Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 11-08-2016 01
Uruchomiony przez b0635940 (administrator)  WPPLL0ITA388 (17-08-2016 09:12:55)
Uruchomiony z C:\FRST\FRST-OlderVersion
Załadowane profile: b0635940 (Dostępne profile: b0635940 & B0635941 & SM61ZZ)
Platform: Windows 7 Enterprise Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
() C:\Program Files\Lenovo\Fingerprint Manager Pro\cachesrvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Softex Inc.) C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\acnamlogonagent.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\acnamagent.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Microsoft Corporation) C:\Program Files\Microsoft\MDOP MBAM\maltaagent.exe
(Palo Alto Networks) C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Client Security Solution\tvttcsd.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft) C:\Program Files (x86)\Microsoft\NetworkGuard\NetworkWatcher.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftdcc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Palo Alto Networks) C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acsagent.exe
(Microsoft) C:\Program Files (x86)\Microsoft\NetworkGuard\NetworkWatcherNotification.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE
(Microsoft Corporation) C:\Windows\CCM\RemCtrl\CmRcService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\CCM\CcmExec.exe
(Microsoft Corporation) C:\Windows\CCM\SCNotification.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_22_0_0_210_ActiveX.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\ONENOTE.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Windows\System32\mstsc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Policy Platform\policyHost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2776816 2013-12-17] (Synaptics Incorporated)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2012-04-27] (ActivIdentity)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [491160 2012-04-27] (ActivIdentity)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340184 2016-03-25] (Microsoft Corporation)
HKLM\...\Run: [cssauth] => C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [5958056 2012-09-03] (Lenovo Group Limited)
HKLM\...\Run: [GlobalProtect] => C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe [1806128 2015-11-02] (Palo Alto Networks)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-05-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-08-15] (Intel Corporation)
HKLM-x32\...\Run: [Client Access Service] => C:\Program Files (x86)\IBM\Client Access\cwbsvstr.exe [15872 2014-05-10] (IBM Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1034752 2016-03-25] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [530560 2016-04-25] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [239744 2016-04-25] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [SoftGridTray] => C:\Program Files (x86)\Microsoft Application Virtualization Client\SFTTray.exe [853352 2010-12-27] (Microsoft Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftdcc.exe",
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [721504 2015-09-02] (Microsoft Corporation)
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\Office15\lync.exe [19047584 2014-05-21] (Microsoft Corporation)
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [ForceCopyAclwithFile] 0
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [MoveSecurityAttributes] 0
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [NoPublishingWizard] 1
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [NoWebServices] 1
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [NoOnlinePrintsWizard] 1
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\MountPoints2: {4df10883-6798-11e5-8ebb-028037ec0200} - D:\Windows/AutoRun.exe
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\...\MountPoints2: {6cd1f55d-3fb9-11e4-aad0-028037ec0200} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\start.exe
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ActivClient Agent.lnk [2016-08-16]
ShortcutTarget: ActivClient Agent.lnk -> C:\Program Files\ActivIdentity\ActivClient\acsagent.exe (ActivIdentity)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bginfo.lnk [2016-08-16]
ShortcutTarget: Bginfo.lnk -> C:\Program Files\BgInfo\Bginfo.exe (Sysinternals)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Guard Notifications.lnk [2016-08-16]
ShortcutTarget: Network Guard Notifications.lnk -> C:\Windows\Installer\{82D5A23B-9B0D-47C9-BD20-3EF5935CB40E}\_4033B01B44A176B52EED31.exe ()
Startup: \\spplfapisp02\profiles\b0635940\AppDataW\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2016-08-16]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Brak pliku)
Startup: \\spplfapisp02\profiles\b0635940\AppDataW\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2016-08-17]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

AutoConfigURL: [S-1-5-21-1463549253-2724516119-1591476449-153512] => hxxp://ispproxy1.ad.ing.net/wpad.dat
Tcpip\Parameters: [DhcpNameServer] 10.111.222.35 10.111.222.36
Tcpip\..\Interfaces\{0EA4B729-C54F-4D46-83D2-57D8E2CEC1FD}: [NameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{31575618-3812-4644-9AF5-4F3372A7ECC6}: [DhcpNameServer] 10.87.54.127 10.87.84.23 10.87.54.123 10.87.84.22
Tcpip\..\Interfaces\{83693636-DA0F-43CC-BCC6-99121B859C1C}: [DhcpNameServer] 10.111.222.35 10.111.222.36
ManualProxies: 0hxxp://ispproxy1.ad.ing.net/wpad.dat

