 - 2015-10-21 16:14 - 00192944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys 2015-10-21 15:53 - 2015-10-21 15:53 - 00000000 ____D C:\Program Files\Common Files\Java 2015-10-19 08:06 - 2015-10-19 08:06 - 00256432 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys 2015-10-15 14:17 - 2015-09-18 18:47 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-10-15 14:17 - 2015-09-18 18:44 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-10-15 14:17 - 2015-09-18 18:44 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-10-15 14:17 - 2015-09-18 18:44 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-10-15 14:17 - 2015-09-18 18:44 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-10-15 14:17 - 2015-09-18 18:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-15 14:17 - 2015-09-18 18:35 - 00999936 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-14 13:32 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-10-14 13:31 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-14 13:31 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-10-14 13:27 - 2015-10-01 18:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-10-14 13:27 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-10-14 13:27 - 2015-10-01 18:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-10-14 13:27 - 2015-10-01 18:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-10-14 13:27 - 2015-10-01 18:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-10-14 13:27 - 2015-10-01 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-11-13 15:47 - 2011-07-05 10:03 - 00000000 ____D C:\Pobieranie 2015-11-13 15:38 - 2009-07-14 05:34 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-11-13 15:38 - 2009-07-14 05:34 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-11-13 15:37 - 2013-10-23 22:20 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-11-13 15:34 - 2015-07-24 08:44 - 00000000 _____ C:\ProgramData\dat.bmp 2015-11-13 15:30 - 2011-07-04 22:25 - 02029603 _____ C:\Windows\WindowsUpdate.log 2015-11-13 15:29 - 2010-11-21 03:32 - 00752836 _____ C:\Windows\system32\perfh015.dat 2015-11-13 15:29 - 2010-11-21 03:32 - 00160214 _____ C:\Windows\system32\perfc015.dat 2015-11-13 15:29 - 2010-11-20 22:01 - 01696174 _____ C:\Windows\system32\PerfStringBackup.INI 2015-11-13 15:27 - 2012-03-30 11:34 - 00000000 ____D C:\ProgramData\MFAData 2015-11-13 15:25 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2015-11-13 15:23 - 2013-10-23 22:20 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-11-13 15:23 - 2012-03-13 09:33 - 00253937 _____ C:\Windows\setupact.log 2015-11-13 15:22 - 2011-07-05 10:11 - 00000000 ____D C:\ProgramData\NVIDIA 2015-11-13 15:22 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-11-13 15:22 - 2009-07-14 05:33 - 00512864 _____ C:\Windows\system32\FNTCACHE.DAT 2015-11-13 15:20 - 2012-03-14 15:06 - 00941254 _____ C:\Windows\PFRO.log 2015-11-13 15:20 - 2010-11-21 03:41 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-13 15:20 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL 2015-11-11 23:36 - 2013-08-19 00:38 - 00000000 ____D C:\Windows\system32\MRT 2015-11-11 23:31 - 2011-07-04 22:31 - 00000000 ____D C:\Users\Maciej 2015-11-11 23:27 - 2011-07-05 08:01 - 143250520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-11-11 23:21 - 2011-07-05 00:22 - 00000000 ____D C:\CesarFTP 2015-11-11 22:55 - 2014-05-08 08:40 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-11-11 16:55 - 2012-04-05 12:56 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-11-11 16:55 - 2011-07-12 18:28 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-11-11 16:38 - 2013-10-23 22:21 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-11-02 16:54 - 2015-05-25 11:37 - 00000000 ____D C:\Users\Gość\AppData\Local\Avg 2015-11-02 16:47 - 2015-05-25 11:37 - 00000000 ____D C:\Users\Maciej\AppData\Local\Avg 2015-11-02 16:45 - 2013-10-03 14:53 - 00000000 ____D C:\Program Files\AVG 2015-11-02 16:44 - 2014-08-19 14:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2015-11-02 16:44 - 2012-03-30 11:36 - 00000000 ___HD C:\$AVG 2015-11-02 16:43 - 2015-06-29 15:35 - 00000000 ____D C:\Program Files\Common Files\AV 2015-11-01 18:42 - 2012-05-16 10:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-10-25 21:56 - 2009-07-14 05:53 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-10-21 15:54 - 2015-10-05 16:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-10-21 15:54 - 2014-02-23 17:29 - 00000000 ____D C:\ProgramData\Oracle 2015-10-21 15:53 - 2015-10-05 16:24 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2015-10-21 15:53 - 2015-08-26 16:46 - 00000000 ____D C:\Users\Maciej\.oracle_jre_usage 2015-10-21 15:53 - 2011-07-05 00:02 - 00000000 ____D C:\Program Files\Java 2015-10-15 19:46 - 2015-04-15 13:20 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-15 19:46 - 2014-05-06 11:47 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-10-15 15:52 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2015-10-15 14:22 - 2014-04-02 22:45 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk ==================== Pliki w katalogu głównym wybranych folderów ======= 2011-07-06 22:41 - 2012-12-03 19:36 - 0007596 _____ () C:\Users\Maciej\AppData\Local\Resmon.ResmonCfg 2012-10-31 20:19 - 2012-10-31 20:21 