Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-05-2016
Uruchomiony przez s.kopertowski (administrator)  PC-SK (09-05-2016 22:02:33)
Uruchomiony z C:\Users\s.kopertowski\Desktop\virus
Załadowane profile: s.kopertowski & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Dostępne profile: s.kopertowski & admin-local & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Platform: Windows 10 Pro Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\3.30.8\LogiOptionsMgr.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(AVAST Software) C:\Users\s.kopertowski\AppData\Roaming\AVAST Software\Browser Cleanup\BCUSched.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14062848 2015-07-20] (Realtek Semiconductor)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1553528 2015-11-14] (Logitech, Inc.)
HKLM\...\Run: [Seagull Drivers] => ssdal_nc.exe startup
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281696 2015-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [1088944 2016-04-14] ()
HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X8 (64-bit)\pua.exe [2012104 2015-11-27] (Corel Corporation)
HKLM-x32\...\Run: [ProfitCRMLiveUpdate] => C:\Program Files (x86)\Ac.Software\Platforma\RunLU.exe [59104 2016-05-02] (AC SOFTWARE SP. Z O.O.)
HKLM-x32\...\Run: [Sage Komunikator] => C:\Program Files (x86)\Sage\Komunikator\SageUpdt.exe [246736 2013-01-03] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\runonceex: [Flags] => 128
HKLM\...\runonceex: [Title] => RAPID uninstall cleanup using key [0001]
HKU\S-1-5-21-2924344153-416052133-3793593207-1144\...\RunOnce: [Uninstall C:\Users\s.kopertowski\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\s.kopertowski\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-2924344153-416052133-3793593207-1144\...\RunOnce: [Uninstall C:\Users\s.kopertowski\AppData\Local\Microsoft\OneDrive\17.3.6302.0225] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\s.kopertowski\AppData\Local\Microsoft\OneDrive\17.3.6302.0225"

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 172.16.10.10 192.168.68.1
Tcpip\..\Interfaces\{411f23e6-161e-45df-907b-c1d1c4dd3383}: [DhcpNameServer] 172.16.10.10 192.168.68.1
Tcpip\..\Interfaces\{81569997-f42c-402a-9727-858fb81f44b2}: [DhcpNameServer] 172.16.10.10 192.168.68.1

Internet Explorer:
==================
HKU\S-1-5-21-2924344153-416052133-3793593207-1144\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-04-29] (Microsoft Corporation)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-07] (AO Kaspersky Lab)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-04-29] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-04-29] (Microsoft Corporation)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-07] (AO Kaspersky Lab)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-04-29] (Microsoft Corporation)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-07] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-07] (AO Kaspersky Lab)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-29] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-04-29] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-04-29] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-26] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-03-18]

Chrome: 
=======
CHR Profile: C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-05-02]
CHR Extension: (Prezentacje Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-18]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-18]
CHR Extension: (Dysk Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-18]
CHR Extension: (YouTube) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-18]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2016-05-02]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-03-18]
CHR Extension: (Arkusze Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-18]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-02]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2016-05-02]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-02]
CHR Extension: (Tłumacz Google) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn [2016-05-02]
CHR Extension: (Gmail) - C:\Users\s.kopertowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-18]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [105256 2016-03-22] (Alps Electric Co., Ltd.)