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-dfc40989
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-dfc40989
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://intranet.pl.ing-ad
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1463549253-2724516119-1591476449-153512\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ispintranet.pl.ing.net
SearchScopes: HKLM -> {ADB0247F-BFFA-4782-98CE-6AB62EE9DF11} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-dfc40989&q={searchTerms}
SearchScopes: HKLM -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-dfc40989&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
SearchScopes: HKU\S-1-5-21-1463549253-2724516119-1591476449-153512 -> DefaultScope {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.google.com/search?hl=pl&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1463549253-2724516119-1591476449-153512 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1463549253-2724516119-1591476449-153512 -> {ADB0247F-BFFA-4782-98CE-6AB62EE9DF11} URL = 
SearchScopes: HKU\S-1-5-21-1463549253-2724516119-1591476449-153512 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.google.com/search?hl=pl&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-07-19] (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-08-16] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-08-16] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-08-08] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: IePasswordManagerHelper Class -> {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} -> C:\Program Files (x86)\Lenovo\Client Security Solution\tvtpwm_ie_com.dll [2012-09-03] (Lenovo Group Limited)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-08-08] (Oracle Corporation)
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} 
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)

FireFox:
========
FF ProfilePath: \\spplfapisp02\profiles\b0635940\AppDataW\Mozilla\Firefox\Profiles\uq9ok48z.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-08-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-08-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2016-04-25] (Citrix Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-08-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-08-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)
R2 Cachedrv server; C:\Program Files\Lenovo\Fingerprint Manager Pro\cachesrvr.exe [109568 2013-11-01] () [Brak podpisu cyfrowego]
R2 CcmExec; C:\Windows\CCM\CcmExec.exe [1773240 2015-04-14] (Microsoft Corporation)
R2 CmRcService; C:\Windows\CCM\RemCtrl\CmRcService.exe [671928 2015-04-14] (Microsoft Corporation)
S3 Cwbrxd; C:\Windows\cwbrxd.exe [106496 2014-05-10] (IBM Corporation) [Brak podpisu cyfrowego]
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [319536 2014-11-14] (Lenovo.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R3 lpasvc; C:\Program Files\Microsoft Policy Platform\policyHost.exe [50280 2012-08-02] (Microsoft Corporation)
R3 lppsvc; C:\Program Files\Microsoft Policy Platform\policyHost.exe [50280 2012-08-02] (Microsoft Corporation)
R2 MaltaAgent; C:\Program Files\Microsoft\MDOP MBAM\maltaagent.exe [234920 2011-03-17] (Microsoft Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-03-25] (Microsoft Corporation)
R2 nam; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\acnamagent.exe [884224 2016-03-25] (Cisco Systems, Inc.)
R2 namlm; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\acnamlogonagent.exe [292864 2016-03-25] (Cisco Systems, Inc.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2014-11-17] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NetworkGuard; C:\Program Files (x86)\Microsoft\NetworkGuard\NetworkWatcher.exe [20480 2013-01-18] (Microsoft) [Brak podpisu cyfrowego]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374336 2016-03-25] (Microsoft Corporation)
R2 omniserv; C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe [87552 2013-11-01] (Softex Inc.) [Brak podpisu cyfrowego]
R2 PanGPS; C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe [2687280 2015-11-02] (Palo Alto Networks)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2014-11-17] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 smstsmgr; C:\Windows\CCM\TSManager.exe [316600 2015-04-14] (Microsoft Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)
R2 TSSCoreService; C:\Program Files (x86)\Lenovo\Client Security Solution\tvttcsd.exe [989096 2012-09-03] (Lenovo)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [40848 2013-10-28] (Validity Sensors, Inc.)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 acnamfd; C:\Windows\System32\DRIVERS\acnamfd.sys [55664 2016-03-25] (Cisco Systems, Inc.)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495888 2014-01-08] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-02] (Intel Corporation)
R3 l36wgps; C:\Windows\System32\DRIVERS\l36wgps64.sys [103184 2012-03-01] (Ericsson AB)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [443648 2013-04-22] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [455936 2013-04-22] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [22272 2013-04-22] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [508160 2013-04-22] (MCCI Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw02.sys [3584992 2014-01-08] (Intel Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R1 OMNISMI; C:\Windows\SysWOW64\drivers\omnismi.sys [14776 2013-11-11] ()
