Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 16-10-2016
Uruchomiony przez Dan (administrator)  DESKTOP-0NHQGI0 (16-10-2016 17:28:47)
Uruchomiony z C:\Users\Dan\Downloads
Załadowane profile: Dan (Dostępne profile: Dan & Praca)
Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-27] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25366584 2016-10-10] (Dropbox, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7408312 2016-06-27] (AVAST Software)
HKLM-x32\...\Run: [atom] => C:\ProgramData\SquirrelMachineInstalls\atom.exe [110842320 2016-04-15] (GitHub Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [319152 2016-04-08] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-01-30] (ABBYY Production LLC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2779136 2016-06-11] (Dominik Reichl)
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [Steam] => "C:\Program Files (x86)\Steam\steam.exe" -silent
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [Spotify Web Helper] => C:\Users\Dan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-12] (Spotify Ltd)
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [VoipConnect] => C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe [36547168 2016-02-17] (VoipConnect)
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\Run: [GoogleChromeAutoLaunch_31FA44FE943CF384B13C12A03C90A9AD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208 2016-09-25] (Google Inc.)
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\...\MountPoints2: {7061f146-ae67-11e5-b247-0015830cbfeb} - "F:\starter.exe" 
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-05-17] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2016-03-05]
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2016-03-05]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RescueTime.lnk [2016-03-08]
ShortcutTarget: RescueTime.lnk -> C:\Program Files (x86)\RescueTime\RescueTime.exe (RescueTime, Inc.)
GroupPolicy: Ograniczenia <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{5fa6c83f-bd44-441b-8ac8-724a3d9f55d8}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{87544bd3-9286-4d7a-8c41-cf80ff4bead0}: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{f3ad2b86-fabe-4505-bddb-258b72b76537}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3823393342-1030952088-1191992016-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-03-05] (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-06-29] (Oracle Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-03-05] (LastPass)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-29] (Oracle Corporation)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-03-05] (LastPass)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-03-05] (LastPass)
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1451313792141

FireFox:
========
FF DefaultProfile: 6j0nzjet.default
FF ProfilePath: C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\6j0nzjet.default [2016-06-29]
FF Extension: (Avira Browser Safety) - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\6j0nzjet.default\Extensions\abs@avira.com [2016-05-26]
FF Extension: (Polski słownik poprawnej pisowni) - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\6j0nzjet.default\Extensions\pl@dictionaries.addons.mozilla.org [2016-06-09]
FF Extension: (LastPass) - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\6j0nzjet.default\Extensions\support@lastpass.com [2016-03-10]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-05-17]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-05-17]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll [2016-10-11] ()
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-03-05] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-29] (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-03-05] (LastPass)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://natemat.pl/122411,kobiety-wariuja-na-widok-striptizera-bo-ich-faceci-sa-zaniedbani-lub-nie-potrafia-sprzedac-swojej-atrakcyjnosci
CHR StartupUrls: Default -> "hxxp://9gag.com/gag/ae3exPv","hxxp://natemat.pl/122411,kobiety-wariuja-na-widok-striptizera-bo-ich-faceci-sa-zaniedbani-lub-nie-potrafia-sprzedac-swojej-atrakcyjnosci","hxxps://www.messenger.com/t/717028329","hxxps://trello.com/b/22b1A2lu/personal","hxxp://kokopeliseeds.com/"
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default [2016-10-16]
CHR Extension: (Context) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aalnjolghjkkogicompabhhbbkljnlka [2015-12-22]
CHR Extension: (Prezentacje Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-22]
CHR Extension: (Dokumenty Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-22]
CHR Extension: (Dysk Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-22]
CHR Extension: (RescueTime for Chrome™ & ChromeOS™) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakmnplckeopfghnlpocafcepegjeap [2016-03-08]
CHR Extension: (Web Developer) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2016-07-22]
CHR Extension: (Sketchboard.io) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgafhjpdkfjfmmjbebbdckolonomaoil [2016-02-02]
CHR Extension: (ColorZilla) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2015-12-22]
CHR Extension: (Coursera Downloader) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbnibajlpdhhicnnhgpfkganncmghmk [2016-05-31]
CHR Extension: (YouTube) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-22]
CHR Extension: (uBlock Origin) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-10-16]
CHR Extension: (Recently Closed Tabs [FVD]) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckdmacmopjaoijgapmfhbggpijooeadm [2016-01-04]
CHR Extension: (Image Downloader) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpniohnfphhjihaiiggeabnkjhpaldj [2016-04-18]
CHR Extension: (Story Wars) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coadbejlmmejdkpdcnbikfcplabhgmpo [2016-10-16]
CHR Extension: (Google Search) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-22]
CHR Extension: (Mailto: for Gmail™) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgkkmcknielgdhebimdnfahpipajcpjn [2016-02-05]
CHR Extension: (PerfectPixel by WellDoneCode) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkaagdgjmgdmbnecmcefdhjekcoceebi [2016-10-16]
