Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-07-2016 02
Uruchomiony przez Monika (administrator)  MONIKA (15-07-2016 17:48:30)
Uruchomiony z C:\Users\Monika\Desktop\FRST
Załadowane profile: UpdatusUser & Monika (Dostępne profile: UpdatusUser & Monika)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Conexant Systems Inc.) C:\WINDOWS\System32\CxAudMsg64.exe
(Broadcom Corporation.) C:\WINDOWS\System32\BtwRSupportService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Spotify Ltd) C:\Users\Monika\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Monika\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe
(Spotify Ltd) C:\Users\Monika\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Monika\AppData\Roaming\Spotify\Spotify.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
() C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1793736 2015-02-23] (NVIDIA Corporation)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2013-03-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2013-03-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [1088944 2016-05-12] ()
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13716208 2016-06-30] (Zemana Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\...\Run: [Spotify] => C:\Users\Monika\AppData\Roaming\Spotify\Spotify.exe [6913648 2016-07-10] (Spotify Ltd)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\...\Run: [Spotify Web Helper] => C:\Users\Monika\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-10] (Spotify Ltd)
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\...\MountPoints2: {7368db89-7747-11e5-be88-689423ff1da0} - "F:\setup.exe" 
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-23] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-07-11]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 77.252.118.18
Tcpip\..\Interfaces\{7de499e6-d497-47b3-8be8-6a7f3d13c9e2}: [DhcpNameServer] 192.168.1.1 77.252.118.18

Internet Explorer:
==================
HKU\S-1-5-21-4241658497-3624425046-3709114523-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2016-05-12] ()
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-03] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13716208 2016-06-30] (Zemana Ltd.)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7593176 2015-06-18] (Broadcom Corporation)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [129152 2016-07-01] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2015-03-23] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-10-20] (Disc Soft Ltd)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [221824 2016-07-01] (Samsung Electronics Co., Ltd.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-07-14] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-07-14] (Zemana Ltd.)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-15 17:45 - 2016-07-15 17:45 - 00413488 _____ C:\Users\Monika\Desktop\bookmarks_15.07.2016.html
2016-07-15 17:37 - 2016-07-15 17:37 - 00016148 _____ C:\WINDOWS\system32\MONIKA_Monika_HistoryPrediction.bin
2016-07-15 17:26 - 2016-07-15 17:48 - 00000000 ____D C:\Users\Monika\Desktop\FRST
2016-07-15 17:21 - 2016-07-15 17:21 - 00000000 ___HD C:\OneDriveTemp
2016-07-15 17:21 - 2016-07-15 17:21 - 00000000 ____D C:\ProgramData\dbg
2016-07-14 23:24 - 2016-07-14 23:24 - 00721842 _____ C:\Users\Monika\Desktop\GMERLOG.txt
2016-07-14 21:57 - 2016-07-14 23:38 - 00000000 ____D C:\WINDOWS\Minidump
2016-07-14 21:44 - 2016-07-14 21:44 - 00077163 _____ C:\Users\Monika\Desktop\Shortcut.txt
2016-07-14 21:43 - 2016-07-14 21:44 - 00036082 _____ C:\Users\Monika\Desktop\Addition.txt
2016-07-14 21:42 - 2016-07-14 21:44 - 00044040 _____ C:\Users\Monika\Desktop\FRST.txt
2016-07-14 21:41 - 2016-07-15 17:47 - 00000000 ____D C:\FRST
2016-07-14 21:40 - 2016-07-14 21:40 - 00380928 _____ C:\Users\Monika\Desktop\o3vik2kq.exe
2016-07-14 21:20 - 2016-07-14 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2016-07-14 21:19 - 2016-07-15 17:50 - 00041731 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2016-07-14 21:19 - 2016-07-15 17:49 - 00251335 _____ C:\WINDOWS\ZAM.krnl.trace
