Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 26-10-2016 Uruchomiony przez xbialy (administrator) XBIALY-KOMPUTER (27-10-2016 21:06:55) Uruchomiony z C:\Users\xbialy\Desktop Załadowane profile: xbialy (Dostępne profile: xbialy) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AMD) C:\Windows\System32\atiesrxx.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe (AMD) C:\Windows\System32\atieclxx.exe (Heimdal Security) C:\Program Files (x86)\Heimdal\Heimdal.ClientHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files (x86)\Mionix\NAOS 3200 LED-Optical Gaming Mouse\NAOS3200_Icon.exe (Heimdal Security) C:\Program Files (x86)\Heimdal\Heimdal.AgentLoader.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe (Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe (DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Qihu 360 Software Co., Ltd.) C:\Program Files (x86)\360\Total Security\safemon\chrome\360webshield.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Heimdal Security) C:\Program Files (x86)\Heimdal\Heimdal.Agent.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8029064 2016-10-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58584 2016-09-29] (Raptr, Inc) HKLM-x32\...\Run: [USB Gamepad] => C:\Windows\USB Vibration\7906\USB Gamepad.exe -boot HKLM-x32\...\Run: [Mionix NAOS 3200] => C:\Program Files (x86)\Mionix\NAOS 3200 LED-Optical Gaming Mouse\NAOS3200_Icon.EXE [139264 2010-08-30] () HKLM-x32\...\Run: [HeimdalAgentLoader] => C:\Program Files (x86)\Heimdal\Heimdal.AgentLoader.exe [57344 2016-09-13] (Heimdal Security) HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1894824 2016-10-24] (QIHU 360 SOFTWARE CO. LIMITED) HKU\S-1-5-21-3314560757-2355784580-1894095042-1000\...\Run: [GoogleChromeAutoLaunch_7A70CD91613272E57DA51C5BC542820D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [921704 2016-10-20] (Google Inc.) HKU\S-1-5-21-3314560757-2355784580-1894095042-1000\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{1A1B6EA6-5FA7-49BA-AC40-83B4E9F6E174}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{D9492457-E914-4B66-A5FA-31F2E123E95A}: [DhcpNameServer] 192.168.42.129 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com SearchScopes: HKU\S-1-5-21-3314560757-2355784580-1894095042-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27] (Oracle Corporation) BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2016-10-24] (Qihu 360 Software Co., Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27] (Oracle Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2016-10-24] (Qihu 360 Software Co., Ltd.) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-30] () FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-27] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-27] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-30] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\xbialy\AppData\Local\Google\Chrome\User Data\Default [2016-10-27] CHR Extension: (360 Internet Protection) - C:\Users\xbialy\AppData\Local\Google\Chrome\User Data\Default\Extensions\glcimepnljoholdmjchkloafkggfoijh [2016-10-27] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\xbialy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02] CHR Extension: (Chrome Media Router) - C:\Users\xbialy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25] CHR HKLM-x32\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Heimdal Client Host; C:\Program Files (x86)\Heimdal\Heimdal.ClientHost.exe [82944 2016-09-13] (Heimdal Security) [Brak podpisu cyfrowego] S2 Heimdal SecureDNS; C:\Program Files (x86)\Heimdal\Heimdal.SecureDNS.exe [58368 2016-09-13] (Heimdal Security) [Brak podpisu cyfrowego] S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S3 Origin Client Service; E:\Origin\OriginClientService.exe [2142728 2016-10-05] (Electronic Arts) S2 Origin Web Helper Service; E:\Origin\OriginWebHelperService.exe [2209296 2016-10-05] (Electronic Arts) R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [926632 2016-10-24] (QIHU 360 SOFTWARE CO. LIMITED) R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28848 2014-09-16] (Samsung Electronics Co., Ltd.) R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.) S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-01-12] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [151784 2016-10-24] (360.cn) R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2016-10-24] (360.cn) R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2016-10-24] (360.cn) R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [330472 2016-10-24] (360.cn) S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2016-10-24] (360.cn) R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [391392 