CHR Extension: (MindMup - Free Mind Map web site) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnenaecjcgeppfpaokiifokeieopppej [2015-12-22]
CHR Extension: (Session Buddy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2016-04-27]
CHR Extension: (Gmail offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-12-22]
CHR Extension: (Google Font Previewer for Chrome) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\engndlnldodigdjamndkplafgmkkencc [2016-05-09]
CHR Extension: (Arkusze Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-22]
CHR Extension: (Dodatek Google Analytics Opt-out firmy Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2015-12-22]
CHR Extension: (Pulpit zdalny Chrome) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-07-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Bookmark Manager) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2016-01-30]
CHR Extension: (Avast Online Security) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-17]
CHR Extension: (Przycisk Pin It) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-07-22]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-10-16]
CHR Extension: (Google Keep – notatki i listy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2016-10-16]
CHR Extension: (Panel View for Keep) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jccocffecajimkdjgfpjhlpiimcnadhb [2015-12-22]
CHR Extension: (Wypełniacz loterii paragonowej) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jheghjhekamfaapalhjciimpegfohfnm [2016-06-23]
CHR Extension: (TrackingTime 
 Time Tracker) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\knailkjkjcfegledhjhcfacdngnicimb [2016-05-31]
CHR Extension: (StayFocusd) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji [2015-12-22]
CHR Extension: (User-Agent Switcher) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmofgnohbedopheiphabfhfjgkhfcgf [2015-12-22]
CHR Extension: (drumbit) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mplpmdejoamenolpcojgegminhcnmibo [2016-07-04]
CHR Extension: (Video Speed Controller) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffaoalbilbmmfgbnbgppjihopabppdk [2016-10-16]
CHR Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2016-10-16]
CHR Extension: (Chrome Tabs - fast access [FVD]) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmjcfadckpgbkpjnkdedeamecbjogal [2016-01-04]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-11]
CHR Extension: (Picasa) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2015-12-22]
CHR Extension: (Habitica) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pidkmpibnnnhneohdgjclfdjpijggmjj [2016-10-16]
CHR Extension: (Evernote Web Clipper) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2016-10-16]
CHR Extension: (Gmail) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-22]
CHR Extension: (Chrome Media Router) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-16]
CHR Extension: (Secure Shell) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhechapfaindjhompbnflcldabbghjo [2016-10-16]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Guest Profile [2016-06-14]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-03-23]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 10 [2016-05-06]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 11 [2016-05-09]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 12 [2016-05-10]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 13 [2016-05-13]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 14 [2016-05-17]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 15 [2016-05-24]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 16 [2016-05-31]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 17 [2016-06-08]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 18 [2016-06-09]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 19 [2016-06-13]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 2 [2016-04-15]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 20 [2016-06-14]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 21 [2016-06-17]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22 [2016-08-12]
CHR Extension: (Prezentacje Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-20]
CHR Extension: (Dokumenty Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-20]
CHR Extension: (Dysk Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-20]
CHR Extension: (YouTube) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-20]
CHR Extension: (Adblock Plus) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-04]
CHR Extension: (OneTab) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2016-08-08]
CHR Extension: (Session Buddy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2016-06-20]
CHR Extension: (Arkusze Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-20]
CHR Extension: (Avira Browser Safety) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-07-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-23]
CHR Extension: (Avast Online Security) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-06-20]
CHR Extension: (Przycisk Pin It) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-07-20]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-08-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-20]
CHR Extension: (Gmail) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-20]
CHR Extension: (Chrome Media Router) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-12]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 3 [2016-04-16]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 4 [2016-04-18]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5 [2016-04-20]
CHR Extension: (Prezentacje Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-18]
CHR Extension: (Dokumenty Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-18]
CHR Extension: (Adblock Plus) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-04-18]
CHR Extension: (Session Buddy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2016-04-18]
CHR Extension: (Arkusze Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-18]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-18]