R3 PanGpd; C:\Windows\System32\DRIVERS\pangpd.sys [36352 2015-11-02] (Palo Alto Networks)
S3 prepdrvr; C:\Windows\System32\DRIVERS\prepdrv.sys [26984 2015-04-14] (Microsoft Corporation)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [761704 2010-12-27] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2010-12-27] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2010-12-27] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2010-12-27] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-12-17] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2016-08-16] ()
S3 vna_ap; C:\Windows\System32\DRIVERS\vnaap.sys [161256 2011-03-06] (Check Point Software Technologies)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2014-06-10] (Cisco Systems, Inc.)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [284912 2013-08-30] (Ericsson AB)
S1 epp; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Trzy miesiące - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-17 07:03 - 2016-08-17 07:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft System Center
2016-08-17 07:02 - 2016-08-17 07:02 - 00004764 _____ C:\Windows\system32\CcmFramework.ini
2016-08-17 07:02 - 2016-08-17 07:02 - 00000621 _____ C:\Windows\system32\CcmFramework.h
2016-08-17 07:02 - 2016-08-17 07:02 - 00000000 ____D C:\Windows\ms
2016-08-16 23:04 - 2016-08-17 05:53 - 00000000 ____D C:\Program Files\SecureAge
2016-08-16 23:04 - 2016-08-16 23:04 - 17408375 _____ C:\Windows\system32\scan.db
2016-08-16 22:25 - 2016-08-16 22:25 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-08-16 20:38 - 2016-08-16 20:58 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-08-16 15:02 - 2016-08-16 15:02 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-08-16 14:57 - 2016-08-17 09:12 - 00000000 ____D C:\FRST
2016-08-16 11:08 - 2016-08-16 11:08 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-08-16 11:07 - 2016-08-16 11:07 - 00000000 ____D C:\Program Files\Java
2016-08-16 09:04 - 2016-08-16 09:05 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-08-16 09:01 - 2016-08-16 09:01 - 00000000 ____D C:\Users\b0635940\AppData\Local\SoftGrid Client
2016-08-16 09:01 - 2016-08-16 09:01 - 00000000 ____D C:\Users\b0635940\AppData\Local\Lenovo
2016-08-16 08:47 - 2016-08-16 08:47 - 00003020 _____ C:\Windows\System32\Tasks\PMTask
2016-08-16 08:46 - 2016-08-16 08:46 - 00000000 ____D C:\Program Files (x86)\ThinkPad
2016-08-16 08:46 - 2014-11-14 07:07 - 02861296 _____ (Lenovo Group Limited) C:\Windows\system32\PWMCP64V.cpl
2016-08-16 08:46 - 2014-11-14 07:07 - 02692848 ____N (Lenovo Group Limited) C:\Windows\PWMBTHLV.EXE
2016-08-16 08:46 - 2014-11-14 07:07 - 00029512 _____ (Lenovo.) C:\Windows\system32\Drivers\DZHDD64.SYS
2016-08-16 08:46 - 2014-11-14 07:07 - 00020736 _____ (Lenovo Group Limited) C:\Windows\system32\Drivers\TPPWR64V.SYS
2016-08-16 08:39 - 2016-08-16 08:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serena
2016-08-16 08:39 - 2016-08-16 08:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\zh-CHT
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\zh-CHS
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\tr
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\sv
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\ru
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\pt
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\nl
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\ko
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\ja
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\it
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\hu
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\fr
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\es
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\de
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\system32\cs
2016-08-16 08:33 - 2016-08-16 08:33 - 00000000 ____D C:\Windows\ADAM
2016-08-16 08:33 - 2016-08-16 08:32 - 04889088 _____ (Microsoft Corporation) C:\Windows\system32\gppref.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 04342784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gppref.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 03787776 _____ (Microsoft Corporation) C:\Windows\system32\propshts.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 02548736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propshts.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00901632 _____ (Microsoft Corporation) C:\Windows\system32\gpprefbr.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefbr.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00302080 _____ (Microsoft Corporation) C:\Windows\system32\gpregistrybrowser.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcn.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpregistrybrowser.dll
2016-08-16 08:33 - 2016-08-16 08:32 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcn.dll
2016-08-16 08:28 - 2010-11-20 14:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\schmmgmt.dll
2016-08-16 08:28 - 2010-11-20 14:26 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\GPRSoP.dll
2016-08-16 08:28 - 2010-11-20 14:26 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\dsuiwiz.dll
2016-08-16 08:28 - 2010-11-20 14:26 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\domadmin.dll
2016-08-16 08:28 - 2010-11-20 14:24 - 00392704 _____ (Microsoft Corporation) C:\Windows\system32\ldp.exe
2016-08-16 08:28 - 2010-11-20 14:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\dsacls.exe