2016-10-24] (360.cn) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.) R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [188864 2016-10-24] (360.cn) S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-05-31] (Sony Mobile Communications) S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34793 2007-05-23] (Compuware Corporation) [Brak podpisu cyfrowego] R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-10-27] (Malwarebytes) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [121416 2012-05-12] (MotioninJoy) [Brak podpisu cyfrowego] S3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [43720 2015-08-13] (Razer Inc) S3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc) R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [268976 2014-09-16] (Samsung Electronics Co., Ltd.) R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2014-09-16] (Samsung Electronics Co., Ltd.) S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-10-27 21:06 - 2016-10-27 21:07 - 00013810 ____X C:\Users\xbialy\Desktop\FRST.txt 2016-10-27 21:06 - 2016-10-27 21:06 - 00000000 ____D C:\FRST 2016-10-27 21:05 - 2016-10-27 21:05 - 00040418 _____ C:\Users\xbialy\Downloads\Shortcut.txt 2016-10-27 21:04 - 2016-10-27 21:04 - 00419264 _____ C:\Windows\system32\FNTCACHE.DAT 2016-10-27 20:27 - 2016-10-27 20:27 - 00000000 ___DX C:\Users\xbialy\Desktop\ss 2016-10-27 20:16 - 2016-10-27 20:16 - 00110176 _____ C:\Users\xbialy\AppData\Local\GDIPFONTCACHEV1.DAT 2016-10-27 19:56 - 2016-10-27 21:05 - 00043093 _____ C:\Users\xbialy\Downloads\Addition.txt 2016-10-27 19:56 - 2016-10-27 21:05 - 00037279 _____ C:\Users\xbialy\Downloads\FRST.txt 2016-10-27 19:56 - 2016-10-27 19:57 - 00000000 ____D C:\ProgramData\360Quarant 2016-10-27 19:55 - 2016-10-27 21:06 - 02407936 ____X (Farbar) C:\Users\xbialy\Desktop\FRST64.exe 2016-10-27 19:55 - 2016-10-27 21:05 - 00000000 ____D C:\Users\xbialy\AppData\LocalLow\360WD 2016-10-27 19:55 - 2016-10-27 21:03 - 00000000 ____D C:\Windows\Tasks\360Disabled 2016-10-27 19:55 - 2016-10-27 20:04 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\360safe 2016-10-27 19:55 - 2016-10-27 19:55 - 00001163 _____ C:\Users\Public\Desktop\360 Total Security.lnk 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 _RSHD C:\360SANDBOX 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\360TotalSecurity 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 ____D C:\ProgramData\360TotalSecurity 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 ____D C:\ProgramData\360safe 2016-10-27 19:55 - 2016-10-27 19:55 - 00000000 ____D C:\Program Files (x86)\360 2016-10-27 19:55 - 2016-10-24 05:09 - 00391392 _____ (360.cn) C:\Windows\system32\Drivers\360fsflt.sys 2016-10-27 19:55 - 2016-10-24 05:09 - 00330472 _____ (360.cn) C:\Windows\system32\Drivers\360Box64.sys 2016-10-27 19:55 - 2016-10-24 05:09 - 00188864 _____ (360.cn) C:\Windows\system32\Drivers\BAPIDRV64.SYS 2016-10-27 19:55 - 2016-10-24 05:09 - 00151784 _____ (360.cn) C:\Windows\system32\Drivers\360AntiHacker64.sys 2016-10-27 19:55 - 2016-10-24 05:09 - 00086248 _____ (360.cn) C:\Windows\SysWOW64\Drivers\360AvFlt.sys 2016-10-27 19:55 - 2016-10-24 05:09 - 00086248 _____ (360.cn) C:\Windows\system32\Drivers\360AvFlt.sys 2016-10-27 19:55 - 2016-10-24 05:09 - 00040520 _____ (360.cn) C:\Windows\system32\Drivers\360Camera64.sys 2016-10-27 19:54 - 2016-10-27 19:55 - 44853168 _____ C:\Users\xbialy\Downloads\360TS_Setup.exe 2016-10-27 19:54 - 2016-10-27 19:54 - 01418664 _____ (QIHU 360 SOFTWARE CO. LIMITED) C:\Users\xbialy\Downloads\360TS_Setup_Mini.exe 2016-10-27 19:52 - 2016-10-27 19:57 - 00004004 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2016-10-27 19:46 - 2016-10-27 19:46 - 00000000 ____D C:\Users\Default\AppData\Roaming\Sun 2016-10-27 19:46 - 2016-10-27 19:46 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Sun 2016-10-27 19:45 - 2016-10-27 21:05 - 00000000 ____D C:\Users\Public\Documents\Heimdal Security 2016-10-27 19:45 - 2016-10-27 19:46 - 00000000 ____D C:\Program Files (x86)\Heimdal 2016-10-27 19:34 - 2016-10-27 19:46 - 00000000 ____D C:\ProgramData\Heimdal Security 2016-10-27 19:34 - 2016-10-27 19:33 - 01478888 ____X (Heimdal Security) C:\Users\xbialy\Desktop\Heimdal.SetupLauncher.exe 2016-10-24 13:16 - 2016-10-24 13:26 - 00000000 ____D C:\Users\xbialy\Documents\NetBeansProjects 2016-10-24 13:16 - 2016-10-24 13:16 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\NetBeans 2016-10-24 13:16 - 2016-10-24 13:16 - 00000000 ____D C:\Users\xbialy\AppData\Local\NetBeans 2016-10-24 13:15 - 2016-10-24 13:15 - 00000894 _____ C:\Users\Public\Desktop\NetBeans IDE 8.2.lnk 2016-10-24 13:15 - 2016-10-24 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans 2016-10-24 13:14 - 2016-10-27 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2016-10-24 13:13 - 2016-10-24 13:16 - 00000000 ____D C:\Users\xbialy\.nbi 2016-10-24 