CHR Extension: (Przycisk Pin It) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-04-18]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7 [2016-04-26]
CHR Extension: (Prezentacje Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-25]
CHR Extension: (Dokumenty Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-25]
CHR Extension: (Adblock Plus) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-04-25]
CHR Extension: (Session Buddy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2016-04-25]
CHR Extension: (Arkusze Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-25]
CHR Extension: (Przycisk Pin It) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-04-25]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-04-25]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Profile 9 [2016-05-05]
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\System Profile [2016-08-12]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-17]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-17] (AVAST Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-06] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-06] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [38000 2016-10-10] (Dropbox, Inc.)
R2 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [40999448 2008-07-10] (Microsoft Corporation)
S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4737024 2008-07-29] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-06-16] (Electronic Arts)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
S4 SQLAgent$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [369688 2008-07-10] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [Brak podpisu cyfrowego]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2016-09-07] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364456 2016-09-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-09-07] (Microsoft Corporation)
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 i2p; "C:\Program Files (x86)\i2p\I2Psvc.exe" -s "C:\Program Files (x86)\i2p\wrapper.config"

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [31744 2009-09-15] (Google Inc)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [79216 2016-09-13] (AVAST Software)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-17] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-17] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software)
S3 athur; C:\Windows\System32\drivers\athuw8x.sys [3744256 2012-11-21] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-03-01] (Advanced Micro Devices)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows (R) Win 7 DDK provider)
R2 Ext2Fsd; C:\WINDOWS\system32\Drivers\Ext2Fsd.sys [787576 2015-06-10] (www.ext2fsd.com)
S3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2554528 2015-06-12] (MediaTek Inc.)
U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [84792 2016-07-06] (Sysinternals - www.sysinternals.com)
S3 qcusbser; C:\Windows\system32\DRIVERS\qcusbser.sys [242688 2013-01-15] (QUALCOMM Incorporated)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [195416 2016-02-04] (IDRIX)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 GPU-Z; \??\C:\Users\Dan\AppData\Local\Temp\GPU-Z.sys [X]
S3 HWiNFO32; \??\C:\Users\Dan\AppData\Local\Temp\HWiNFO64A.SYS [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]
S3 xpvcom; System32\Drivers\xpvcom.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-16 17:27 - 2016-10-16 17:28 - 00042010 _____ C:\Users\Dan\Downloads\FRST.txt
2016-10-16 17:26 - 2016-10-16 17:26 - 02406912 _____ (Farbar) C:\Users\Dan\Downloads\FRST64.exe
2016-10-15 14:29 - 2016-10-15 14:29 - 00001703 _____ C:\Users\Praca\Downloads\print.zip
2016-10-14 22:39 - 2016-10-14 22:39 - 00618768 _____ C:\Users\Praca\Downloads\Analiza matematyczna.pdf
2016-10-14 22:38 - 2016-10-14 22:38 - 00688813 _____ C:\Users\Praca\Downloads\AK1-1-09- Architektura.pdf
2016-10-14 21:36 - 2016-10-14 21:36 - 00016656 _____ C:\Users\Praca\AppData\LocalLow\wbk3630.tmp
2016-10-14 21:27 - 2016-10-14 21:27 - 00060243 _____ C:\Users\Praca\Downloads\Wszystkie_Kursy_eTrapez_[PL][Torrenty.org] (1).torrent
2016-10-14 21:25 - 2016-10-14 21:25 - 00060243 _____ C:\Users\Praca\Downloads\Wszystkie_Kursy_eTrapez_[PL][Torrenty.org].torrent
2016-10-14 21:25 - 2016-10-14 21:25 - 00000000 ____D C:\Users\Praca\AppData\LocalLow\uTorrent
2016-10-14 13:51 - 2016-10-14 13:51 - 00158914 _____ C:\Users\Praca\Downloads\cv-daniel-bogusz.pdf
2016-10-14 06:39 - 2016-10-14 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-14 06:34 - 2016-10-14 06:34 - 00210308 _____ C:\Users\Praca\Downloads\Pelnomocnictwo-szczegolne-PPS1-73938-[bip.gdansk.pl] (3).pdf
2016-10-14 01:04 - 2016-10-14 01:04 - 00000000 ____D C:\Users\Praca\Downloads\localhost.sql
2016-10-14 00:39 - 2016-10-14 00:40 - 01451945 _____ C:\Users\Praca\Downloads\localhost.sql.gz
2016-10-13 22:37 - 2016-10-05 04:39 - 24611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 01644736 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 01242304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 00602304 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 00591040 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 00329920 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-10-13 22:36 - 2016-10-05 09:56 - 00144576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-10-13 22:36 - 2016-10-05 09:56 - 00085696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-13 22:36 - 2016-10-05 09:20 - 01030408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-13 22:36 - 2016-10-05 09:20 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-13 22:36 - 2016-10-05 09:19 - 00129376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-13 22:36 - 2016-10-05 09:18 - 07468384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-13 22:36 - 2016-10-05 09:18 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-13 22:36 - 2016-10-05 09:18 - 01142560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-13 22:36 - 2016-10-05 09:01 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-13 22:36 - 2016-10-05 09:01 - 01337184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-10-13 22:36 - 2016-10-05 08:54 - 01297760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-10-13 22:36 - 