S2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-12-07] (Kaspersky Lab ZAO)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2911464 2016-04-29] (Microsoft Corporation)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2016-04-14] ()
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373736 2016-03-29] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [50880 2014-02-21] (Microsoft Corporation)
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [202288 2016-04-28] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 ReportServer$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2450112 2014-02-21] (Microsoft Corporation)
R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28256 2015-09-04] (Samsung Electronics Co., Ltd.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [65008 2015-08-27] (Synaptics Incorporated)
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [98840 2015-06-08] (O2Micro)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [299280 2015-12-18] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-03-18] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-07] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [227512 2015-12-07] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [927640 2016-03-18] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39608 2015-06-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-07] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87944 2015-12-07] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-09] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195336 2015-09-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2015-10-30] (Intel Corporation)
S4 RsFx0300; C:\Windows\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [771816 2015-08-27] (Realsil Semiconductor Corporation)
R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [271968 2015-09-04] (Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [110688 2015-09-04] (Samsung Electronics Co., Ltd.)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [45720 2015-12-31] (Toshiba Corporation)
R3 VPPP; C:\Windows\System32\drivers\VPPP.sys [41640 2012-12-19] (DrayTek, Corp.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 uxldapog; C:\Users\S8EF9~1.KOP\AppData\Local\Temp\uxldapog.sys [56584 2016-05-09] (GMER) [Brak podpisu cyfrowego]
U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-09 22:01 - 2016-05-09 22:02 - 00000000 ____D C:\FRST
2016-05-09 21:47 - 2016-05-09 22:02 - 00000000 ____D C:\Users\s.kopertowski\Desktop\virus
2016-05-09 20:57 - 2016-05-09 21:04 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-09 20:56 - 2016-05-09 21:04 - 00000000 ____D C:\Users\s.kopertowski\Desktop\mbar
2016-05-09 20:56 - 2016-05-09 20:56 - 16563352 _____ (Malwarebytes Corp.) C:\Users\s.kopertowski\Desktop\mbar-1.09.3.1001.exe
2016-05-09 20:48 - 2016-05-09 20:52 - 00000000 ____D C:\ProgramData\HitmanPro
2016-05-09 20:48 - 2016-05-09 20:48 - 11441168 _____ (SurfRight B.V.) C:\Users\s.kopertowski\Desktop\HitmanPro_x64.exe
2016-05-09 20:41 - 2016-05-09 22:01 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\CrashDumps
2016-05-09 20:40 - 2016-05-09 21:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-09 20:40 - 2016-05-09 20:57 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-09 20:40 - 2016-05-09 20:40 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-05-09 20:40 - 2016-05-09 20:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-09 20:40 - 2016-05-09 20:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-09 20:40 - 2016-05-09 20:40 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-09 20:40 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-09 20:40 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-09 19:46 - 2016-05-09 19:46 - 00004426 _____ C:\Windows\System32\Tasks\avast! BCU UpdateS-1-5-21-2924344153-416052133-3793593207-1144
2016-05-09 19:46 - 2016-05-09 19:46 - 00003540 _____ C:\Windows\System32\Tasks\avastBCLS-1-5-21-2924344153-416052133-3793593207-1144
2016-05-09 19:46 - 2016-05-09 19:46 - 00001160 _____ C:\Users\s.kopertowski\Desktop\Avast Browser Cleanup.lnk
2016-05-09 19:46 - 2016-05-09 19:46 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Microsoft\Windows\Start Menu\Avast Browser Cleanup
2016-05-09 19:46 - 2016-05-09 19:46 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\AVAST Software
2016-05-09 19:37 - 2016-05-09 21:04 - 00000000 ____D C:\AdwCleaner
2016-05-09 19:37 - 2016-05-09 19:37 - 03640384 _____ C:\Users\s.kopertowski\Desktop\adwcleaner_5.116.exe
2016-05-09 10:27 - 2016-05-09 10:27 - 00000000 ___HD C:\OneDriveTemp
2016-05-09 00:20 - 2016-05-09 00:20 - 00000334 _____ C:\DelFix.txt
2016-05-08 22:50 - 2016-05-08 23:37 - 00000000 ____D C:\Program Files\Anglerfish
2016-05-08 22:50 - 2016-05-08 22:50 - 00000877 _____ C:\Users\s.kopertowski\Desktop\Anglerfish.lnk
2016-05-08 22:50 - 2016-05-08 22:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnglerFish
2016-05-08 20:25 - 2016-05-08 20:25 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Skype
2016-05-08 19:12 - 2016-05-08 19:12 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\ePaperPress
2016-05-08 19:11 - 2016-05-08 19:11 - 00002615 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PTLens.lnk
2016-05-08 19:11 - 2016-05-08 19:11 - 00002603 _____ C:\Users\Public\Desktop\PTLens.lnk
2016-05-08 19:11 - 2016-05-08 19:11 - 00000000 ____D C:\Program Files\ePaperPress
2016-05-08 19:02 - 2016-05-08 19:02 - 00000000 ____D C:\Users\s.kopertowski\Documents\Corel PaintShop Pro X8 Script Guide
2016-05-08 18:59 - 2016-05-08 19:02 - 00000000 ____D C:\ProgramData\Protexis64