2016-08-16 08:28 - 2010-11-20 14:24 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\csvde.exe
2016-08-16 08:28 - 2010-11-20 14:24 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\dsrm.exe
2016-08-16 08:28 - 2010-11-20 14:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\dsmove.exe
2016-08-16 08:28 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schmmgmt.dll
2016-08-16 08:28 - 2010-11-20 13:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPRSoP.dll
2016-08-16 08:28 - 2010-11-20 13:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiwiz.dll
2016-08-16 08:28 - 2010-11-20 13:18 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\domadmin.dll
2016-08-16 08:28 - 2010-11-20 13:17 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldp.exe
2016-08-16 08:28 - 2010-11-20 13:17 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsacls.exe
2016-08-16 08:28 - 2010-11-20 13:17 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsrm.exe
2016-08-16 08:28 - 2010-11-20 13:17 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsmove.exe
2016-08-16 08:28 - 2010-11-05 02:55 - 00144646 _____ C:\Windows\SysWOW64\dssite.msc
2016-08-16 08:28 - 2010-11-05 02:55 - 00144646 _____ C:\Windows\system32\dssite.msc
2016-08-16 08:28 - 2010-11-05 02:55 - 00144380 _____ C:\Windows\SysWOW64\adsiedit.msc
2016-08-16 08:28 - 2010-11-05 02:55 - 00144380 _____ C:\Windows\system32\adsiedit.msc
2016-08-16 08:28 - 2009-07-14 03:52 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\mtedit.exe
2016-08-16 08:28 - 2009-07-14 03:39 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\gpfixup.exe
2016-08-16 08:28 - 2009-07-14 03:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\redirusr.exe
2016-08-16 08:28 - 2009-07-14 03:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\redircmp.exe
2016-08-16 08:28 - 2009-07-14 03:14 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpfixup.exe
2016-08-16 08:28 - 2009-07-14 03:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redirusr.exe
2016-08-16 08:28 - 2009-07-14 03:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redircmp.exe
2016-08-16 08:27 - 2010-11-20 14:26 - 01242112 _____ (Microsoft Corporation) C:\Windows\system32\dsadmin.dll
2016-08-16 08:27 - 2010-11-20 14:26 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCustom.dll
2016-08-16 08:27 - 2010-11-20 14:26 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCommon.dll
2016-08-16 08:27 - 2010-11-20 14:24 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\dsquery.exe
2016-08-16 08:27 - 2010-11-20 14:24 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\dsget.exe
2016-08-16 08:27 - 2010-11-20 14:24 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\ldifde.exe
2016-08-16 08:27 - 2010-11-20 14:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\dsadd.exe
2016-08-16 08:27 - 2010-11-20 14:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dsmod.exe
2016-08-16 08:27 - 2010-11-20 13:19 - 00743424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCustom.dll
2016-08-16 08:27 - 2010-11-20 13:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCommon.dll
2016-08-16 08:27 - 2010-11-20 13:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsadmin.dll
2016-08-16 08:27 - 2010-11-20 13:17 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsget.exe
2016-08-16 08:27 - 2010-11-20 13:17 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsquery.exe
2016-08-16 08:27 - 2010-11-20 13:17 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldifde.exe
2016-08-16 08:27 - 2010-11-20 13:17 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsadd.exe
2016-08-16 08:27 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsmod.exe
2016-08-16 08:27 - 2010-11-20 13:17 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\csvde.exe
2016-08-16 08:27 - 2010-11-05 02:55 - 00144951 _____ C:\Windows\SysWOW64\domain.msc
2016-08-16 08:27 - 2010-11-05 02:55 - 00144951 _____ C:\Windows\system32\domain.msc
2016-08-16 08:27 - 2009-07-14 03:41 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\BdeAducExt.dll
2016-08-16 08:27 - 2009-07-14 03:39 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\dcpromo.exe
2016-08-16 08:27 - 2009-07-14 03:39 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rendom.exe
2016-08-16 08:27 - 2009-07-14 03:39 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\netdom.exe
2016-08-16 08:27 - 2009-07-14 03:14 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcpromo.exe
2016-08-16 08:27 - 2009-07-14 03:14 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rendom.exe
2016-08-16 08:27 - 2009-07-14 03:14 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdom.exe
2016-08-16 08:27 - 2009-06-10 23:28 - 00146080 _____ C:\Windows\SysWOW64\gptedit.msc
2016-08-16 08:27 - 2009-06-10 23:21 - 00145017 _____ C:\Windows\SysWOW64\dsa.msc
2016-08-16 08:27 - 2009-06-10 22:46 - 00146080 _____ C:\Windows\system32\gptedit.msc
2016-08-16 08:27 - 2009-06-10 22:38 - 00145017 _____ C:\Windows\system32\dsa.msc
2016-08-16 08:26 - 2010-11-20 14:26 - 02300416 _____ (Microsoft Corporation) C:\Windows\system32\gpmgmt.dll
2016-08-16 08:26 - 2010-11-20 14:26 - 01862656 _____ (Microsoft Corporation) C:\Windows\system32\dcpromoui.dll
2016-08-16 08:26 - 2010-11-20 14:26 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdmin.dll
2016-08-16 08:26 - 2010-11-20 14:26 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\dcpromocmd.dll
2016-08-16 08:26 - 2010-11-20 14:26 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\gpme.dll