2016-10-05 08:17 - 03693064 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-13 22:36 - 2016-10-05 08:15 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-10-13 22:36 - 2016-10-05 08:14 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-13 22:36 - 2016-10-05 08:09 - 00604920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-10-13 22:36 - 2016-10-05 07:45 - 00987488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-10-13 22:36 - 2016-10-05 07:39 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-10-13 22:36 - 2016-10-05 07:39 - 00576856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-10-13 22:36 - 2016-10-05 07:38 - 00636296 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-10-13 22:36 - 2016-10-05 07:38 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-10-13 22:36 - 2016-10-05 07:37 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-10-13 22:36 - 2016-10-05 07:31 - 00422240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-10-13 22:36 - 2016-10-05 07:25 - 00871776 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2016-10-13 22:36 - 2016-10-05 07:23 - 00305808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2016-10-13 22:36 - 2016-10-05 07:08 - 02937896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-13 22:36 - 2016-10-05 07:05 - 00256704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-10-13 22:36 - 2016-10-05 07:01 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-10-13 22:36 - 2016-10-05 07:00 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-10-13 22:36 - 2016-10-05 06:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-10-13 22:36 - 2016-10-05 06:50 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2016-10-13 22:36 - 2016-10-05 06:49 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2016-10-13 22:36 - 2016-10-05 06:49 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-10-13 22:36 - 2016-10-05 06:47 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2016-10-13 22:36 - 2016-10-05 06:47 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-13 22:36 - 2016-10-05 06:38 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2016-10-13 22:36 - 2016-10-05 06:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2016-10-13 22:36 - 2016-10-05 06:34 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-10-13 22:36 - 2016-10-05 06:33 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-10-13 22:36 - 2016-10-05 06:32 - 00538744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-10-13 22:36 - 2016-10-05 06:30 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-10-13 22:36 - 2016-10-05 06:30 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-10-13 22:36 - 2016-10-05 06:30 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-13 22:36 - 2016-10-05 06:29 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2016-10-13 22:36 - 2016-10-05 06:27 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2016-10-13 22:36 - 2016-10-05 06:23 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-10-13 22:36 - 2016-10-05 06:19 - 00717152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2016-10-13 22:36 - 2016-10-05 06:18 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-10-13 22:36 - 2016-10-05 06:17 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-10-13 22:36 - 2016-10-05 06:17 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-13 22:36 - 2016-10-05 06:15 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2016-10-13 22:36 - 2016-10-05 06:10 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-13 22:36 - 2016-10-05 06:10 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-13 22:36 - 2016-10-05 06:07 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2016-10-13 22:36 - 2016-10-05 06:05 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-13 22:36 - 2016-10-05 06:04 - 01718272 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-13 22:36 - 2016-10-05 06:02 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-13 22:36 - 2016-10-05 06:00 - 01661952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-13 22:36 - 2016-10-05 06:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-13 22:36 - 2016-10-05 06:00 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-13 22:36 - 2016-10-05 05:57 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2016-10-13 22:36 - 2016-10-05 05:55 - 03549696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-13 22:36 - 2016-10-05 05:48 - 02437120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-13 22:36 - 2016-10-05 05:40 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-13 22:36 - 2016-10-05 05:40 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2016-10-13 22:36 - 2016-10-05 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2016-10-13 22:36 - 2016-10-05 05:37 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-13 22:36 - 2016-10-05 05:30 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2016-10-13 22:36 - 2016-10-05 05:29 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-10-13 22:36 - 2016-10-05 05:29 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-13 22:36 - 2016-10-05 05:28 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2016-10-13 22:36 - 2016-10-05 05:24 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-10-13 22:36 - 2016-10-05 05:24 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-13 22:36 - 2016-10-05 05:23 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2016-10-13 22:36 - 2016-10-05 05:15 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-10-13 22:36 - 2016-10-05 05:14 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-10-13 22:36 - 2016-10-05 05:13 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2016-10-13 22:36 - 2016-10-05 05:10 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-13 22:36 - 2016-10-05 05:09 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-13 22:36 - 2016-10-05 05:05 - 01467904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-13 22:36 - 2016-10-05 05:04 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-13 22:36 - 2016-10-05 05:04 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-13 22:36 - 2016-10-05 04:59 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-13 22:36 - 2016-10-05 04:55 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-13 