2016-05-08 18:59 - 2016-05-08 18:59 - 00001290 _____ C:\Users\Public\Desktop\Corel PaintShop Pro X8 (64-bit).lnk
2016-05-08 18:59 - 2016-05-08 18:59 - 00000000 ____D C:\Users\s.kopertowski\Documents\Corel PaintShop Pro
2016-05-08 18:59 - 2016-05-08 18:59 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Ulead Systems
2016-05-08 18:59 - 2016-05-08 18:59 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Corel PaintShop Pro
2016-05-08 18:59 - 2016-05-08 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel PaintShop Pro X8
2016-05-08 18:59 - 2016-05-08 18:59 - 00000000 ____D C:\Program Files\Common Files\Protexis
2016-05-08 18:58 - 2016-05-08 18:58 - 00000000 ____D C:\ProgramData\UniqueId
2016-05-08 18:58 - 2016-05-08 18:58 - 00000000 ____D C:\Program Files\Corel
2016-05-08 17:21 - 2016-05-08 17:48 - 00000000 ____D C:\Users\s.kopertowski\Desktop\gopro próby
2016-05-08 17:19 - 2016-05-08 23:50 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Apple Computer
2016-05-08 17:19 - 2016-05-08 17:19 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Apple Computer
2016-05-08 15:07 - 2016-05-08 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-05-08 15:07 - 2016-05-08 15:07 - 00000000 ____D C:\ProgramData\Apple Computer
2016-05-08 15:07 - 2016-05-08 15:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-05-08 14:53 - 2016-05-08 14:53 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-05-08 14:53 - 2016-05-08 14:53 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2016-05-08 14:53 - 2016-05-08 14:53 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Apple
2016-05-08 14:53 - 2016-05-08 14:53 - 00000000 ____D C:\ProgramData\Apple
2016-05-08 14:53 - 2016-05-08 14:53 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-05-08 14:50 - 2016-05-08 14:50 - 00000000 ____D C:\Users\s.kopertowski\AppData\LocalLow\Apple Computer
2016-05-08 14:34 - 2016-05-08 15:10 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\GoPro
2016-05-08 14:34 - 2016-05-08 14:37 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\GoPro
2016-05-08 14:33 - 2016-05-08 15:24 - 00000000 ____D C:\Users\Public\CineForm
2016-05-08 14:33 - 2016-05-08 14:33 - 00000876 _____ C:\Users\Public\Desktop\GoPro.lnk
2016-05-08 14:33 - 2016-05-08 14:33 - 00000826 _____ C:\Users\Public\Desktop\GoPro Studio.lnk
2016-05-08 14:33 - 2016-05-08 14:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2016-05-08 14:33 - 2016-05-08 14:33 - 00000000 ____D C:\Program Files\GoPro
2016-05-08 14:33 - 2016-05-08 14:33 - 00000000 ____D C:\Program Files (x86)\GoPro
2016-05-08 14:33 - 2016-05-08 14:33 - 00000000 ____D C:\Program Files (x86)\CineForm
2016-05-08 13:51 - 2016-05-08 13:51 - 01886773 _____ C:\Users\s.kopertowski\Desktop\Katalog.pdf
2016-05-06 12:40 - 2016-05-06 12:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-05-05 20:45 - 2016-05-06 00:33 - 00000000 ____D C:\Users\s.kopertowski\Desktop\A6 old
2016-05-05 14:19 - 2016-05-05 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-05-05 11:42 - 2016-05-05 11:42 - 2586419164 _____ C:\Windows\MEMORY.DMP
2016-05-05 11:42 - 2016-05-05 11:42 - 00281908 _____ C:\Windows\Minidump\050516-11250-01.dmp
2016-05-05 11:42 - 2016-05-05 11:42 - 00000000 ____D C:\Windows\Minidump
2016-05-04 15:44 - 2016-05-09 00:29 - 00000000 ____D C:\Users\s.kopertowski\Desktop\c4irefdg
2016-05-04 15:13 - 2016-05-04 15:17 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X5
2016-05-04 13:30 - 2016-05-04 13:30 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-05-04 12:38 - 2016-05-04 12:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\xtelsio_TAPI_for_Asterisk
2016-05-04 12:24 - 2016-05-04 12:38 - 00000000 ____D C:\Windows\system32\xtelsio_TAPI_for_Asterisk_cfg
2016-05-04 10:38 - 2016-05-04 12:38 - 00000000 ____D C:\Program Files\xtelsio_TAPI_for_Asterisk
2016-05-04 10:38 - 2016-05-04 10:38 - 00045568 _____ (Ralf Steinruecken ITecSoft) C:\Windows\system32\tapi4ast.tsp
2016-05-03 20:27 - 2016-05-03 20:27 - 00000000 ____D C:\Users\s.kopertowski\Documents\Niestandardowe szablony pakietu Office
2016-05-03 20:19 - 2016-05-06 09:24 - 00000000 ____D C:\Users\s.kopertowski\Desktop\umowy
2016-05-03 20:16 - 2016-05-03 20:16 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\CEF
2016-05-03 18:59 - 2016-05-03 18:59 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2016-05-03 18:59 - 2016-05-03 18:59 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-05-03 18:59 - 2016-05-03 18:59 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2016-05-03 18:59 - 2016-05-03 18:59 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-05-03 01:39 - 2016-05-03 01:40 - 00000000 ____D C:\Users\s.kopertowski\Desktop\corel
2016-05-03 00:18 - 2016-05-03 00:18 - 00000000 ____D C:\Users\s.kopertowski\Documents\Moje palety
2016-05-03 00:18 - 2016-05-03 00:18 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Corel
2016-05-03 00:18 - 2016-05-03 00:18 - 00000000 ____D C:\ProgramData\Protexis
2016-05-03 00:09 - 2016-05-03 00:09 - 00000080 _____ C:\Users\s.kopertowski\Parking 1_20151216_124900.ini
2016-05-02 23:46 - 2016-05-02 23:46 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Apps\2.0
2016-05-02 23:18 - 2016-05-02 21:24 - 00002240 ____H C:\Users\admin-local\Documents\Default.rdp
2016-05-02 23:14 - 2016-05-03 00:07 - 00000000 ____D C:\!!!!! kopia ze starego dysku SSD 256GB
2016-05-02 22:56 - 2016-05-02 22:56 - 00002505 _____ C:\Users\admin-local\Desktop\Bezpieczne pieniądze.lnk
2016-05-02 22:56 - 2016-05-02 22:56 - 00000000 ____D C:\Users\admin-local\AppData\Roaming\Logishrd
2016-05-02 22:56 - 2016-05-02 22:56 - 00000000 ____D C:\Users\admin-local\AppData\Local\Google