2016-07-14 21:19 - 2016-07-14 21:57 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2016-07-14 21:19 - 2016-07-14 21:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2016-07-14 21:19 - 2016-07-14 21:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2016-07-14 21:19 - 2016-07-14 21:20 - 00001156 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2016-07-14 21:19 - 2016-07-14 21:19 - 00000000 ____D C:\Users\Monika\AppData\Local\Zemana
2016-07-13 22:27 - 2016-07-13 22:27 - 00000829 _____ C:\Users\Monika\Desktop\JRT.txt
2016-07-13 22:22 - 2016-07-13 22:24 - 01610560 _____ (Malwarebytes) C:\Users\Monika\Desktop\JRT.exe
2016-07-13 21:51 - 2016-07-13 21:55 - 00003274 _____ C:\Users\Monika\Desktop\Rkill.txt
2016-07-13 21:50 - 2016-07-13 21:50 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Monika\Desktop\rkill.com
2016-07-13 21:29 - 2016-06-29 06:33 - 21861888 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-07-13 21:29 - 2016-06-29 05:54 - 18799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-07-13 21:29 - 2016-06-24 06:58 - 08016728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-07-13 21:29 - 2016-06-24 06:04 - 24604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-07-13 21:29 - 2016-06-24 05:54 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-07-13 21:29 - 2016-06-24 05:41 - 03584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-07-13 21:29 - 2016-06-24 05:40 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-07-13 21:29 - 2016-06-24 05:39 - 19336704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-07-13 21:29 - 2016-06-24 05:39 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-07-13 21:29 - 2016-06-24 05:22 - 03579392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-07-13 21:29 - 2016-06-24 05:19 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-07-13 21:28 - 2016-06-25 07:38 - 01119744 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-07-13 21:28 - 2016-06-24 06:58 - 00442208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-07-13 21:28 - 2016-06-24 06:56 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-07-13 21:28 - 2016-06-24 06:56 - 01823760 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-07-13 21:28 - 2016-06-24 06:50 - 00660320 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-07-13 21:28 - 2016-06-24 06:49 - 03626952 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-07-13 21:28 - 2016-06-24 06:25 - 01522632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-07-13 21:28 - 2016-06-24 06:19 - 00468832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-07-13 21:28 - 2016-06-24 06:18 - 02882136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-07-13 21:28 - 2016-06-24 06:07 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-07-13 21:28 - 2016-06-24 06:06 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2016-07-13 21:28 - 2016-06-24 05:56 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2016-07-13 21:28 - 2016-06-24 05:55 - 01012736 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-07-13 21:28 - 2016-06-24 05:53 - 00354816 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-07-13 21:28 - 2016-06-24 05:48 - 03119616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-07-13 21:28 - 2016-06-24 05:48 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-07-13 21:28 - 2016-06-24 05:47 - 01606656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-07-13 21:28 - 2016-06-24 05:46 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-07-13 21:28 - 2016-06-24 05:46 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-07-13 21:28 - 2016-06-24 05:45 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-07-13 21:28 - 2016-06-24 05:45 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-07-13 21:28 - 2016-06-24 05:44 - 05510656 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-07-13 21:28 - 2016-06-24 05:44 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-07-13 21:28 - 2016-06-24 05:43 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-07-13 21:28 - 2016-06-24 05:42 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