22:36 - 2016-10-05 04:54 - 01987584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-13 22:36 - 2016-10-05 04:50 - 22379520 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-13 22:36 - 2016-10-05 04:50 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-13 22:36 - 2016-10-05 04:40 - 01626112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-10-13 22:36 - 2016-10-05 04:39 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-13 22:36 - 2016-10-05 04:39 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-13 22:36 - 2016-10-05 04:33 - 14255104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-13 22:36 - 2016-10-05 04:27 - 09920512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-13 22:36 - 2016-10-05 04:26 - 07836672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-13 22:36 - 2016-10-05 04:22 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-13 22:36 - 2016-10-05 04:13 - 19349504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-13 22:36 - 2016-10-05 04:13 - 18675200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-13 22:36 - 2016-10-05 04:13 - 12134400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-13 22:36 - 2016-10-05 04:06 - 12587008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-13 22:36 - 2016-10-05 04:01 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-13 22:36 - 2016-10-01 04:16 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-13 22:36 - 2016-09-27 04:39 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-10-13 22:36 - 2016-09-17 10:08 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-10-13 22:36 - 2016-09-17 09:45 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-13 22:36 - 2016-09-17 09:28 - 03077120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-13 22:36 - 2016-09-17 09:12 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-10-13 22:36 - 2016-09-17 08:45 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-13 22:36 - 2016-09-17 08:43 - 02552832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-13 22:36 - 2016-09-17 08:22 - 04405248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-13 22:36 - 2016-06-18 06:55 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2016-10-13 22:36 - 2016-06-18 06:51 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-10-13 22:36 - 2016-06-18 06:49 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2016-10-13 22:36 - 2016-06-18 06:45 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2016-10-13 17:41 - 2016-10-13 17:41 - 00210308 _____ C:\Users\Praca\Downloads\Pelnomocnictwo-szczegolne-PPS1-73938-[bip.gdansk.pl] (2).pdf
2016-10-13 17:41 - 2016-10-13 17:41 - 00210308 _____ C:\Users\Praca\Downloads\Pelnomocnictwo-szczegolne-PPS1-73938-[bip.gdansk.pl] (1).pdf
2016-10-13 12:07 - 2016-10-13 12:07 - 00210308 _____ C:\Users\Praca\Downloads\Pelnomocnictwo-szczegolne-PPS1-73938-[bip.gdansk.pl].pdf
2016-10-13 01:50 - 2016-10-13 01:50 - 00043075 _____ C:\Users\Praca\Downloads\CV_Daniel-Bogusz.pdf
2016-10-12 22:44 - 2016-10-12 22:44 - 00278854 _____ C:\Users\Praca\Downloads\Agreement_Current Account_ABD0001168292.pdf
2016-10-12 22:21 - 2016-10-12 22:21 - 00066708 _____ C:\Users\Praca\Downloads\wzor-umowa-o-dzielo-z-omowieniem.pdf
2016-10-12 22:18 - 2016-10-12 22:18 - 00454867 _____ C:\Users\Praca\Downloads\Wroclaw - Absolvent Talent Days Targi Pracy 2016-11-16.pdf
2016-10-12 21:40 - 2016-10-12 21:40 - 00217757 _____ C:\Users\Praca\Downloads\Łucja Włosek.pdf
2016-10-12 21:26 - 2016-10-12 21:28 - 62642408 _____ (Ubisoft) C:\Users\Praca\Downloads\UplayInstaller.exe
2016-10-12 20:35 - 2016-10-12 20:35 - 00378866 _____ C:\Users\Praca\Desktop\gmer.txt
2016-10-12 19:48 - 2016-10-12 19:48 - 07188712 _____ (Finarea S.A. Switzerland ) C:\Users\Praca\Downloads\SetupVoipConnect-freevoipdeal.exe
2016-10-12 13:25 - 2016-10-12 13:25 - 00371282 _____ C:\Users\Praca\Downloads\gmer.zip
2016-10-12 11:33 - 2016-10-12 11:33 - 00092710 _____ C:\Users\Praca\Downloads\Shortcut.txt
2016-10-12 11:29 - 2016-10-12 11:33 - 00060354 _____ C:\Users\Praca\Downloads\Addition.txt
2016-10-12 11:26 - 2016-10-12 11:33 - 00158566 _____ C:\Users\Praca\Downloads\FRST.txt
2016-10-12 11:25 - 2016-10-16 17:27 - 00000000 ____D C:\FRST
2016-10-12 11:25 - 2016-10-12 11:47 - 00380928 _____ C:\Users\Praca\Downloads\bzgenhw4.exe
2016-10-12 11:25 - 2016-10-12 11:25 - 02407424 _____ (Farbar) C:\Users\Praca\Downloads\FRST64.exe
2016-10-12 11:08 - 2016-10-12 11:08 - 00005538 _____ C:\Users\Praca\Downloads\wzor_wniosku_o_udostepnienie_informacji_z_logow_srp.odt
2016-10-11 17:14 - 2016-10-11 01:02 - 01463592 _____ C:\Users\Praca\Desktop\wrotqa-27.pdf
2016-10-11 17:13 - 2016-10-11 17:13 - 01463592 _____ C:\Users\Praca\Downloads\wrotqa-27 (1).pdf
2016-10-11 12:39 - 2016-10-11 12:39 - 00070856 _____ C:\Users\Praca\Downloads\nowy rachunek brutto.pdf
2016-10-11 11:23 - 2016-10-11 11:23 - 00336860 _____ C:\Users\Praca\Downloads\telefony_14_7.pdf
2016-10-11 11:16 - 2016-10-11 11:16 - 20165824 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2016-10-11 01:02 - 2016-10-11 01:02 - 01463592 _____ C:\Users\Praca\Downloads\wrotqa-27.pdf
2016-10-10 22:56 - 2016-10-10 22:56 - 00001036 _____ C:\Users\Praca\Desktop\Graph.lnk
2016-10-10 22:56 - 2016-10-10 22:56 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graph
2016-10-10 22:56 - 2016-10-10 22:56 - 00000000 ____D C:\Program Files (x86)\Graph
2016-10-10 22:54 - 2016-10-10 22:55 - 10074640 _____ (Ivan Johansen ) C:\Users\Praca\Downloads\SetupGraph-4.4.2.exe
2016-10-10 20:30 - 2016-10-10 20:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-10-10 20:30 - 2016-10-10 20:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-10-10 20:30 - 2016-10-10 20:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-10-10 20:30 - 2016-10-10 20:30 - 00038000 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-10-08 22:21 - 2016-10-08 22:21 - 00312530 _____ C:\Users\Praca\Downloads\MAŁGORZATA_ŚWIERZ_CV_MŁODSZY_TESTER.pdf
2016-10-08 11:08 - 2016-10-08 11:08 - 06647224 _____ (Tim Kosse) C:\Users\Praca\Downloads\FileZilla_3.22.1_win64-setup.exe
2016-10-07 23:37 - 2016-10-07 23:37 - 00054348 _____ C:\Users\Praca\Downloads\rozklad_zajec_440642.ics
2016-10-06 20:02 - 2016-10-06 20:02 - 00436893 _____ C:\Users\Praca\Downloads\Małgorzata-Świerz.pdf