13:08 - 2016-10-24 13:13 - 341868448 _____ C:\Users\xbialy\Downloads\jdk-8u111-nb-8_2-windows-x64.exe 2016-10-21 14:31 - 2016-10-21 14:31 - 00036831 ____X C:\Users\xbialy\Desktop\i-inf-z-16_17_6.pdf 2016-10-19 21:40 - 2016-10-19 21:43 - 00000000 ___DX C:\Users\xbialy\Desktop\Nowy folder (3) 2016-10-19 21:35 - 2016-10-19 21:40 - 265809693 _____ C:\Users\xbialy\Downloads\AutoMapa_6.20_1606_PL GOTOWIEC.rar 2016-10-18 23:46 - 2016-10-18 23:46 - 00000000 ____D C:\Users\xbialy\AppData\LocalLow\AMD 2016-10-18 23:28 - 2016-10-18 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-10-13 16:37 - 2016-10-13 16:39 - 00210386 _____ C:\Windows\ntbtlog.txt 2016-10-13 16:25 - 2016-10-13 16:25 - 00504983 _____ C:\Users\xbialy\Downloads\cru-1.2.5.zip 2016-10-09 18:34 - 2016-10-09 18:34 - 00000931 _____ C:\Users\Public\Desktop\Zune.lnk 2016-10-09 18:34 - 2016-10-09 18:34 - 00000000 ___RD C:\Users\xbialy\Podcasts 2016-10-09 18:34 - 2016-10-09 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune 2016-10-09 18:34 - 2016-10-09 18:34 - 00000000 ____D C:\Program Files\Zune 2016-10-09 18:31 - 2016-10-09 18:31 - 00000592 _____ C:\Users\Public\Desktop\Wondershare Photo Recovery.lnk 2016-10-09 18:31 - 2016-10-09 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare 2016-10-09 18:30 - 2016-10-09 18:30 - 07172552 _____ (Wondershare Co., Ltd. ) C:\Users\xbialy\Downloads\photo-recovery_full543.exe 2016-10-09 18:26 - 2016-10-09 18:31 - 283639032 _____ (Microsoft Corporation) C:\Users\xbialy\Downloads\ZunePackage.exe 2016-10-09 18:26 - 2016-10-09 18:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_ZuneDriver_01_09_00.Wdf 2016-10-09 18:26 - 2016-10-09 18:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2016-10-05 04:37 - 2016-10-05 04:37 - 03437632 _____ C:\Windows\system32\atiumd6a.cap 2016-10-05 04:32 - 2016-10-05 04:32 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap 2016-10-05 04:20 - 2016-10-05 04:20 - 08847888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00519048 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys 2016-10-05 04:20 - 2016-10-05 04:20 - 00294792 _____ C:\Windows\system32\dgtrayicon.exe 2016-10-05 04:20 - 2016-10-05 04:20 - 00289160 _____ (AMD) C:\Windows\system32\atiesrxx.exe 2016-10-05 04:20 - 2016-10-05 04:20 - 00286600 _____ (AMD) C:\Windows\system32\atitmm64.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00275336 _____ C:\Windows\system32\GameManager64.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00201608 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00151056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00122760 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00110472 _____ (AMD) C:\Windows\system32\atimuixx.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00107400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00107400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll 2016-10-05 04:20 - 2016-10-05 04:20 - 00020360 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 15728008 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 14318984 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 10976880 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 09926536 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdvlk64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 08065928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdvlk32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 02481032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 02163592 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 01333128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00998280 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00525704 _____ (AMD) C:\Windows\system32\atieclxx.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00458632 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00402312 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00349064 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00248200 _____ C:\Windows\system32\amdgfxinfo64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00230280 _____ C:\Windows\system32\atieah64.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00221064 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00208264 _____ C:\Windows\SysWOW64\atieah32.