2016-07-13 21:28 - 2016-06-24 05:42 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2016-07-13 21:28 - 2016-06-24 05:40 - 01381376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-07-13 21:28 - 2016-06-24 05:26 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-07-13 21:28 - 2016-06-24 05:26 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-07-13 21:28 - 2016-06-24 05:26 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-07-13 21:28 - 2016-06-24 05:25 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-07-13 21:28 - 2016-06-24 05:22 - 04737536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-07-13 21:28 - 2016-06-24 05:22 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
2016-07-13 21:28 - 2016-06-24 05:15 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-07-13 20:31 - 2016-07-13 20:31 - 00189756 _____ C:\Users\Monika\Desktop\cc_20160713_203102.reg
2016-07-13 20:18 - 2016-07-14 20:47 - 00000000 ____D C:\AdwCleaner
2016-07-13 20:16 - 2016-07-13 20:16 - 03712064 _____ C:\Users\Monika\Downloads\adwcleaner.pl 5.201.exe
2016-07-13 20:05 - 2016-07-13 20:06 - 09798872 _____ (TeamViewer GmbH) C:\Users\Monika\Downloads\TeamViewer_Setup_pl.exe
2016-07-12 11:35 - 2016-07-15 12:07 - 00000000 ____D C:\Users\Monika\Desktop\wyjazd
2016-07-11 23:14 - 2016-07-11 23:23 - 00000080 _____ C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\uTorrent.lnk
2016-07-11 22:47 - 2016-07-14 20:50 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-07-11 22:47 - 2016-07-11 23:24 - 00001180 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-07-11 22:47 - 2016-07-11 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-07-11 22:46 - 2016-07-11 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-07-11 22:46 - 2016-07-11 22:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-07-11 22:46 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-07-11 22:46 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-07-11 22:46 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-07-11 14:44 - 2016-07-11 16:34 - 00000000 ____D C:\Users\Monika\AppData\Local\GoPro
2016-07-11 14:44 - 2016-07-11 16:31 - 00000000 ____D C:\Users\Monika\AppData\Roaming\GoPro
2016-07-11 12:28 - 2016-07-11 16:27 - 00000000 ____D C:\Users\Public\CineForm
2016-07-11 12:27 - 2016-07-11 23:24 - 00000820 _____ C:\Users\Public\Desktop\GoPro Studio.lnk
2016-07-11 12:27 - 2016-07-11 12:27 - 00000000 ____D C:\Program Files (x86)\GoPro
2016-07-11 12:27 - 2016-07-11 12:27 - 00000000 ____D C:\Program Files (x86)\CineForm
2016-07-11 12:26 - 2016-07-11 23:24 - 00000870 _____ C:\Users\Public\Desktop\GoPro.lnk
2016-07-11 12:26 - 2016-07-11 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2016-07-11 12:26 - 2016-07-11 12:26 - 00000000 ____D C:\Program Files\GoPro
2016-07-10 13:25 - 2016-07-12 00:16 - 00000000 ____D C:\Users\Monika\Desktop\Kraków 9.07.2016
2016-07-07 11:29 - 2016-07-07 11:40 - 00000000 ____D C:\Users\Monika\Desktop\Energylandia
2016-07-07 11:29 - 2016-07-07 11:37 - 00000000 ____D C:\Users\Monika\Desktop\Ogrodzieniec
2016-07-07 11:25 - 2016-07-07 11:45 - 00000000 ____D C:\Users\Monika\Desktop\Ojców 6.07.2016
2016-07-01 15:24 - 2016-07-03 23:44 - 00000000 ____D C:\Users\Monika\Desktop\sprzedaż
2016-06-30 15:11 - 2016-06-30 15:11 - 00028043 _____ C:\Users\Monika\Desktop\zabawy!!!.odt
2016-06-25 19:54 - 2016-06-25 19:54 - 00756589 _____ C:\Users\Monika\Downloads\auto-rental_2016.pdf
2016-06-25 14:02 - 2016-06-25 14:02 - 00000997 _____ C:\WINDOWS\SentOSPackets.KTL
2016-06-17 18:03 - 2016-06-17 18:03 - 23832308 _____ C:\Users\Monika\Desktop\Opole folder turystyczny.pdf
2016-06-16 21:53 - 2016-06-23 09:55 - 00000000 ____D C:\Users\Monika\Desktop\Filmy