2016-10-06 20:02 - 2016-10-06 20:02 - 00002436 _____ C:\Users\Praca\Desktop\Praca - Chrome.lnk
2016-10-06 13:41 - 2016-10-06 13:41 - 00470578 _____ C:\Users\Praca\Downloads\Certyfikowany-tester-zwinny-Sylabus-wersja-2014-PL.pdf
2016-10-06 13:40 - 2016-10-06 13:40 - 00601597 _____ C:\Users\Praca\Downloads\sylabus-poziomu-podstawowego-wersja-2011.1.1_20120925.pdf
2016-10-06 13:38 - 2016-10-06 13:38 - 01908676 _____ C:\Users\Praca\Downloads\slownik-terminów-testowych-ver-2.2.2-z-dnia-02.11.2013.pdf
2016-10-06 02:45 - 2016-10-06 02:45 - 00007211 _____ C:\Users\Praca\Downloads\basic.ics
2016-10-06 02:00 - 2016-10-16 12:50 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-10-05 23:16 - 2016-10-05 23:16 - 00000055 _____ C:\Users\Praca\Downloads\raport_R_PPS_PLAN_STUD_WIAZKI.txt
2016-10-05 23:16 - 2016-10-05 23:16 - 00000055 _____ C:\Users\Praca\Downloads\raport_R_PPS_PLAN_STUD_WIAZKI (1).txt
2016-10-02 21:59 - 2016-10-02 21:59 - 02230559 _____ C:\Users\Praca\Downloads\feniks_1.pdf
2016-10-02 21:41 - 2016-10-02 21:41 - 00642512 _____ C:\Users\Praca\Downloads\drive-download-20161002T194138Z.zip
2016-10-02 12:32 - 2016-10-02 21:41 - 00329639 _____ C:\Users\Praca\Desktop\daniel bogusz dowód.pdf
2016-10-02 12:32 - 2016-10-02 21:41 - 00322126 _____ C:\Users\Praca\Desktop\małgorzata świerz dowód.pdf
2016-10-01 15:25 - 2016-10-01 15:27 - 00000000 ____D C:\Users\Praca\Desktop\Camera
2016-10-01 01:57 - 2016-10-01 01:57 - 00015360 _____ C:\Users\Praca\Downloads\Aiconica-batch-1475279845.zip
2016-10-01 01:57 - 2016-10-01 01:57 - 00015358 _____ C:\Users\Praca\Downloads\Aiconica-batch-1475279820.zip
2016-10-01 00:06 - 2016-10-01 00:11 - 00000602 _____ C:\Users\Praca\.bash_history
2016-09-30 23:45 - 2016-09-30 23:45 - 00000129 _____ C:\Users\Praca\.gitconfig
2016-09-30 23:44 - 2016-09-30 23:44 - 00000072 _____ C:\Users\Praca\.minttyrc
2016-09-30 23:41 - 2016-09-30 23:41 - 00001764 _____ C:\Users\Public\Desktop\Git Bash.lnk
2016-09-30 23:41 - 2016-09-30 23:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2016-09-30 23:26 - 2016-09-30 23:36 - 33049944 _____ (The Git Development Community ) C:\Users\Praca\Downloads\Git-2.10.0-64-bit.exe
2016-09-30 18:57 - 2016-09-30 18:57 - 00000000 ____D C:\Users\Praca\Downloads\GTA Radio
2016-09-30 17:51 - 2016-09-30 17:51 - 00004768 _____ C:\Users\Praca\Downloads\walshie4-Ultimate-Blocklist-V0.1.0-osx-49-gdfa8167.tar.gz
2016-09-30 17:48 - 2016-09-30 05:41 - 12840796 _____ C:\Users\Praca\Desktop\ydxerpxkpcfqjaybcssw.txt
2016-09-30 17:47 - 2016-09-30 17:47 - 03664539 _____ C:\Users\Praca\Downloads\ydxerpxkpcfqjaybcssw.gz
2016-09-30 17:42 - 2016-09-30 17:42 - 00000000 ____D C:\Users\Praca\Downloads\Vice City
2016-09-30 16:06 - 2016-09-30 16:06 - 00040252 _____ C:\Users\Praca\Downloads\ef_conv_zip_dZKQAbnCtYwQKuH2bzW_JweF.zip
2016-09-30 15:44 - 2016-09-30 15:44 - 00000000 ____D C:\ProgramData\Bitstream
2016-09-30 15:42 - 2016-09-30 15:42 - 00000000 ____D C:\Users\Praca\Downloads\dual
2016-09-29 20:32 - 2016-09-29 20:32 - 00008129 _____ C:\Users\Praca\Downloads\rachunek-do-umowy-o-dzielo.xlsx
2016-09-29 20:32 - 2016-09-29 20:32 - 00008129 _____ C:\Users\Praca\Downloads\rachunek-do-umowy-o-dzielo (1).xlsx
2016-09-29 15:38 - 2016-09-29 15:38 - 00002643 _____ C:\Users\Praca\Downloads\invite.ics
2016-09-29 03:45 - 2016-09-29 03:45 - 00019406 _____ C:\Users\Praca\AppData\LocalLow\wbkECBF.tmp
2016-09-29 03:08 - 2016-09-29 03:12 - 754378639 _____ (Utilu ) C:\Users\Praca\Downloads\UtiluMFC1172.exe
2016-09-28 21:42 - 2016-09-28 21:42 - 00004088 _____ C:\Users\Praca\Downloads\snazzy-maps-example-black-and-white-style.html
2016-09-28 20:06 - 2016-10-14 23:29 - 00000000 ____D C:\Users\Praca\AppData\Roaming\AIMP
2016-09-28 20:06 - 2016-09-28 20:06 - 00000968 _____ C:\Users\Public\Desktop\AIMP.lnk
2016-09-28 20:06 - 2016-09-28 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2016-09-28 20:06 - 2016-09-28 20:06 - 00000000 ____D C:\Program Files (x86)\AIMP
2016-09-28 20:03 - 2016-09-28 20:05 - 09163600 _____ (AIMP DevTeam) C:\Users\Praca\Downloads\aimp_4.10.1831.exe
2016-09-28 19:59 - 2016-09-28 19:59 - 00712001 _____ C:\Users\Praca\Downloads\foo_ui_columns-0.5.1-beta.1.fb2k-component
2016-09-28 19:53 - 2016-09-28 19:53 - 19605232 _____ C:\Users\Praca\Downloads\zetro_v3_0__final_release__by_anonymousgrafix-d4vm1dr.rar
2016-09-28 19:51 - 2016-09-28 19:52 - 03934931 _____ (foobar2000.org) C:\Users\Praca\Downloads\foobar2000_v1.3.12.exe
2016-09-28 18:19 - 2016-09-30 17:43 - 00000000 ____D C:\Users\Praca\Downloads\!Bargrooves
2016-09-28 18:19 - 2016-09-28 18:36 - 00000000 ____D C:\Users\Praca\Downloads\Formel – Tantan [Dialtone Records (CAT65408)]-WEB-FLAC-2016
2016-09-28 18:16 - 2016-09-30 17:43 - 00000000 ____D C:\Users\Praca\Downloads\Kerri Chandler
2016-09-28 18:15 - 2016-09-28 18:16 - 00000000 ____D C:\Users\Praca\Downloads\Serge Devant - Fearing Love (2015) [WEB - FLAC]
2016-09-28 15:46 - 2016-09-28 15:46 - 00000000 ____D C:\Program Files (x86)\gs
2016-09-28 15:44 - 2016-09-28 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2016-09-28 15:44 - 2016-09-28 15:44 - 00000000 ____D C:\Program Files (x86)\Corel
2016-09-27 03:44 - 2016-09-27 03:44 - 00002378 _____ C:\Users\Praca\AppData\Local\recently-used.xbel
2016-09-27 03:21 - 2016-09-27 03:21 - 00000000 ____D C:\Users\Praca\Documents\My Palettes
2016-09-27 03:20 - 2016-09-27 03:20 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Corel
2016-09-27 03:20 - 2016-09-27 03:20 - 00000000 ____D C:\ProgramData\Protexis
2016-09-27 03:14 - 2016-09-27 03:21 - 00000000 ____D C:\Users\Praca\Documents\Corel
2016-09-27 02:37 - 2016-09-27 02:37 - 00548376 _____ (Microsoft Corporation) C:\Users\Praca\Downloads\VS90sp1-KB945140-ENU.exe
2016-09-27 02:27 - 2016-09-28 15:45 - 00000000 ____D C:\ProgramData\Corel
2016-09-27 02:21 - 2016-09-28 15:54 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X5
2016-09-27 02:08 - 2016-09-28 15:52 - 00000000 ____D C:\Users\Praca\Downloads\CorelDRAW Graphics Suite X5 v15.2.0.695 Incl. KeyMaker - CORE
2016-09-27 02:08 - 2016-09-27 02:08 - 00109241 _____ C:\Users\Praca\Downloads\osiedlebatory.zip
2016-09-27 01:36 - 2016-09-27 01:41 - 488634544 _____ (Acresso Software Inc. ) C:\Users\Praca\Downloads\CorelDRAWGraphicsSuiteX4Installer_EN.exe