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempab2104.html 2012-11-27 20:06 - 2012-11-27 21:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempae2364.html 2012-10-21 15:51 - 2012-10-21 17:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAE3748.html 2013-02-26 00:39 - 2013-02-26 00:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAF2128.html 2013-03-06 20:30 - 2013-03-06 23:43 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAi3688.html 2012-10-29 19:30 - 2012-10-29 21:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempaj3096.html 2012-11-02 21:29 - 2012-11-02 21:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAl1048.html 2013-02-19 22:34 - 2013-02-20 00:11 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAL1760.html 2013-02-13 21:02 - 2013-02-13 21:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAq3092.html 2012-10-09 19:49 - 2012-10-09 20:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempaq3520.html 2013-05-07 08:40 - 2013-05-07 11:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempaR2272.html 2013-05-07 20:57 - 2013-05-07 23:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempaS3900.html 2013-03-26 21:49 - 2013-03-26 23:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAS4520.html 2013-01-14 01:39 - 2013-01-14 01:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempas5512.html 2012-12-11 23:24 - 2012-12-11 23:25 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAt2556.html 2013-05-05 22:37 - 2013-05-06 00:26 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempaX3748.html 2013-03-01 22:57 - 2013-03-01 22:57 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempax3812.html 2013-03-05 22:47 - 2013-03-05 22:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempaY1780.html 2012-10-03 19:52 - 2012-10-03 21:40 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempAy1940.html 2013-02-15 21:17 - 2013-02-15 21:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempbb1744.html 2012-10-18 18:16 - 2012-10-18 18:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempbb3280.html 2012-11-15 12:02 - 2012-11-15 12:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempbg3996.html 2013-04-09 10:40 - 2013-04-09 10:41 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempBL3056.html 2012-10-18 12:54 - 2012-10-18 12:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempBp1284.html 2012-11-28 22:46 - 2012-11-28 23:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempbr3904.html 2013-02-28 11:15 - 2013-02-28 11:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempbs3128.html 2013-06-19 21:29 - 2013-06-20 00:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempBs8104.html 2013-05-13 21:59 - 2013-05-13 22:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempBU4136.html 2012-12-16 22:56 - 2012-12-16 22:57 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempcA2156.html 2013-01-16 10:24 - 2013-01-16 10:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempcA2952.html 2012-09-24 21:22 - 2012-09-24 22:02 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempcB2348.html 2013-03-31 07:23 - 2013-03-31 07:23 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempcg3268.html 2013-05-26 20:31 - 2013-05-26 20:36 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempCm4032.html 2012-10-20 08:14 - 2012-10-20 08:14 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempcs2896.html 2013-02-13 20:20 - 2013-02-13 20:21 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempcs2976.html 2013-02-20 23:45 - 2013-02-20 23:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempcX3916.html 2012-11-26 10:51 - 2012-11-26 12:46 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempCY4364.html 2012-09-24 10:27 - 2012-09-24 10:29 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempdB4036.html 2012-10-29 21:55 - 2012-10-29 21:56 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempde3296.html 2012-12-26 10:45 - 2012-12-26 10:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDi2904.html 2013-03-15 00:51 - 2013-03-15 00:52 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDK3572.html 2012-12-06 00:11 - 2012-12-06 00:14 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDL2724.html 2013-05-07 11:09 - 2013-05-07 12:36 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDp3688.html 2012-10-03 22:36 - 2012-10-03 22:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDt5656.html 2012-12-02 20:40 - 2012-12-02 20:40 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDv3524.html 2012-11-14 20:49 - 2012-11-14 20:50 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDv4016.html 2012-10-19 19:01 - 2012-10-19 19:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempdWD672.html 2013-03-29 21:06 - 2013-03-29 21:10 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempDz2052.html 2013-01-31 10:34 - 2013-01-31 10:35 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempeg2204.html 2013-01-16 11:26 - 2013-01-16 11:28 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempEI2288.html 2013-10-02 09:46 - 2013-10-02 10:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempEK6704.html 2012-12-12 10:37 - 2012-12-12 10:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempEO3544.html 2012-11-26 18:09 - 2012-11-26 18:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempeRN364.html 2013-06-12 19:15 - 2013-06-12 19:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempet1088.html 2013-03-02 13:00 - 2013-03-02 13:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempEt1540.html 2013-02-16 21:02 - 2013-02-16 21:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempet1852.html 2013-01-30 20:16 - 2013-01-30 20:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempeV4068.html 2012-11-13 18:51 - 2012-11-13 19:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempeYv716.html 2013-02-18 22:13 - 2013-02-18 23:05 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempfAE996.html 2012-10-22 19:13 - 2012-10-22 19:13 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempfF3588.html 2012-11-22 00:13 - 2012-11-22 00:14 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempFN2972.html 2013-07-12 22:24 - 2013-07-12 22:47 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempfo5256.html 2012-12-18 11:29 - 2012-12-18 11:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempfr5712.html 2013-02-14 00:20 - 2013-02-14 00:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempFu6084.html 2013-05-06 13:19 - 2013-05-06 13:19 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempfx5304.html 2013-02-14 23:38 - 2013-02-14 23:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempfY6400.html 2013-03-21 11:05 - 2013-03-21 11:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempfz2956.html 2013-05-07 11:09 - 2013-05-07 12:36 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempFz3688.html 2012-09-22 13:24 - 2012-09-22 13:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGA3804.html 2013-01-17 18:37 - 2013-01-17 18:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempga3932.html 2013-02-03 23:37 - 2013-02-03 23:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGf2896.html 2012-10-18 19:36 - 2012-10-18 21:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempgG2992.html 2013-03-18 21:49 - 2013-03-18 23:59 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempgg3044.html 2012-12-09 22:40 - 2012-12-09 22:41 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGJi924.html 2012-11-20 08:55 - 2012-11-20 09:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGm1728.html 2012-10-01 18:10 - 2012-10-01 21:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempgN3372.html 2013-03-07 23:33 - 2013-03-07 23:34 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempgO2984.html 2013-05-08 19:50 - 2013-05-08 20:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGO5036.html 2013-01-14 14:45 - 2013-01-14 14:46 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGP9696.html 2012-10-10 22:01 - 2012-10-10 22:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGQ1372.html 2012-09-12 22:12 - 2012-09-12 22:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempGQM496.html 2013-03-03 18:55 - 2013-03-03 18:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempgr2516.html 2013-02-14 20:31 - 2013-02-14 20:31 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempgTA208.html 2013-03-20 15:11 - 2013-03-20 15:11 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempgu3256.html 2012-10-24 08:41 - 2012-10-24 08:42 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHc1288.html 2013-02-28 19:44 - 2013-02-28 19:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temphe2660.html 2012-10-16 20:06 - 2012-10-16 22:13 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHG1344.html 2013-05-06 11:40 - 2013-05-06 13:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHG2436.html 2013-07-29 20:50 - 2013-07-29 21:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemphI3920.html 2012-10-25 08:59 - 2012-10-25 09:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHJ2668.html 2013-02-27 23:24 - 2013-02-27 23:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHm2216.html 2012-12-28 20:14 - 2012-12-28 20:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temphp7952.html 2012-10-23 20:50 - 2012-10-23 22:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempHtS200.html 2012-09-29 17:57 - 2012-09-29 17:58 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempiA4028.html 2012-09-11 21:23 - 2012-09-11 22:25 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempid3780.html 2012-11-07 12:38 - 2012-11-07 12:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIF3988.html 2013-01-31 21:41 - 2013-01-31 21:42 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIfq664.html 2012-11-19 18:47 - 2012-11-19 18:50 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIj1952.html 2013-04-03 10:02 - 2013-04-03 11:18 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIl3720.html 2013-04-03 13:37 - 2013-04-03 13:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempil4008.html 2012-11-26 00:06 - 2012-11-26 00:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempil4656.html 2013-03-30 23:44 - 2013-03-30 23:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIm2856.html 2013-03-21 23:15 - 2013-03-21 23:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempiO1544.html 2013-06-18 21:41 - 2013-06-18 21:42 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempiO4864.html 2013-03-19 22:51 - 2013-03-20 00:29 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIT3576.html 