2016-08-16 08:26 - 2010-11-20 14:25 - 01135104 _____ (Microsoft Corporation) C:\Windows\system32\adprop.dll
2016-08-16 08:26 - 2010-11-20 14:25 - 00843776 _____ (Microsoft Corporation) C:\Windows\system32\adsiedit.dll
2016-08-16 08:26 - 2010-11-20 14:25 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\ntdsutil.exe
2016-08-16 08:26 - 2010-11-20 14:25 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\repadmin.exe
2016-08-16 08:26 - 2010-11-20 14:24 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\dcdiag.exe
2016-08-16 08:26 - 2010-11-20 14:24 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\dsmgmt.exe
2016-08-16 08:26 - 2010-11-20 14:24 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\dsdbutil.exe
2016-08-16 08:26 - 2010-11-20 13:19 - 01664512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpmgmt.dll
2016-08-16 08:26 - 2010-11-20 13:19 - 01292800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdmin.dll
2016-08-16 08:26 - 2010-11-20 13:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpme.dll
2016-08-16 08:26 - 2010-11-20 13:18 - 01189376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcpromoui.dll
2016-08-16 08:26 - 2010-11-20 13:18 - 00851456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprop.dll
2016-08-16 08:26 - 2010-11-20 13:18 - 00769024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcpromocmd.dll
2016-08-16 08:26 - 2010-11-20 13:18 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsiedit.dll
2016-08-16 08:26 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcdiag.exe
2016-08-16 08:26 - 2010-11-20 13:17 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdsutil.exe
2016-08-16 08:26 - 2010-11-20 13:17 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\repadmin.exe
2016-08-16 08:26 - 2010-11-20 13:17 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsdbutil.exe
2016-08-16 08:26 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsmgmt.exe
2016-08-16 08:26 - 2010-11-05 03:02 - 00146446 _____ C:\Windows\SysWOW64\gpmc.msc
2016-08-16 08:26 - 2010-11-05 03:02 - 00146446 _____ C:\Windows\system32\gpmc.msc
2016-08-16 08:26 - 2009-07-14 03:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\rsatclient.dll
2016-08-16 08:26 - 2009-06-10 23:28 - 00146712 _____ C:\Windows\SysWOW64\gpme.msc
2016-08-16 08:26 - 2009-06-10 22:46 - 00146712 _____ C:\Windows\system32\gpme.msc
2016-08-16 08:21 - 2016-08-16 21:55 - 00001138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-08-16 08:20 - 2016-08-16 21:55 - 00000983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2016-08-16 08:20 - 2016-08-16 08:20 - 00000000 ____D C:\Program Files\paint.net
2016-08-16 08:20 - 2016-08-16 08:20 - 00000000 ____D C:\Program Files (x86)\WinSCP
2016-08-16 08:20 - 2016-08-16 08:20 - 00000000 ____D C:\Program Files (x86)\PuTTY
2016-08-16 08:19 - 2016-08-16 08:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-08-16 08:19 - 2016-08-16 08:19 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-08-12 14:50 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-12 14:50 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-12 14:50 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-12 14:50 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-12 14:50 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-12 14:50 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-12 14:50 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-12 14:50 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-12 14:50 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-12 14:50 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-12 14:50 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-12 14:50 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-12 14:50 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-12 14:50 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-12 14:48 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-12 14:47 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-12 14:47 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-12 14:47 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-12 14:47 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-12 14:47 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-12 14:47 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-12 14:47 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-12 14:47 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-12 14:47 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-12 14:47 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-12 14:47 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-12 14:47 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-12 14:47 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-12 14:47 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-12 14:47 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-12 14:47 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-12 14:47 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-12 14:47 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-12 14:47 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-12 14:47 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-12 14:47 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-12 14:47 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-12 14:47 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-12 14:47 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-12 