2016-05-02 22:50 - 2016-05-02 22:50 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\DloadX
2016-05-02 22:50 - 2016-05-02 22:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Satel
2016-05-02 22:50 - 2016-05-02 22:50 - 00000000 ____D C:\Program Files (x86)\Satel
2016-05-02 22:41 - 2016-05-02 22:41 - 00000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2016-05-02 22:39 - 2016-05-02 22:39 - 00000000 ____D C:\Users\s.kopertowski\Documents\Sage
2016-05-02 22:39 - 2016-05-02 22:39 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Sage
2016-05-02 22:38 - 2016-05-02 22:38 - 00000510 _____ C:\Users\Public\Desktop\Symfonia Handel - Stacja robocza.lnk
2016-05-02 22:38 - 2016-05-02 22:38 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Sage
2016-05-02 22:38 - 2016-05-02 22:38 - 00000000 ____D C:\ProgramData\Symfonia
2016-05-02 22:38 - 2016-05-02 22:38 - 00000000 ____D C:\ProgramData\Sage
2016-05-02 22:38 - 2016-05-02 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sage
2016-05-02 22:38 - 2001-07-30 18:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2016-05-02 22:37 - 2016-05-02 22:38 - 00000000 ____D C:\Program Files (x86)\Sage
2016-05-02 22:37 - 2016-05-02 22:37 - 00000078 ____R C:\Windows\bti.ini
2016-05-02 22:37 - 2016-05-02 22:37 - 00000000 ____D C:\Windows\Symfonia
2016-05-02 22:37 - 2016-05-02 22:37 - 00000000 ____D C:\Program Files (x86)\Symfonia
2016-05-02 22:37 - 2006-01-30 09:32 - 00006656 _____ (Tracker Software) C:\Windows\system32\pxc35pm.dll
2016-05-02 22:37 - 2001-03-13 14:51 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2016-05-02 22:37 - 2001-03-13 14:49 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2016-05-02 22:37 - 2000-12-05 23:00 - 00209608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx
2016-05-02 22:37 - 2000-07-15 23:13 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2016-05-02 22:37 - 2000-05-23 00:58 - 00166600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMASK32.OCX
2016-05-02 22:37 - 2000-05-23 00:57 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2016-05-02 22:24 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-05-02 22:24 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-02 22:24 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-05-02 22:24 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-02 22:24 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-02 22:24 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-05-02 22:24 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-02 22:24 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-05-02 22:24 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-05-02 22:24 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-05-02 22:24 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-02 22:24 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-02 22:24 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-02 22:24 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-05-02 22:24 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-05-02 22:24 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-02 22:24 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-02 22:24 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-02 22:24 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-02 22:24 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-05-02 22:24 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-05-02 22:24 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-05-02 22:24 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-05-02 22:24 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-05-02 22:24 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-02 22:24 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-02 22:24 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-02 22:24 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-05-02 22:24 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-02 22:24 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-05-02 22:24 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-05-02 22:23 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-05-02 22:23 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-05-02 22:23 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-05-02 22:23 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-05-02 22:23 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-05-02 22:23 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-05-02 22:23 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2016-05-02 22:23 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-05-02 22:23 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2016-05-02 22:23 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2016-05-02 22:23 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-05-02 22:23 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-05-02 22:23 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-05-02 22:23 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-05-02 22:23 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-05-02 22:23 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-05-02 22:23 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-05-02 22:23 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-05-02 22:23 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-05-02 22:23 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-05-02 22:23 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-05-02 22:23 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-05-02 22:23 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-05-02 22:23 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-02 22:23 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-02 22:23 - 2016-03-29 12:20 - 02656952 _____ C:\Windows\system32\CoreUIComponents.dll