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00160136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00155016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amduve64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00145400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00141280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00136584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00135048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00134536 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amduve32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00129416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00125288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00117640 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00109856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00109856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00108936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00092328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00092328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00078728 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00072072 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00068488 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00067464 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe 2016-10-05 04:19 - 2016-10-05 04:19 - 00065416 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2016-10-05 04:19 - 2016-10-05 04:19 - 00059784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 48824712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 27489672 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 27291016 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 09311624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 07363976 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00841608 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00676232 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00305544 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys 2016-10-05 04:18 - 2016-10-05 04:18 - 00269192 _____ C:\Windows\system32\clinfo.exe 2016-10-05 04:18 - 2016-10-05 04:18 - 00267656 _____ C:\Windows\system32\hsa-thunk64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00233352 _____ C:\Windows\SysWOW64\hsa-thunk.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00112520 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00103304 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00082824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00066952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00066440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll 2016-10-05 04:18 - 2016-10-05 04:18 - 00054664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll 2016-10-05 04:17 - 2016-10-05 04:17 - 33241992 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll 2016-10-05 04:17 - 2016-10-05 04:17 - 26556416 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys 2016-10-05 03:38 - 2016-10-05 03:38 - 00755472 _____ C:\Windows\SysWOW64\atiapfxx.blb 2016-10-05 03:38 - 2016-10-05 03:38 - 00755472 _____ C:\Windows\system32\atiapfxx.blb 2016-10-05 03:20 - 2016-10-05 03:20 - 00166560 _____ C:\Windows\system32\amde34b.dat 2016-10-05 03:20 - 2016-10-05 03:20 - 00166560 _____ C:\Windows\system32\amde34a.dat 2016-10-02 13:13 - 2016-10-02 13:13 - 00059860 _____ C:\Users\xbialy\Downloads\FE8E2D15-10D8-41FD-8379-009BE73A1DB3.pdf 2016-10-02 11:49 - 2016-10-02 11:50 - 00000000 ___DX C:\Users\xbialy\Desktop\SAN łódź 2016-09-29 22:00 - 2016-09-29 22:00 - 00100832 _____ C:\Windows\system32\ativce02.dat 2016-09-29 21:58 - 2016-09-29 21:58 - 00177280 _____ C:\Windows\system32\ativce03.dat 2016-09-29 21:56 - 2016-09-29 21:56 - 00175584 _____ C:\Windows\system32\amde31a.dat 2016-09-29 17:43 - 2016-09-29 17:43 - 00000009 ____X C:\Users\xbialy\Desktop\dziekanat SANłodz.txt ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-10-27 21:05 - 2015-04-25 17:53 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\Raptr 2016-10-27 21:04 - 2015-04-25 17:52 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-10-27 21:04 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-10-27 21:03 - 2016-08-05 13:48 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2016-10-27 20:45 - 2015-04-25 17:52 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-10-27 19:57 - 2016-01-25 16:58 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\CoreFTP 2016-10-27 19:57 - 2015-12-06 19:11 - 00004238 _____ C:\Windows\System32\Tasks\AMD Updater 2016-10-27 19:57 - 2015-09-29 17:37 - 00000000 ____D C:\Users\xbialy\AppData\Local\CrashDumps 2016-10-27 19:57 - 2015-06-28 11:43 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\Notepad++ 2016-10-27 19:57 - 2015-05-21 19:14 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\TeamViewer 2016-10-27 19:57 - 2015-04-26 19:10 - 00000000 ____D C:\SpeedFan 2016-10-27 19:57 - 2015-04-25 19:09 - 00004478 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-10-27 19:57 - 2015-01-15 14:08 - 00000000 ____D C:\Windows\Panther 2016-10-27 19:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-10-27 19:55 - 2015-04-25 17:52 - 00004054 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-10-27 19:55 - 2015-04-25 17:52 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-10-27 