2012-09-17 18:58 - 2012-09-17 20:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempIV3136.html 2013-04-17 20:52 - 2013-04-17 20:52 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempj12620.html 2013-09-12 22:34 - 2013-09-12 22:34 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempjC5492.html 2013-03-31 22:23 - 2013-03-31 22:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJF3808.html 2013-01-22 20:37 - 2013-01-22 22:32 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJg2220.html 2013-03-15 14:05 - 2013-03-15 14:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempji2184.html 2012-09-20 19:52 - 2012-09-20 21:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJl2628.html 2013-07-28 21:21 - 2013-07-28 23:35 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempjm3960.html 2013-01-16 20:09 - 2013-01-17 00:23 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJn1336.html 2013-03-25 23:08 - 2013-03-25 23:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempjq2232.html 2013-01-29 19:43 - 2013-01-29 19:43 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJQ3896.html 2012-10-19 19:39 - 2012-10-19 19:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempjRe384.html 2013-02-25 23:25 - 2013-02-25 23:26 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempjS1504.html 2012-12-10 23:13 - 2012-12-10 23:13 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempJV3752.html 2013-03-26 20:55 - 2013-03-26 20:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempjW4356.html 2012-11-07 22:39 - 2012-11-07 22:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempjXe932.html 2012-12-03 22:09 - 2012-12-03 22:09 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempK10904.html 2013-01-23 21:39 - 2013-01-23 21:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKA5192.html 2012-11-22 00:14 - 2012-11-22 00:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempkG1388.html 2012-10-09 21:03 - 2012-10-09 23:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKi3768.html 2013-07-21 22:34 - 2013-07-21 22:34 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKn2320.html 2012-11-20 20:51 - 2012-11-20 20:51 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempkny956.html 2012-11-13 20:27 - 2012-11-13 23:43 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKog372.html 2013-04-15 16:16 - 2013-04-15 16:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempkq2632.html 2013-07-31 21:39 - 2013-07-31 21:40 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempks3676.html 2012-09-17 15:35 - 2012-09-17 15:36 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKS5668.html 2013-03-13 00:41 - 2013-03-13 00:41 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKw2568.html 2013-01-28 23:41 - 2013-01-28 23:50 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempkWV660.html 2012-10-09 21:03 - 2012-10-09 23:38 - 0002089 _____ () C:\Users\Maciej\AppData\Local\Tempkx3768.html 2013-02-26 11:27 - 2013-02-26 11:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempKy2152.html 2013-04-08 22:22 - 2013-04-08 23:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLA4416.html 2012-11-09 12:42 - 2012-11-09 12:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLd2520.html 2013-02-14 22:43 - 2013-02-14 23:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLD5108.html 2012-09-11 21:23 - 2012-09-11 22:25 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempLe3780.html 2013-02-17 22:30 - 2013-02-17 22:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLgt656.html 2013-04-09 13:45 - 2013-04-09 13:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLGu612.html 2012-10-28 22:08 - 2012-10-28 22:09 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemplN3952.html 2012-10-20 10:32 - 2012-10-20 10:33 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemplP1040.html 2013-06-18 22:21 - 2013-06-18 22:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempLp5716.html 2013-04-06 08:33 - 2013-04-06 08:57 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Templs2496.html 2012-11-02 13:57 - 2012-11-02 14:27 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempLZ2672.html 2012-11-27 23:52 - 2012-11-27 23:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMf4916.html 2012-11-03 18:12 - 2012-11-03 18:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMh2380.html 2013-05-09 19:10 - 2013-05-09 19:10 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempml3184.html 2013-01-17 23:10 - 2013-01-17 23:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMM2112.html 2013-04-04 22:03 - 2013-04-05 00:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempmp2964.html 2013-01-27 17:24 - 2013-01-27 18:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempmq3932.html 2012-10-30 20:44 - 2012-10-30 20:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMr1756.html 2012-10-15 20:01 - 2012-10-15 21:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMS4672.html 2012-11-10 20:06 - 2012-11-10 20:07 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMu1060.html 2012-10-07 20:27 - 2012-10-07 21:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempMW5756.html 2013-02-26 01:01 - 2013-02-26 01:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempmy5756.html 2013-04-24 