2016-05-02 22:23 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-02 22:23 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-02 22:23 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-05-02 22:23 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2016-05-02 22:23 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-05-02 22:23 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-05-02 22:23 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-05-02 22:23 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-05-02 22:23 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-05-02 22:23 - 2016-03-29 11:37 - 01862008 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-05-02 22:23 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-05-02 22:23 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-05-02 22:23 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-05-02 22:23 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-05-02 22:23 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-05-02 22:23 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-05-02 22:23 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-05-02 22:23 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-05-02 22:23 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-05-02 22:23 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-05-02 22:23 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-05-02 22:23 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-05-02 22:23 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-05-02 22:23 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-02 22:23 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2016-05-02 22:23 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-05-02 22:23 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-05-02 22:23 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-05-02 22:23 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-05-02 22:23 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.dll
2016-05-02 22:23 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-05-02 22:23 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-05-02 22:23 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-05-02 22:23 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
2016-05-02 22:23 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
2016-05-02 22:23 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-02 22:23 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-05-02 22:23 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-05-02 22:23 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-05-02 22:23 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2016-05-02 22:23 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2016-05-02 22:23 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-02 22:23 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2016-05-02 22:23 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-05-02 22:23 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-05-02 22:23 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-05-02 22:23 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-05-02 22:23 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-05-02 22:23 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2016-05-02 22:23 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-05-02 22:23 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-05-02 22:23 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-05-02 22:23 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-05-02 22:23 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-05-02 22:23 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2016-05-02 22:23 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-05-02 22:23 - 2016-03-29 09:54 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-05-02 22:23 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-05-02 22:23 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2016-05-02 22:23 - 2016-03-29 09:51 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-05-02 22:23 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-05-02 22:23 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-05-02 22:23 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-05-02 22:23 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-05-02 22:23 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-05-02 22:23 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-05-02 22:23 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2016-05-02 22:23 - 2016-03-29 09:49 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-05-02 22:23 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-05-02 22:23 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-05-02 22:23 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-05-02 22:23 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-05-02 22:23 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2016-05-02 22:23 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-05-02 22:23 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-05-02 22:23 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-05-02 22:23 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-05-02 22:23 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-05-02 22:23 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-05-02 22:23 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-05-02 22:23 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-05-02 22:23 