2016-09-27 00:59 - 2016-09-27 01:00 - 61453379 _____ C:\Users\Praca\Downloads\Domy na Batorego_ strona www.cdr.svg
2016-09-27 00:32 - 2016-09-27 00:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniConvertor 1.1.5
2016-09-27 00:32 - 2016-09-27 00:32 - 00000000 ____D C:\Program Files (x86)\MAKEMSI Package Documentation
2016-09-27 00:31 - 2016-09-27 00:31 - 00000000 ____D C:\Program Files (x86)\sK1 Project
2016-09-27 00:30 - 2016-09-27 00:30 - 14596608 _____ C:\Users\Praca\Downloads\uniconvertor-1.1.5-win32.msi
2016-09-27 00:27 - 2016-09-27 00:27 - 00525370 _____ C:\Users\Praca\Downloads\uniconvertor-1.1.1.tar.gz
2016-09-27 00:27 - 2016-09-27 00:27 - 00000000 ____D C:\Users\Praca\Downloads\UniConvertor-1.1.1
2016-09-26 23:41 - 2016-09-26 23:41 - 00370276 _____ C:\Users\Praca\Downloads\Unconfirmed 435601.crdownload
2016-09-26 23:41 - 2016-09-26 23:41 - 00257618 _____ C:\Users\Praca\Downloads\bootstrap-sass-3.3.7.tar.gz
2016-09-26 03:04 - 2016-09-26 03:04 - 00000000 ____D C:\Program Files\wkhtmltopdf_dev
2016-09-26 03:03 - 2016-09-26 03:04 - 28255252 _____ C:\Users\Praca\Downloads\wkhtmltox-0.13.0-alpha-7b36694_msvc2013-win64.exe
2016-09-25 23:02 - 2016-09-25 23:02 - 00099168 _____ C:\Users\Praca\Downloads\D19930078Lj (2).pdf
2016-09-25 18:26 - 2016-09-25 18:26 - 00099168 _____ C:\Users\Praca\Downloads\D19930078Lj (1).pdf
2016-09-25 18:17 - 2016-09-25 18:17 - 01911138 _____ C:\Users\Praca\Downloads\www.woodscapes.ur.edu.pl-2016-09-25T18-17-34.mysql.gz
2016-09-25 17:42 - 2016-09-25 17:43 - 80288256 _____ C:\Users\Praca\Downloads\www.woodscapes.ur.edu.pl-2016-09-25T17-42-17.sitearchive.tar.gz
2016-09-25 00:57 - 2016-09-25 00:57 - 00099168 _____ C:\Users\Praca\Downloads\D19930078Lj.pdf
2016-09-25 00:54 - 2016-09-25 00:54 - 00152716 _____ C:\Users\Praca\Downloads\D19930078.pdf
2016-09-24 16:44 - 2016-09-24 16:44 - 00000000 ____D C:\Users\Praca\AppData\Roaming\VeraCrypt
2016-09-24 04:05 - 2016-09-24 04:06 - 79954944 _____ C:\Users\Praca\Downloads\www.woodscapes.ur.edu.pl-2016-09-24T04-05-10.sitearchive.tar.gz
2016-09-24 01:23 - 2016-09-24 01:23 - 00873208 _____ C:\Users\Praca\Downloads\localhost_24.sql.zip
2016-09-21 16:13 - 2016-09-21 16:13 - 00000000 ____D C:\Users\Praca\Downloads\Braindead.S01E13.HDTV.x264-LOL[ettv]
2016-09-21 16:13 - 2016-09-21 16:13 - 00000000 ____D C:\Users\Praca\Downloads\Braindead.S01E12.HDTV.x264-LOL[ettv]
2016-09-21 16:13 - 2016-09-21 16:13 - 00000000 ____D C:\Users\Praca\Downloads\Braindead.S01E11.HDTV.x264-LOL[ettv]
2016-09-21 03:07 - 2016-09-21 03:08 - 00000000 ____D C:\Users\Praca\Downloads\CoreWX7174Port
2016-09-21 00:23 - 2016-09-21 00:53 - 92214114 _____ C:\Users\Praca\Downloads\CoreWX7174Port.rar
2016-09-20 03:36 - 2016-09-20 03:36 - 00010760 _____ C:\Users\Praca\AppData\LocalLow\wbk3609.tmp
2016-09-19 22:08 - 2016-09-19 22:08 - 02099585 _____ C:\Users\Praca\Downloads\SuperPNG_v2.5_win.zip
2016-09-19 21:57 - 2016-10-12 20:34 - 00024576 ___SH C:\Users\Praca\Desktop\Thumbs.db
2016-09-19 17:12 - 2016-09-19 17:12 - 00041818 _____ C:\Users\Praca\AppData\LocalLow\wbk5808.tmp
2016-09-19 13:43 - 2016-09-19 13:43 - 05048944 _____ C:\Users\Praca\Downloads\httrack_x64-noinst-3.48.22.zip
2016-09-19 01:55 - 2016-09-19 01:55 - 00004598 _____ C:\Users\Praca\AppData\LocalLow\wbkE363.tmp
2016-09-19 01:39 - 2016-09-19 01:39 - 05546932 _____ C:\Users\Praca\Downloads\Seriously.js-master.zip
2016-09-19 01:39 - 2016-09-19 01:39 - 00000000 ____D C:\Users\Praca\Downloads\Seriously.js-master
2016-09-19 00:27 - 2016-09-24 01:38 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Skype
2016-09-19 00:27 - 2016-09-23 18:38 - 00000000 ____D C:\ProgramData\Skype
2016-09-19 00:27 - 2016-09-19 00:27 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-09-19 00:27 - 2016-09-19 00:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-09-19 00:27 - 2016-09-19 00:27 - 00000000 ____D C:\Users\Praca\Tracing
2016-09-19 00:27 - 2016-09-19 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-09-18 23:31 - 2016-09-18 23:31 - 00015380 _____ C:\Users\Praca\Downloads\Uniwersytet_Rzeszowski.csv
2016-09-18 15:09 - 2016-09-18 15:09 - 07616673 _____ C:\Users\Praca\Downloads\legendy_polskie_bez_hypenacji.epub
2016-09-17 20:00 - 2016-09-17 20:01 - 68812800 _____ C:\Users\Praca\Downloads\calibre-64bit-2.68.0.msi
2016-09-17 17:52 - 2016-09-17 17:52 - 06662856 _____ (Tim Kosse) C:\Users\Praca\Downloads\FileZilla_3.21.0_win64-setup.exe
2016-09-17 02:54 - 2016-09-17 02:55 - 00000000 ____D C:\Users\Praca\Downloads\rcsetup153
2016-09-16 21:29 - 2016-09-16 21:29 - 07809296 _____ C:\Users\Praca\Downloads\Zarobić Milion, idąc pod prąd - E-BOOK.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-16 17:29 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-16 17:24 - 2015-12-22 20:54 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-16 17:23 - 2016-01-06 16:49 - 00001174 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-10-16 17:23 - 2015-12-22 20:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-16 17:16 - 2016-05-15 01:53 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-10-16 17:15 - 2015-12-22 20:54 - 00001088 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-16 17:08 - 2016-05-18 14:35 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3823393342-1030952088-1191992016-1005UA.job
2016-10-16 16:44 - 2016-04-14 14:55 - 00000000 ____D C:\Users\Praca\AppData\Local\CrashDumps
2016-10-16 16:36 - 2016-01-06 16:49 - 00001178 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-10-16 15:46 - 2016-02-21 21:40 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-10-16 12:41 - 2016-04-14 12:23 - 00000000 ____D C:\Users\Praca\AppData\Local\Adobe
2016-10-16 01:28 - 2016-04-15 15:16 - 00000000 ____D C:\Users\Praca\AppData\Roaming\FileZilla
2016-10-16 00:08 - 2016-05-18 14:35 - 00001038 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3823393342-1030952088-1191992016-1005Core.job
2016-10-15 00:16 - 2016-05-15 18:48 - 00000000 ____D C:\Users\Praca\AppData\Roaming\uTorrent
2016-10-15 00:16 - 2015-12-30 00:31 - 00000000 ____D C:\Program Files\PeerBlock