22:27 - 2013-04-24 22:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempn11572.html 2012-11-18 22:08 - 2012-11-18 22:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempnf2648.html 2013-01-06 19:18 - 2013-01-06 19:19 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempNI2672.html 2012-11-19 18:44 - 2012-11-19 18:51 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempnj1952.html 2012-09-18 19:16 - 2012-09-18 21:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempNJ2500.html 2013-03-06 11:36 - 2013-03-06 13:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempnr3728.html 2012-10-25 14:06 - 2012-10-25 18:46 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempns1112.html 2012-09-23 18:59 - 2012-09-23 22:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempnw2720.html 2013-02-26 01:04 - 2013-02-26 01:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempNy4356.html 2012-09-23 18:59 - 2012-09-23 22:03 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempOc2720.html 2013-01-07 21:52 - 2013-01-07 21:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempOc6036.html 2013-03-13 23:11 - 2013-03-13 23:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempof1704.html 2013-01-30 23:49 - 2013-01-30 23:49 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempoi2240.html 2012-10-04 21:01 - 2012-10-04 22:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempOI2600.html 2013-02-19 10:46 - 2013-02-19 10:47 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempol3516.html 2013-02-01 00:16 - 2013-02-01 00:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempOm2380.html 2012-09-26 21:29 - 2012-09-26 22:32 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempoQ2500.html 2013-01-15 20:02 - 2013-01-16 00:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempos3368.html 2012-12-30 22:55 - 2012-12-30 22:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempOT3724.html 2013-04-06 23:16 - 2013-04-06 23:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempou4812.html 2012-11-12 22:38 - 2012-11-12 23:52 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempoV2448.html 2013-01-23 20:19 - 2013-01-23 21:31 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempOw2208.html 2012-09-19 19:16 - 2012-09-19 21:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempoX3972.html 2013-05-08 20:44 - 2013-05-08 20:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPe5396.html 2012-09-28 22:20 - 2012-09-28 22:25 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPI3884.html 2013-01-28 20:15 - 2013-01-28 21:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPJ1860.html 2012-09-25 10:42 - 2012-09-25 10:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temppn2684.html 2012-10-05 20:25 - 2012-10-05 22:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temppo2340.html 2013-02-18 19:04 - 2013-02-18 19:19 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemppO3180.html 2012-11-27 12:12 - 2012-11-27 12:13 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPr6852.html 2013-03-17 22:29 - 2013-03-17 22:29 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemppT1272.html 2013-02-21 22:42 - 2013-02-22 00:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPt3160.html 2012-12-04 22:52 - 2012-12-04 23:20 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPT6408.html 2013-09-21 23:27 - 2013-09-21 23:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temppv6748.html 2013-05-09 11:09 - 2013-05-09 13:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempPy1656.html 2013-01-14 13:43 - 2013-01-14 13:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQA1084.html 2013-02-13 21:02 - 2013-02-14 00:07 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQB3092.html 2012-10-22 08:04 - 2012-10-22 08:05 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQC3248.html 2013-01-10 20:55 - 2013-01-10 23:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempqE3944.html 2013-02-16 17:42 - 2013-02-16 19:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempqF2792.html 2012-11-15 12:35 - 2012-11-15 12:59 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqf2824.html 2012-11-26 20:30 - 2012-11-26 22:20 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqg3696.html 2013-02-14 20:56 - 2013-02-14 21:37 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQH1172.html 2013-01-26 09:30 - 2013-01-26 09:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQh3960.html 2012-10-24 19:15 - 2012-10-24 21:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqj2464.html 2012-10-02 19:29 - 2012-10-02 21:50 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqk3880.html 2013-01-17 00:26 - 2013-01-17 00:26 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQL2848.html 2013-03-30 23:38 - 2013-03-30 23:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempqN1648.html 2012-11-11 18:33 - 2012-11-11 18:33 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQp3780.html 2013-01-30 20:49 - 2013-01-30 23:32 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempqQ3444.html 2013-10-02 14:06 - 2013-10-02 14:22 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqs1336.html 2013-10-03 19:26 - 2013-10-03 23:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempqV2880.html 2013-02-25 23:32 - 2013-02-25 