14:47 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-12 14:47 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-12 14:47 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-12 14:47 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-12 14:47 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-12 14:47 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-12 14:47 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-12 14:47 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-12 14:47 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-12 14:47 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-12 14:47 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-12 14:47 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-12 14:47 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-12 14:47 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-12 14:47 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-12 14:47 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-12 14:47 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-12 14:47 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-12 14:47 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-12 14:47 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-12 14:47 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-12 14:47 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-12 14:47 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-12 14:47 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-12 14:47 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-12 14:47 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-12 14:47 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-12 14:47 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-12 14:47 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-12 14:47 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-12 14:47 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-12 14:47 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-12 14:47 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-12 14:47 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-12 14:47 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-12 14:47 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-12 14:47 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-12 14:47 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-12 14:47 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-12 14:47 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-12 14:47 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-12 14:47 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-08 06:47 - 2016-08-16 11:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-08 06:47 - 2016-08-08 06:47 - 00097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-08-08 06:46 - 2016-08-08 06:46 - 00000000 ____D C:\Program Files (x86)\Java
2016-08-04 07:50 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-07-26 17:32 - 2016-07-26 17:32 - 00003082 _____ C:\Windows\System32\Tasks\{9B4B3B6B-C47C-4EC0-9B93-C10125AA605C}
2016-07-26 17:32 - 2016-07-26 17:32 - 00003082 _____ C:\Windows\System32\Tasks\{68096D73-F096-491E-99EE-D32E0E22A1C3}
2016-07-18 19:22 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-07-18 19:22 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-07-18 19:22 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-07-18 19:22 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-07-18 19:22 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-07-18 19:22 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-07-18 19:22 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2016-07-18 19:22 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-07-18 19:22 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-07-18 19:22 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2016-07-17 23:30 - 2016-07-17 23:31 - 00000000 ____D C:\Users\b0635940\AppData\Local\file
2016-07-17 23:30 - 2016-07-17 23:30 - 00000000 ____D C:\Users\b0635940\AppData\Local\Setup1460559
2016-06-18 18:43 - 2016-05-14 00:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-18 18:43 - 2016-05-14 00:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-18 18:43 - 2016-05-14 00:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-18 18:43 - 2016-05-14 00:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-18 18:43 - 2016-05-14 00:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-18 18:43 - 2016-05-13 23:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-18 18:43 - 2016-05-13 23:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-18 18:43 - 2016-05-13 23:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-18 18:43 - 2016-05-13 23:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-18 18:43 - 2016-05-13 23:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-18 18:43 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-18 18:43 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-18 18:41 - 2016-05-18 18:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-18 18:41 - 2016-05-18 18:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-18 18:40 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-18 18:40 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-18 18:40 - 2016-05-12 19:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-18 18:40 - 2016-05-12 17:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-18 18:40 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-18 18:40 