19:52 - 2015-08-23 16:57 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-10-27 19:52 - 2015-08-23 16:57 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-10-27 19:52 - 2015-08-23 16:57 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2016-10-27 19:52 - 2015-08-23 16:57 - 00000000 ____D C:\Windows\system32\Macromed 2016-10-27 19:52 - 2015-04-25 19:08 - 00000000 ____D C:\Users\xbialy\AppData\Local\Adobe 2016-10-27 19:47 - 2011-04-12 15:21 - 00740732 _____ C:\Windows\system32\perfh015.dat 2016-10-27 19:47 - 2011-04-12 15:21 - 00155804 _____ C:\Windows\system32\perfc015.dat 2016-10-27 19:47 - 2009-07-14 07:13 - 01671648 _____ C:\Windows\system32\PerfStringBackup.INI 2016-10-27 19:46 - 2015-08-27 11:06 - 00000000 ____D C:\Program Files\Java 2016-10-27 19:46 - 2015-06-28 11:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-10-27 19:41 - 2015-01-15 14:14 - 01643550 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-10-27 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-10-27 19:27 - 2015-05-19 19:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-10-26 21:00 - 2015-04-25 22:59 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\TS3Client 2016-10-25 10:46 - 2015-04-25 17:53 - 00002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-10-24 13:13 - 2015-08-27 11:06 - 00000000 ____D C:\Users\xbialy\.oracle_jre_usage 2016-10-24 13:13 - 2015-04-25 17:48 - 00000000 ____D C:\Users\xbialy 2016-10-20 21:30 - 2016-01-31 20:50 - 00000000 ____D C:\Users\xbialy\AppData\Roaming\Origin 2016-10-20 21:30 - 2016-01-31 20:49 - 00000000 ____D C:\ProgramData\Origin 2016-10-19 09:50 - 2015-12-06 19:11 - 00000000 ____D C:\Users\xbialy\AppData\Local\AMD 2016-10-18 23:27 - 2016-03-29 19:25 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2016-10-18 23:26 - 2015-04-25 17:51 - 00000000 ____D C:\AMD 2016-10-12 11:16 - 2015-04-25 19:09 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-10-09 18:44 - 2009-07-14 06:45 - 00016880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-10-09 18:44 - 2009-07-14 06:45 - 00016880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-10-09 18:34 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2016-10-05 15:47 - 2016-01-31 20:50 - 00000000 ____D C:\Users\xbialy\AppData\Local\Origin 2016-10-05 04:21 - 2015-11-18 10:20 - 00139720 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2016-10-05 04:20 - 2016-09-16 21:41 - 00240008 _____ C:\Windows\SysWOW64\GameManager32.dll 2016-10-05 04:20 - 2016-09-16 21:41 - 00175496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2016-10-05 04:20 - 2016-09-16 21:41 - 00020360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll 2016-10-05 04:20 - 2016-07-19 00:21 - 07213248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2016-10-05 04:20 - 2016-07-19 00:21 - 00123776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2016-10-05 04:20 - 2015-07-16 04:11 - 00170072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll 2016-10-05 04:19 - 2016-09-16 21:40 - 00998280 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2016-10-05 04:19 - 2016-09-16 21:40 - 00124776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll 2016-10-05 04:19 - 2016-07-19 00:21 - 09981352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2016-10-05 04:19 - 2015-11-18 10:20 - 09094552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2016-10-05 04:19 - 2015-07-16 04:11 - 10937728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll 2016-10-05 04:19 - 2015-03-31 22:46 - 01551344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll 2016-10-05 04:19 - 2015-03-31 22:46 - 01274256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2016-10-05 04:18 - 2016-09-16 21:39 - 21640584 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll 2016-10-05 04:18 - 2016-09-16 21:38 - 38268808 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2016-10-05 04:18 - 2016-09-07 16:16 - 00892296 _____ (AMD) C:\Windows\system32\coinst_16.40.dll 2016-10-03 18:27 - 2015-06-10 12:28 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-09-30 10:53 - 2016-04-08 10:21 - 00002033 _____ C:\Users\Public\Desktop\Raptr.lnk 2016-09-28 10:12 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-04-26 19:25 - 2015-04-26 19:25 - 0000017 _____ () C:\Users\xbialy\AppData\Local\resmon.resmoncfg 2015-09-04 11:57 - 2015-09-04 11:57 - 0000057 _____ () C:\ProgramData\Ament.ini ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll [2010-11-21 05:24] - [2015-06-05 10:36] - 1008640 ____A (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79 C:\Windows\SysWOW64\User32.dll [2010-11-21 05:24] - [2015-06-05 10:36] - 0833024 ____A (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-10-25 10:27 ==================== Koniec FRST.txt ============================