2016-06-15 07:11 - 2016-05-28 05:53 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-15 07:11 - 2016-05-28 05:44 - 00737792 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-15 07:10 - 2016-05-28 07:02 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-06-15 07:10 - 2016-05-28 07:02 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-15 07:10 - 2016-05-28 07:02 - 01314496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-15 07:10 - 2016-05-28 07:02 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-15 07:10 - 2016-05-28 07:02 - 00432360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-15 07:10 - 2016-05-28 07:02 - 00421536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-15 07:10 - 2016-05-28 07:02 - 00158048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-15 07:10 - 2016-05-28 07:02 - 00113144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-15 07:10 - 2016-05-28 07:00 - 02543784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-15 07:10 - 2016-05-28 07:00 - 01591304 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-15 07:10 - 2016-05-28 07:00 - 00327520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-15 07:10 - 2016-05-28 07:00 - 00203496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-06-15 07:10 - 2016-05-28 06:59 - 00363872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-15 07:10 - 2016-05-28 06:59 - 00131208 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-15 07:10 - 2016-05-28 06:53 - 00026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2016-06-15 07:10 - 2016-05-28 06:52 - 22326760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-06-15 07:10 - 2016-05-28 06:47 - 00613120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-15 07:10 - 2016-05-28 06:47 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-15 07:10 - 2016-05-28 06:39 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-06-15 07:10 - 2016-05-28 06:39 - 01365584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-06-15 07:10 - 2016-05-28 06:39 - 00952968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-06-15 07:10 - 2016-05-28 06:39 - 00365128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-06-15 07:10 - 2016-05-28 06:38 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-06-15 07:10 - 2016-05-28 06:38 - 00372368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-06-15 07:10 - 2016-05-28 06:38 - 00306528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2016-06-15 07:10 - 2016-05-28 06:38 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-06-15 07:10 - 2016-05-28 06:35 - 02188472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-06-15 07:10 - 2016-05-28 06:35 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-06-15 07:10 - 2016-05-28 06:35 - 00112632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2016-06-15 07:10 - 2016-05-28 06:27 - 20861984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-06-15 07:10 - 2016-05-28 06:21 - 00545400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-06-15 07:10 - 2016-05-28 06:21 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-06-15 07:10 - 2016-05-28 06:10 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-15 07:10 - 2016-05-28 06:09 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-15 07:10 - 2016-05-28 06:00 - 01336832 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-15 07:10 - 2016-05-28 05:58 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-15 07:10 - 2016-05-28 05:58 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-15 07:10 - 2016-05-28 05:58 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-06-15 07:10 - 2016-05-28 05:57 - 06788096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-15 07:10 - 2016-05-28 05:56 - 12511232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-15 07:10 - 2016-05-28 05:54 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-15 07:10 - 2016-05-28 05:54 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-15 07:10 - 2016-05-28 05:53 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-15 07:10 - 2016-05-28 05:52 - 02663424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-15 07:10 - 2016-05-28 05:51 - 02119680 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-06-15 07:10 - 2016-05-28 05:50 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-15 07:10 - 2016-05-28 05:47 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-15 07:10 - 2016-05-28 05:44 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-15 07:10 - 2016-05-28 05:43 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-15 07:10 - 2016-05-28 05:41 - 05160960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-06-15 07:10 - 2016-05-28 05:41 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-15 07:10 - 2016-05-28 05:40 