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-05-02 22:23 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-05-02 22:23 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-05-02 22:23 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-05-02 22:23 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-05-02 22:23 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-05-02 22:23 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-05-02 22:23 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-05-02 22:23 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-05-02 22:23 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-05-02 22:23 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-05-02 22:23 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-05-02 22:23 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-05-02 22:23 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2016-05-02 22:23 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-02 22:23 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-05-02 22:23 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-05-02 22:23 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2016-05-02 22:23 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-05-02 22:23 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-05-02 22:23 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-05-02 22:23 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2016-05-02 22:23 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-05-02 22:23 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-05-02 22:23 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-05-02 22:23 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-05-02 22:23 - 2016-03-29 09:14 - 00954368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-05-02 22:23 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-05-02 22:23 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-05-02 22:23 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-05-02 22:23 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-05-02 22:23 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-05-02 22:23 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-05-02 22:23 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-05-02 22:23 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-05-02 22:23 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-05-02 22:23 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-05-02 22:23 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-05-02 22:23 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2016-05-02 22:23 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-05-02 22:23 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-05-02 22:23 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-05-02 22:23 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-02 22:23 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-05-02 22:23 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-05-02 22:23 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-02 22:23 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2016-05-02 22:23 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-05-02 22:23 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
2016-05-02 22:23 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2016-05-02 22:23 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-05-02 22:23 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-05-02 22:23 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-05-02 22:23 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-05-02 22:23 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-05-02 22:23 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-05-02 22:23 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-05-02 22:23 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-05-02 22:23 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-05-02 22:23 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-05-02 22:23 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-05-02 22:23 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2016-05-02 22:23 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-05-02 22:23 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-05-02 22:23 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-05-02 22:23 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-05-02 22:23 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-05-02 22:23 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AccountsRt.dll
2016-05-02 22:23 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-05-02 22:23 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-02 22:23 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2016-05-02 22:23 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-05-02 22:23 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-05-02 22:23 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-05-02 22:23 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-05-02 22:23 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-05-02 22:23 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll
2016-05-02 22:23 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-05-02 22:23 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-05-02 22:23 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-05-02 22:23 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-05-02 22:23 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-05-02 22:23 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-05-02 22:23 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-05-02 22:23 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-05-02 22:23 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2016-05-02 22:23 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-02 22:23 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-05-02 22:23 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-05-02 22:23 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-05-02 22:23 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-05-02 22:23 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2016-05-02 22:23 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-05-02 22:23 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-05-02 22:23 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-05-02 22:23 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-05-02 22:23 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2016-05-02 22:23 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-05-02 22:23 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-05-02 22:23 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-05-02 22:23 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2016-05-02 22:23 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-05-02 22:23 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-05-02 22:23 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-05-02 22:23 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-02 22:23 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2016-05-02 22:23 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-05-02 22:23 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-02 22:23 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-05-02 22:23 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-05-02 22:23 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-05-02 22:23 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-05-02 22:23 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-05-02 22:23 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-05-02 22:23 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\ncbservice.dll
2016-05-02 22:23 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-05-02 22:23 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-05-02 22:23 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-05-02 22:23 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-05-02 22:23 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-05-02 22:23 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-05-02 22:23 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-05-02 22:23 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-05-02 22:23 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-05-02 22:23 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-05-02 22:23 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-05-02 22:23 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-05-02 22:22 - 2016-05-03 01:05 - 00001288 _____ C:\Users\Public\Desktop\ProfitCRM.lnk
2016-05-02 22:22 - 2016-05-02 22:22 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ac.Software
2016-05-02 22:22 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-05-02 22:22 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-05-02 22:22 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2016-05-02 22:22 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-05-02 22:22 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-05-02 22:22 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-05-02 22:22 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-05-02 22:22 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-05-02 22:22 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2016-05-02 22:22 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-05-02 22:22 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacchooks.dll
2016-05-02 22:22 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-05-02 22:22 - 2016-03-29 09:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-05-02 22:22 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-05-02 22:22 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-05-02 22:22 - 2016-03-29 09:00 - 00235008 _____ C:\Windows\system32\MTF.dll
2016-05-02 22:22 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-05-02 22:22 - 2016-03-29 08:27 - 00162816 _____ C:\Windows\SysWOW64\MTF.dll
2016-05-02 22:22 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-05-02 22:21 - 2016-05-02 22:21 - 00000000 ____D C:\Program Files (x86)\Ac.Software
2016-05-02 22:18 - 2016-05-02 22:18 - 00000271 _____ C:\Windows\ODBCINST.INI
2016-05-02 22:18 - 2016-05-02 22:18 - 00000000 ____D C:\ProgramData\Pervasive Software
2016-05-02 22:18 - 2016-05-02 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pervasive PSQL 11
2016-05-02 22:18 - 2016-05-02 22:18 - 00000000 ____D C:\Program Files (x86)\Pervasive Software
2016-05-02 22:14 - 2016-05-09 00:58 - 00002282 ____H C:\Users\s.kopertowski\Documents\Default.rdp
2016-05-02 22:11 - 2016-04-22 09:57 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-05-02 22:01 - 2016-05-08 17:41 - 00000000 ____D C:\Users\s.kopertowski\Documents\Corel
2016-05-02 22:01 - 2016-05-02 22:01 - 00000000 ____D C:\Users\s.kopertowski\Documents\Visual Studio 2008
2016-05-02 22:01 - 2016-05-02 22:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2016-05-02 21:58 - 2016-05-08 18:59 - 00000000 ____D C:\ProgramData\Corel
2016-05-02 21:58 - 2016-05-04 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2016-05-02 21:50 - 2016-05-08 18:58 - 00000000 ____D C:\Program Files (x86)\Corel
2016-05-02 21:40 - 2016-05-03 19:01 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-02 21:40 - 2016-05-03 19:01 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-02 21:40 - 2016-05-02 21:40 - 00000000 ____D C:\Users\s.kopertowski\AppData\LocalLow\Adobe