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-18 18:40 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-06-18 18:40 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-18 18:40 - 2016-05-12 17:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-06-18 18:40 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-18 18:40 - 2016-05-12 16:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-06-18 18:36 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-18 18:36 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-18 18:36 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-18 18:36 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-18 18:36 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-18 18:36 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-18 18:36 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-06-18 18:36 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-06-18 18:36 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-18 18:35 - 2016-05-12 19:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-06-18 18:35 - 2016-05-12 17:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-06-18 18:34 - 2016-05-12 16:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-18 18:34 - 2016-05-12 16:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-18 18:34 - 2016-05-12 16:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-18 18:34 - 2016-05-12 15:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-18 18:34 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-18 18:34 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 09:28 - 2016-06-14 09:28 - 00000144 _____ C:\Windows\system32\ricdb.ini
2016-06-14 09:28 - 2016-06-14 09:28 - 00000000 ___HD C:\ProgramData\RICOH_DRV
2016-05-29 06:50 - 2016-05-29 06:50 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-29 06:50 - 2016-05-29 06:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-05-28 13:17 - 2016-05-29 06:52 - 00000000 ____D C:\ProgramData\Skype
2016-05-28 13:17 - 2016-05-28 13:17 - 00003454 _____ C:\Windows\System32\Tasks\b0635940GamesterSpadicesV2
2016-05-28 06:26 - 2016-08-17 08:55 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-28 06:26 - 2016-08-03 11:40 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-20 03:13 - 2016-05-20 03:13 - 00875712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-05-20 03:13 - 2016-05-20 03:13 - 00536768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-05-20 03:03 - 2016-05-20 03:03 - 00869568 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-05-20 03:03 - 2016-05-20 03:03 - 00678592 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll

==================== Trzy miesiące - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-17 08:33 - 2014-07-13 23:33 - 00000336 _____ C:\Windows\system32\config\netlogon.ftl
2016-08-17 08:20 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-08-17 07:37 - 2009-07-14 06:45 - 00023808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-17 07:37 - 2009-07-14 06:45 - 00023808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-17 07:13 - 2014-02-14 00:16 - 00000569 _____ C:\Windows\SMSCFG.INI
2016-08-17 07:12 - 2014-07-14 09:54 - 00110822 __RSH C:\ProgramData\ntuser.pol
2016-08-17 07:06 - 2014-07-13 23:32 - 00000000 ____D C:\Windows\ccmcache
2016-08-17 07:05 - 2014-02-14 00:54 - 00742932 _____ C:\Windows\system32\perfh015.dat
2016-08-17 07:05 - 2014-02-14 00:54 - 00157008 _____ C:\Windows\system32\perfc015.dat
2016-08-17 07:05 - 2009-07-14 07:13 - 01677244 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-17 07:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-08-17 07:03 - 2014-07-13 23:32 - 00000000 ____D C:\Windows\CCM
2016-08-17 07:03 - 2014-02-14 00:16 - 00000000 ____D C:\Windows\ccmsetup
2016-08-17 07:02 - 2014-07-13 23:33 - 00120901 _____ C:\Windows\system32\InstallUtil.InstallLog
2016-08-17 06:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-17 00:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-16 22:17 - 2015-07-15 11:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-16 21:55 - 2015-07-22 08:12 - 00001653 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix Receiver.lnk
2016-08-16 21:55 - 2014-07-14 09:53 - 00002127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Center Endpoint Protection.lnk
2016-08-16 21:55 - 2014-02-14 09:14 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-08-16 21:55 - 2014-02-14 09:14 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-08-16 21:55 - 2014-02-14 03:21 - 00001488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC.lnk
2016-08-16 21:55 - 2014-02-14 03:18 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-08-16 21:55 - 2009-07-14 06:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-16 21:55 - 2009-07-14 06:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-08-16 21:55 - 2009-07-14 06:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-08-16 21:55 - 2009-07-14 06:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-08-16 21:54 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-08-16 21:54 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-08-16 14:55 - 2014-07-15 11:57 - 00000000 ____D C:\BaJa
2016-08-16 13:42 - 2014-07-21 07:56 - 00000000 ____D C:\Users\b0635940\AppData\Local\ElevatedDiagnostics
2016-08-16 11:35 - 2014-07-15 15:52 - 00000000 ____D C:\Users\b0635940\AppData\Local\Google