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-06-15 07:10 - 2016-05-28 05:39 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-06-15 07:10 - 2016-05-28 05:39 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-06-15 07:10 - 2016-05-28 05:38 - 01821696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-06-15 07:10 - 2016-05-28 05:38 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2016-06-15 07:10 - 2016-05-28 05:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2016-06-15 07:10 - 2016-05-28 05:35 - 02042368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-06-15 07:10 - 2016-05-28 05:35 - 00679936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-06-15 07:10 - 2016-05-28 05:35 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-06-15 07:10 - 2016-05-28 05:31 - 11268096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-06-15 07:10 - 2016-05-28 05:29 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2016-06-15 07:10 - 2016-05-28 05:29 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-06-15 07:10 - 2016-05-28 05:25 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-15 17:47 - 2015-06-29 21:22 - 00000000 ____D C:\Users\Monika\AppData\Roaming\TS3Client
2016-07-15 17:47 - 2015-06-29 21:08 - 00000000 ____D C:\Users\Monika\AppData\Local\Google
2016-07-15 17:47 - 2015-06-29 21:08 - 00000000 ____D C:\Program Files (x86)\Google
2016-07-15 17:43 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-07-15 17:39 - 2015-10-18 23:54 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-15 17:39 - 2015-09-23 14:30 - 00000000 ____D C:\Users\Monika
2016-07-15 17:39 - 2015-06-29 21:40 - 00000000 ____D C:\Users\Monika\AppData\Roaming\Spotify
2016-07-15 17:38 - 2015-07-17 10:15 - 00000000 ___RD C:\Users\Monika\OneDrive
2016-07-15 17:38 - 2015-06-29 21:40 - 00000000 ____D C:\Users\Monika\AppData\Local\Spotify
2016-07-15 17:35 - 2015-07-30 23:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-15 17:34 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-07-15 17:29 - 2015-10-07 20:28 - 00000000 ____D C:\Users\Monika\AppData\LocalLow\Temp
2016-07-15 17:28 - 2013-03-17 11:22 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2016-07-15 17:24 - 2015-10-18 23:52 - 00004210 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9AEB3C28-DF6D-481C-8CBF-B35D71A2F440}
2016-07-15 17:19 - 2015-10-18 23:54 - 00001070 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-15 17:15 - 2015-09-23 14:30 - 00000000 ____D C:\Users\UpdatusUser
2016-07-15 17:13 - 2015-09-10 07:27 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-15 17:13 - 2015-07-31 00:40 - 00000000 ____D C:\WINDOWS\INF
2016-07-15 10:12 - 2016-03-12 23:21 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-07-15 10:12 - 2016-03-12 23:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-07-15 09:46 - 2015-06-30 22:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-07-15 09:40 - 2015-06-30 22:30 - 144749672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-07-15 09:38 - 2015-07-31 00:25 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-07-14 23:38 - 2015-12-31 16:46 - 00296051 ____N C:\WINDOWS\Minidump\071416-21734-01.dmp
2016-07-14 21:57 - 2015-12-31 16:46 - 00309363 ____N C:\WINDOWS\Minidump\071416-22859-01.dmp
2016-07-14 20:39 - 2015-07-31 00:42 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-13 21:41 - 2015-07-30 23:49 - 00240384 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-07-13 21:21 - 2016-01-17 12:25 - 00000000 ____D C:\Program Files (x86)\RocketDock
2016-07-13 20:51 - 2015-10-19 00:01 - 00000000 ____D C:\Users\Monika\AppData\Roaming\uTorrent
2016-07-11 23:45 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\Branding
2016-07-11 23:24 - 2015-12-22 16:28 - 00002262 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Digital Editions 3.0.lnk
2016-07-11 23:24 - 2015-10-22 11:10 - 00000485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rayman Legends.lnk
2016-07-11 23:24 - 2015-09-23 22:56 - 00002462 _____ C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-07-11 23:24 - 2015-09-23 14:36 - 00001564 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-07-11 23:24 - 2015-08-12 21:36 - 00001152 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2016-07-11 23:24 - 2015-07-01 11:50 - 00001398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centrum obsługi HP.lnk