23:32 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempQv3904.html 2012-12-22 10:08 - 2012-12-22 10:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempqz3728.html 2013-10-02 08:35 - 2013-10-02 09:42 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemprD1388.html 2013-05-08 11:23 - 2013-05-08 11:59 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempRe2100.html 2012-11-05 17:53 - 2012-11-05 17:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempRE3964.html 2013-05-06 20:51 - 2013-05-06 23:07 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temprk2180.html 2013-05-08 12:52 - 2013-05-08 12:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempRk4432.html 2013-02-17 23:28 - 2013-02-17 23:28 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempRp4588.html 2012-10-20 20:59 - 2012-10-20 20:59 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TemprP5120.html 2013-01-25 11:53 - 2013-01-25 11:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempRv3316.html 2013-02-10 21:27 - 2013-02-10 21:28 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempry2116.html 2012-11-09 20:51 - 2012-11-09 20:51 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempsa2868.html 2013-03-31 07:23 - 2013-03-31 07:23 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempSd3268.html 2012-10-21 20:01 - 2012-10-21 20:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempsD4904.html 2012-11-02 13:57 - 2012-11-02 14:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSe2672.html 2013-10-04 10:05 - 2013-10-04 10:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSe3868.html 2012-11-27 09:28 - 2012-11-27 09:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempsf3756.html 2012-12-03 18:53 - 2012-12-03 18:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempsH3404.html 2013-02-08 00:46 - 2013-02-08 00:47 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempsh5696.html 2013-10-01 20:31 - 2013-10-02 00:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSMi932.html 2013-02-11 23:06 - 2013-02-11 23:07 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSn1976.html 2013-07-12 21:03 - 2013-07-12 21:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSo1028.html 2012-11-19 23:08 - 2012-11-19 23:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempsP1116.html 2012-09-24 21:22 - 2012-09-24 22:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSq2348.html 2012-11-30 13:03 - 2012-11-30 13:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSQ3272.html 2013-01-29 00:02 - 2013-01-29 00:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempst2352.html 2013-03-20 22:23 - 2013-03-21 00:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempSw2404.html 2013-05-09 20:14 - 2013-05-09 23:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempsY2364.html 2012-10-08 18:31 - 2012-10-08 18:34 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTa1716.html 2012-10-20 12:54 - 2012-10-20 12:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTB4748.html 2013-03-15 21:28 - 2013-03-15 21:28 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTc3792.html 2012-10-21 20:01 - 2012-10-21 20:55 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempTc4904.html 2013-05-08 21:02 - 2013-05-08 21:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempte6288.html 2013-10-04 13:03 - 2013-10-04 13:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTG8380.html 2013-05-09 23:58 - 2013-05-10 00:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTk1336.html 2013-02-07 21:15 - 2013-02-07 22:47 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temptl2904.html 2012-11-04 19:15 - 2012-11-04 19:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempTM2800.html 2012-10-18 12:38 - 2012-10-18 12:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temptn3924.html 2013-01-26 01:14 - 2013-01-26 01:15 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Temptx2232.html 2013-01-14 12:42 - 2013-01-14 12:45 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempty3804.html 2013-03-25 20:01 - 2013-03-25 20:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempUb2996.html 2012-10-04 20:00 - 2012-10-04 20:57 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempuc1612.html 2012-10-20 12:09 - 2012-10-20 12:09 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempuf2628.html 2013-01-30 11:59 - 2013-01-30 12:18 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempUl2252.html 2013-02-26 01:16 - 2013-02-26 01:16 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempuL5404.html 2013-04-12 00:38 - 2013-04-12 00:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempUN7132.html 2012-11-01 21:54 - 2012-11-01 21:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempUq1168.html 2013-03-12 17:48 - 2013-03-12 17:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempUs3752.html 2013-03-30 23:47 - 2013-03-31 00:07 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempuu3860.html 2013-04-17 14:30 - 2013-04-17 14:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempv14900.html 2013-05-26 21:24 - 2013-05-26 21:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempVc2168.html 2013-01-24 19:27 - 2013-01-24 23:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempvD3584.html 2013-03-16 00:30 - 2013-03-16 