2016-08-16 11:06 - 2009-07-14 06:45 - 00460176 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-16 10:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-08-16 09:46 - 2014-07-14 13:10 - 00000000 ____D C:\Windows\Downloaded Installations
2016-08-16 09:23 - 2014-07-15 11:53 - 00120008 _____ C:\Users\b0635940\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-16 09:19 - 2014-02-14 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-08-16 09:16 - 2015-03-20 10:33 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-16 09:15 - 2011-04-12 09:45 - 00000000 ____D C:\Windows\ShellNew
2016-08-16 09:04 - 2014-02-14 01:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2016-08-16 09:04 - 2014-02-14 01:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-16 09:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-08-16 09:01 - 2014-07-15 11:53 - 00000000 ____D C:\Users\b0635940\Tracing
2016-08-16 09:01 - 2014-02-14 01:47 - 00000000 ____D C:\Program Files\Microsoft Lync
2016-08-16 09:01 - 2014-02-14 01:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Lync
2016-08-16 08:47 - 2014-07-14 09:45 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2016-08-16 08:47 - 2014-07-14 09:37 - 00000000 ____D C:\ProgramData\Lenovo
2016-08-16 08:46 - 2014-07-14 09:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-08-16 08:46 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2016-08-16 08:39 - 2014-02-14 00:17 - 01702214 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-08-16 08:33 - 2014-02-14 00:54 - 00000000 ____D C:\Windows\system32\pl
2016-08-16 08:20 - 2014-07-14 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PUTTY
2016-08-12 20:12 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-10 10:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\spool
2016-08-08 07:26 - 2014-07-15 15:52 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-04 07:50 - 2015-07-22 08:12 - 00000000 ____D C:\ProgramData\Citrix
2016-08-04 07:50 - 2014-07-14 09:49 - 00000000 ____D C:\Program Files (x86)\Citrix
2016-08-03 11:40 - 2016-04-08 12:13 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-08-03 11:40 - 2016-04-08 12:13 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-01 06:06 - 2014-07-15 11:52 - 00020232 __RSH C:\Users\b0635940\ntuser.pol
2016-08-01 06:06 - 2014-07-15 11:52 - 00000000 ____D C:\Users\b0635940
2016-07-27 21:25 - 2010-11-21 05:27 - 00504488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-18 19:20 - 2015-02-19 10:33 - 00000000 ____D C:\Windows\system32\MRT
2016-07-18 19:13 - 2015-02-19 10:33 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Pliki w katalogu głównym wybranych folderów =======

2016-03-22 14:56 - 2016-03-22 14:56 - 6493696 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\agent.dat
2016-03-22 14:56 - 2016-03-22 14:56 - 0065232 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Config.xml
2016-03-22 14:56 - 2016-03-22 14:56 - 0014208 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\InstallationConfiguration.xml
2016-03-22 14:56 - 2016-03-22 14:56 - 0127488 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Installer.dat
2016-03-22 14:56 - 2016-03-22 14:56 - 0018432 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Main.dat
2016-03-22 14:56 - 2016-03-22 14:56 - 0005568 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\md.xml
2016-03-22 14:56 - 2016-03-22 14:56 - 0402905 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\MoveRantone.bin
2016-03-22 14:56 - 2016-03-22 14:56 - 0126464 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\noah.dat
2016-03-22 14:56 - 2016-03-22 14:56 - 0774144 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Phys-Flex.exe
2016-03-22 14:56 - 2016-03-22 14:56 - 1622056 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Phys-Flex.tst
2016-07-17 23:30 - 2016-07-17 23:30 - 2404884 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\sb309.dat
2016-07-17 23:30 - 2016-07-17 23:30 - 0238592 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\Setup84707.exe
2016-03-22 14:56 - 2016-03-22 14:56 - 0032038 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\uninstall_temp.ico
2016-07-26 02:31 - 2016-07-26 02:31 - 0000148 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\WB.CFG
2014-05-15 14:31 - 2014-05-15 14:31 - 0000600 _____ () \\spplfapisp02\profiles\b0635940\AppDataW\winscp.rnd
2014-07-15 15:48 - 2014-12-17 11:31 - 0013608 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp
2014-10-24 22:55 - 2014-10-24 22:55 - 0013522 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.o93bmn
2015-02-08 13:05 - 2015-02-08 13:05 - 0013608 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.ou8ac6
2015-01-26 19:43 - 2015-01-26 19:43 - 0013608 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.qa9fsi
2014-12-31 10:36 - 2014-12-31 10:36 - 0013608 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.smz288
2015-02-22 10:41 - 2015-02-22 10:41 - 0013608 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.wver5v
2015-02-08 18:17 - 2015-02-08 18:17 - 0005596 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.yqr552
2015-04-22 22:50 - 2015-04-22 22:50 - 0014174 _____ () C:\Users\b0635940\AppData\Local\CPAUTO.tmp.zto67d
2014-08-28 07:19 - 2016-02-23 16:02 - 0000600 _____ () C:\Users\b0635940\AppData\Local\PUTTY.RND
2014-07-14 09:43 - 2014-07-14 09:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\b0635940\AppData\Local\Temp\dllnt_dump.dll
C:\Users\b0635940\AppData\Local\Temp\license.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-16 07:55

==================== Koniec  FRST.txt ============================