2016-05-02 21:40 - 2016-05-02 21:40 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-02 21:39 - 2016-05-03 18:08 - 00000000 ____D C:\ProgramData\Adobe
2016-05-02 21:39 - 2016-05-02 21:40 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Adobe
2016-05-02 21:28 - 2016-05-02 21:28 - 00007604 _____ C:\Users\s.kopertowski\AppData\Local\Resmon.ResmonCfg
2016-04-16 20:50 - 2016-04-16 21:10 - 00000000 ____D C:\!!!!! kopia karty SD 4GB z E72
2016-04-16 20:12 - 2016-04-16 20:26 - 00000000 ____D C:\!!!!! kopia karty SDHC 32GB
2016-04-16 13:54 - 2016-04-16 16:59 - 00000000 ____D C:\!!!!! kopia danych przed USA
2016-04-14 00:49 - 2016-04-14 00:49 - 01334784 _____ (CineForm Inc.) C:\Windows\system32\CFHD.dll
2016-04-14 00:49 - 2016-04-14 00:49 - 01119744 _____ (CineForm Inc.) C:\Windows\SysWOW64\CFHD.dll

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-09 21:47 - 2016-03-18 22:42 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-09 21:47 - 2016-03-18 22:42 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-09 21:30 - 2016-03-18 22:34 - 00000120 _____ C:\Windows\system32\config\netlogon.ftl
2016-05-09 20:45 - 2016-03-18 23:15 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-05-09 19:47 - 2016-03-18 22:24 - 02153644 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-09 19:47 - 2016-02-13 19:29 - 00926150 _____ C:\Windows\system32\perfh015.dat
2016-05-09 19:47 - 2016-02-13 19:29 - 00200684 _____ C:\Windows\system32\perfc015.dat
2016-05-09 19:47 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-05-09 19:44 - 2016-03-18 22:39 - 00000000 ___RD C:\Users\s.kopertowski\OneDrive
2016-05-09 19:44 - 2016-03-18 22:38 - 00000000 __SHD C:\Users\s.kopertowski\IntelGraphicsProfiles
2016-05-09 19:44 - 2016-03-18 22:24 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-09 19:43 - 2016-03-18 22:25 - 00000000 ____D C:\ProgramData\Synaptics
2016-05-09 19:43 - 2016-02-13 19:48 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-09 19:43 - 2015-10-30 08:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-05-09 19:40 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-05-09 09:51 - 2016-03-18 22:38 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\Packages
2016-05-09 00:11 - 2016-03-18 22:42 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-09 00:11 - 2016-03-18 22:42 - 00001369 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-08 23:51 - 2016-03-18 22:38 - 00000000 ____D C:\Users\s.kopertowski
2016-05-08 23:50 - 2016-03-18 23:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-08 23:47 - 2015-10-30 08:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-05-08 18:35 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-08 14:33 - 2016-03-19 00:36 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-08 14:33 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2016-05-08 05:34 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-05-08 05:33 - 2016-03-18 23:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-05-05 11:42 - 2016-02-13 10:46 - 00352600 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-04 13:29 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2016-05-04 09:03 - 2016-03-18 22:44 - 00000000 ____D C:\ProgramData\Logishrd
2016-05-02 23:17 - 2016-03-18 22:24 - 00000000 __SHD C:\Users\admin-local\IntelGraphicsProfiles
2016-05-02 23:11 - 2016-03-18 22:24 - 00000000 ____D C:\Program Files\Apoint2K
2016-05-02 23:00 - 2016-03-19 00:30 - 00000000 ____D C:\Users\ReportServer$SQLEXPRESS
2016-05-02 23:00 - 2016-03-19 00:30 - 00000000 ____D C:\Users\MSSQLFDLauncher$SQLEXPRESS
2016-05-02 23:00 - 2016-03-19 00:30 - 00000000 ____D C:\Users\MSSQL$SQLEXPRESS
2016-05-02 22:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-05-02 22:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-02 22:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-05-02 22:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\bcastdvr
2016-05-02 22:57 - 2016-03-18 22:21 - 00000000 ____D C:\Users\admin-local\AppData\Local\Packages
2016-05-02 22:56 - 2016-03-18 22:22 - 00002429 _____ C:\Users\admin-local\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-02 22:56 - 2016-03-18 22:22 - 00000000 ___RD C:\Users\admin-local\OneDrive
2016-05-02 22:56 - 2016-02-13 19:51 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-02 22:50 - 2016-03-18 22:38 - 00000000 ____D C:\Users\s.kopertowski\AppData\Local\VirtualStore
2016-05-02 22:44 - 2016-03-18 23:20 - 00000000 ____D C:\Windows\system32\MRT
2016-05-02 22:41 - 2016-03-18 23:20 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-02 22:41 - 2016-03-18 22:24 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-05-02 22:10 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\appcompat
2016-05-02 22:08 - 2016-03-18 22:39 - 00002431 _____ C:\Users\s.kopertowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-02 21:40 - 2016-03-18 22:38 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Adobe
2016-05-02 21:36 - 2016-03-18 23:14 - 00000000 ____D C:\Users\s.kopertowski\AppData\Roaming\Thunderbird
2016-05-02 21:25 - 2016-03-18 22:35 - 00003082 __RSH C:\ProgramData\ntuser.pol
2016-05-02 21:24 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\FxsTmp

==================== Pliki w katalogu głównym wybranych folderów =======

2016-05-02 21:28 - 2016-05-02 21:28 - 0007604 _____ () C:\Users\s.kopertowski\AppData\Local\Resmon.ResmonCfg
2016-03-18 22:27 - 2016-03-18 22:27 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-05-08 14:21

==================== Koniec  FRST.txt ============================