00:30 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempVf2568.html 2013-01-29 23:05 - 2013-01-29 23:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempVF5248.html 2013-10-03 15:04 - 2013-10-03 16:11 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempVgT576.html 2012-09-13 21:30 - 2012-09-13 23:13 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempvI3492.html 2012-10-08 20:51 - 2012-10-08 21:01 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempvP3448.html 2013-02-26 00:18 - 2013-02-26 00:18 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempVq6132.html 2013-02-14 21:42 - 2013-02-14 22:04 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempvW1028.html 2013-10-02 19:17 - 2013-10-02 23:19 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempWb3952.html 2013-10-05 14:10 - 2013-10-05 14:12 - 0002089 _____ () C:\Users\Maciej\AppData\Local\Tempwc2772.html 2012-09-25 21:30 - 2012-09-25 23:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempWH2240.html 2013-02-27 00:03 - 2013-02-27 00:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempWm2300.html 2013-02-10 22:50 - 2013-02-10 22:51 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempWQ3264.html 2012-11-07 20:01 - 2012-11-07 20:02 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempWS3936.html 2013-03-04 21:36 - 2013-03-04 21:36 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempwv2468.html 2012-10-17 19:41 - 2012-10-17 22:09 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempwx2216.html 2012-09-28 22:20 - 2012-09-28 22:25 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempWz3884.html 2013-02-26 21:02 - 2013-02-26 21:03 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempXC1044.html 2012-09-21 20:36 - 2012-09-21 20:51 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempxCa992.html 2013-03-29 15:00 - 2013-03-29 15:00 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempXE1756.html 2012-11-29 20:27 - 2012-11-29 21:06 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempXF1152.html 2013-04-03 22:44 - 2013-04-03 22:44 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempXH2632.html 2013-02-14 00:09 - 2013-02-14 00:09 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempxpd752.html 2013-10-05 14:10 - 2013-10-05 14:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempXv2772.html 2012-09-14 21:40 - 2012-09-14 22:56 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYF2336.html 2013-02-05 23:48 - 2013-02-05 23:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYl3616.html 2012-09-21 20:36 - 2012-09-21 20:51 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempYLd992.html 2012-10-11 18:31 - 2012-10-11 20:46 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYN1248.html 2013-03-16 23:02 - 2013-03-17 00:50 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYN1652.html 2013-03-16 20:27 - 2013-03-16 20:27 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempyp1120.html 2012-11-15 21:54 - 2012-11-15 22:39 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYP3696.html 2013-05-07 18:53 - 2013-05-07 18:53 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempyR2372.html 2013-02-15 22:50 - 2013-02-15 23:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempyR2892.html 2013-01-20 22:03 - 2013-01-21 00:55 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYr3380.html 2013-09-04 22:47 - 2013-09-04 22:48 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempyr4012.html 2012-10-09 08:37 - 2012-10-09 08:38 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempys1904.html 2012-11-22 20:32 - 2012-11-22 22:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempYU4816.html 2012-11-26 16:31 - 2012-11-26 16:32 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempyv3748.html 2013-03-27 23:17 - 2013-03-28 00:08 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempZB1556.html 2013-03-29 22:06 - 2013-03-30 00:17 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempZB2144.html 2013-01-15 00:10 - 2013-01-15 00:12 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempZd1056.html 2013-07-28 21:21 - 2013-07-28 23:35 - 0002089 _____ () C:\Users\Maciej\AppData\Local\TempZj3960.html 2013-05-08 21:26 - 2013-05-08 21:26 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempzQ6564.html 2013-01-29 20:05 - 2013-01-29 21:54 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempzS3300.html 2013-10-04 21:58 - 2013-10-04 22:14 - 0002432 _____ () C:\Users\Maciej\AppData\Local\Tempzx1592.html 2012-10-21 19:24 - 2012-10-21 19:24 - 0002432 _____ () C:\Users\Maciej\AppData\Local\TempZz3500.html 2015-07-24 08:44 - 2015-11-13 15:34 - 0000000 _____ () C:\ProgramData\dat.bmp 2015-07-23 21:48 - 2015-07-23 21:48 - 0401408 _____ () C:\ProgramData\wget.exe Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\wget.exe Niektóre pliki w TEMP: ==================== C:\Users\Maciej\AppData\Local\Temp\avg-7b923056-1a66-4e6d-86d4-d07537ad7269.exe C:\Users\Maciej\AppData\Local\Temp\DataCard_Setup.exe C:\Users\Maciej\AppData\Local\Temp\jre-8u60-windows-au.exe C:\Users\Maciej\AppData\Local\Temp\jre-8u65-windows-au.exe C:\Users\Maciej\AppData\Local\Temp\ResetDevice.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-11-11 17:13 ==================== Koniec FRST.txt ============================