2016-10-14 23:50 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-10-14 23:30 - 2015-12-22 21:07 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-14 23:03 - 2015-12-22 21:07 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-14 23:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-14 23:02 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-14 06:38 - 2016-01-06 16:49 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-10-14 06:34 - 2015-12-22 20:44 - 02028864 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-14 06:34 - 2015-10-30 21:19 - 00882372 _____ C:\WINDOWS\system32\perfh015.dat
2016-10-14 06:34 - 2015-10-30 21:19 - 00182166 _____ C:\WINDOWS\system32\perfc015.dat
2016-10-14 06:34 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-10-14 06:17 - 2016-04-22 13:02 - 00000601 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2016-10-14 06:17 - 2015-12-22 20:40 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-10-14 06:17 - 2015-12-22 20:32 - 04957960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-14 06:15 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-10-14 06:12 - 2016-08-30 17:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-14 06:12 - 2016-08-30 17:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-14 06:12 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-10-14 06:12 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-13 23:56 - 2016-08-30 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-13 13:58 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-10-13 02:22 - 2016-04-14 00:31 - 00000000 ____D C:\Users\Praca
2016-10-13 01:09 - 2016-04-18 14:56 - 00371712 ___SH C:\Users\Praca\Downloads\Thumbs.db
2016-10-12 21:25 - 2016-04-19 00:38 - 00000000 ____D C:\Users\Praca\AppData\Local\Spotify
2016-10-12 20:46 - 2016-04-15 12:35 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2016-10-12 20:46 - 2016-04-15 12:35 - 00000000 ____D C:\Users\Praca\AppData\Local\atom
2016-10-12 20:46 - 2015-12-22 22:23 - 00002283 _____ C:\Users\Praca\Desktop\Atom.lnk
2016-10-12 20:43 - 2016-04-15 12:35 - 00000000 ____D C:\Users\Praca\AppData\Local\SquirrelTemp
2016-10-12 20:04 - 2016-04-14 13:55 - 00001304 _____ C:\Users\Praca\Desktop\VoipConnect.lnk
2016-10-12 20:04 - 2016-04-13 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2016-10-12 19:49 - 2016-04-19 00:37 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Spotify
2016-10-12 13:27 - 2016-03-11 14:53 - 00380928 _____ C:\Users\Praca\Desktop\gmer.exe
2016-10-11 11:16 - 2016-05-15 01:53 - 00003920 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-10-11 11:16 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-10-11 11:16 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-10-08 21:38 - 2016-04-18 15:04 - 00001496 _____ C:\Users\Praca\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2016-10-08 11:09 - 2016-01-06 23:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2016-10-08 11:09 - 2016-01-06 23:19 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2016-10-07 23:53 - 2016-09-06 14:32 - 00000000 ____D C:\Users\Praca\Documents\Outlook Files
2016-10-01 02:23 - 2015-10-30 09:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-01 02:23 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-30 23:54 - 2016-08-10 12:22 - 00000000 ____D C:\Users\Praca\.config
2016-09-30 23:41 - 2016-01-06 19:26 - 00000000 ____D C:\ProgramData\Git
2016-09-30 23:41 - 2016-01-06 19:25 - 00000000 ____D C:\Program Files\Git
2016-09-29 20:17 - 2016-03-11 15:56 - 00002278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-29 20:17 - 2016-03-11 15:56 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-28 19:44 - 2016-08-04 14:12 - 00000000 ____D C:\Users\Praca\Downloads\Paul_Kalkbrenner-Guten_Tag-CD-FLAC-2012-NBFLAC
2016-09-28 19:07 - 2016-05-12 22:33 - 00000000 ____D C:\Program Files\Bulk Crap Uninstaller
2016-09-28 14:36 - 2016-04-29 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual C++ 2008 Express Edition
2016-09-28 14:35 - 2016-04-29 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2008
2016-09-27 02:56 - 2016-04-29 21:31 - 00000000 ____D C:\WINDOWS\system32\1033
2016-09-27 02:49 - 2016-04-29 21:31 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2016-09-27 02:48 - 2016-04-29 21:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2016-09-27 00:44 - 2015-12-22 20:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-25 20:10 - 2016-03-03 15:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-24 15:29 - 2015-12-22 20:32 - 00000000 ___DC C:\WINDOWS\Panther
2016-09-24 15:24 - 2016-07-17 00:43 - 00000000 ___HD C:\$WINDOWS.~BT
2016-09-23 18:38 - 2016-06-16 21:59 - 00000000 ____D C:\Program Files (x86)\Popcorn Time
2016-09-19 21:37 - 2016-04-14 00:31 - 00000000 ____D C:\Users\Praca\AppData\Roaming\Adobe
2016-09-19 13:49 - 2016-06-14 01:52 - 00000000 ____D C:\temp
2016-09-18 16:25 - 2016-09-10 19:39 - 00000000 ____D C:\Users\Praca\AppData\Roaming\calibre
2016-09-18 16:22 - 2016-09-10 19:39 - 00000000 ____D C:\Users\Praca\Documents\Biblioteka calibre
2016-09-17 03:18 - 2016-09-09 14:36 - 00000000 ____D C:\Users\Praca\Desktop\selekcja

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-23 22:05 - 2016-03-05 16:57 - 21405208 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2016-01-31 23:11 - 2016-01-31 23:11 - 0000132 _____ () C:\Users\Dan\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2016-01-02 22:53 - 2016-07-26 22:23 - 0001496 _____ () C:\Users\Dan\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2016-01-17 01:22 - 2016-03-25 18:29 - 0000600 _____ () C:\Users\Dan\AppData\Local\PUTTY.RND
2016-03-16 03:37 - 2016-03-16 03:37 - 0003473 _____ () C:\Users\Dan\AppData\Local\recently-used.xbel
2016-01-05 23:02 - 2016-04-30 04:50 - 0006990 _____ () C:\ProgramData\hpzinstall.log

Niektóre pliki w TEMP:
====================
C:\Users\Dan\AppData\Local\Temp\config.exe
C:\Users\Dan\AppData\Local\Temp\jre-8u77-windows-au.exe
C:\Users\Dan\AppData\Local\Temp\NIPO.exe
C:\Users\Dan\AppData\Local\Temp\openvpn-install-2.3.8-I601-x86_64.exe
C:\Users\Dan\AppData\Local\Temp\X-Lite.exe
C:\Users\Praca\AppData\Local\Temp\JJKmWlyfbVxVClhNigmJ.DLL
C:\Users\Praca\AppData\Local\Temp\Procmon64.exe
C:\Users\Praca\AppData\Local\Temp\RemoveTemp.exe
C:\Users\Praca\AppData\Local\Temp\setup_6A56.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-10-14 23:00

==================== Koniec  FRST.txt ============================