2016-07-11 23:24 - 2015-07-01 11:50 - 00001386 _____ C:\Users\Public\Desktop\Centrum obsługi HP.lnk
2016-07-11 23:24 - 2015-06-29 21:40 - 00001806 _____ C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-07-11 23:24 - 2015-06-29 21:27 - 00001607 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-07-11 23:24 - 2015-06-29 21:22 - 00001016 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-07-11 23:24 - 2013-03-17 11:20 - 00001961 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Cloud Storage by SugarSync.lnk
2016-07-11 23:24 - 2013-03-17 11:14 - 00002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-07-11 23:23 - 2015-07-07 11:17 - 00001077 _____ C:\Users\Monika\Desktop\PhotoFiltre 7.lnk
2016-07-11 23:23 - 2015-06-29 21:40 - 00001820 _____ C:\Users\Monika\Desktop\Spotify.lnk
2016-07-11 23:21 - 2015-09-24 16:47 - 00000266 __RSH C:\ProgramData\ntuser.pol
2016-07-11 23:18 - 2015-07-31 00:42 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-07-11 23:13 - 2015-12-14 09:56 - 00000000 ____D C:\Users\Monika\Desktop\PULPIT
2016-07-11 23:13 - 2015-06-29 21:07 - 00000000 ____D C:\Users\Monika\AppData\Local\Apps\2.0
2016-07-11 23:12 - 2015-10-21 13:19 - 00000000 ____D C:\Program Files\Rayman Legends
2016-07-11 12:28 - 2016-02-26 19:21 - 00000000 ____D C:\ProgramData\Package Cache
2016-07-07 11:27 - 2015-09-23 14:47 - 01836100 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-07 11:27 - 2015-09-10 07:09 - 00813762 _____ C:\WINDOWS\system32\perfh015.dat
2016-07-07 11:27 - 2015-09-10 07:09 - 00156260 _____ C:\WINDOWS\system32\perfc015.dat
2016-07-07 02:39 - 2015-09-27 22:30 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-07-05 20:20 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-07-03 19:18 - 2016-03-25 00:31 - 00000000 ____D C:\Users\Monika\Desktop\WAKACJE
2016-07-01 14:38 - 2014-01-22 08:52 - 00129152 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus.sys
2016-07-01 14:34 - 2014-01-22 08:52 - 00221824 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2016-06-30 20:50 - 2016-06-14 07:09 - 00000000 ____D C:\Users\Monika\Desktop\Kolonie
2016-06-25 18:14 - 2015-06-29 21:22 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-06-25 14:02 - 2016-06-10 21:01 - 00000143 _____ C:\WINDOWS\NGIControl.KTL
2016-06-25 14:02 - 2016-06-10 17:01 - 01427282 _____ C:\WINDOWS\ProcessedPackets.KTL
2016-06-25 14:02 - 2016-06-10 17:01 - 00389698 _____ C:\WINDOWS\Packet.KTL
2016-06-25 14:02 - 2015-11-17 22:36 - 00017940 _____ C:\WINDOWS\Control.KTL
2016-06-23 09:00 - 2016-02-26 19:22 - 00004366 _____ C:\WINDOWS\System32\Tasks\PITax reminder_28_02
2016-06-23 09:00 - 2016-02-26 19:22 - 00004364 _____ C:\WINDOWS\System32\Tasks\PITax reminder_28_01
2016-06-23 09:00 - 2016-02-26 19:22 - 00004360 _____ C:\WINDOWS\System32\Tasks\PITax reminder_28_04
2016-06-23 09:00 - 2016-02-26 19:22 - 00004360 _____ C:\WINDOWS\System32\Tasks\PITax reminder_28_03
2016-06-23 09:00 - 2016-02-26 19:22 - 00004358 _____ C:\WINDOWS\System32\Tasks\PITax reminder_10_01
2016-06-21 12:27 - 2016-05-21 11:19 - 00000000 ____D C:\Users\Monika\AppData\Roaming\PhotoScape
2016-06-20 18:18 - 2015-07-06 21:39 - 00000000 ____D C:\Users\Monika\Documents\Moje skanowanie
2016-06-18 12:30 - 2016-04-18 17:12 - 00000000 ____D C:\Users\Monika\Desktop\tap
2016-06-16 19:22 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\rescache
2016-06-16 09:42 - 2015-09-10 07:55 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-15 22:26 - 2015-07-31 00:42 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

==================== Pliki w katalogu głównym wybranych folderów =======

2016-05-20 21:36 - 2016-05-20 21:36 - 0003584 _____ () C:\Users\Monika\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-09-23 14:27 - 2015-09-23 14:27 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-07-01 11:25 - 2016-07-15 17:12 - 0003392 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-07-15 09:30

==================== Koniec  FRST.txt ============================