Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 23-04-2017 01 Uruchomiony przez Kuba (administrator) LENOVO-KUBA (25-04-2017 18:45:13) Uruchomiony z C:\Users\Kuba\Downloads Załadowane profile: Kuba (Dostępne profile: Kuba) Platform: Windows 10 Pro Wersja 1703 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Lenovo.) C:\Windows\System32\LPlatSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Microsoft Corporation) C:\Windows\System32\SecurityHealthService.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe (Lenovo.) C:\Windows\System32\LPlatSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ESET) C:\Program Files\ESET\ESET Security\egui.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch.exe (Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-03-22] (Apple Inc.) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft) HKLM-x32\...\Run: [XPE] => C:\Program Files (x86)\XPE Windows 10 DPI Fix\XPEWindows10_DPI.exe [28672 2015-08-21] (XPExplorer.com - 2015) HKLM-x32\...\Run: [Ad Muncher] => C:\Program Files (x86)\Ad Muncher\AdMunch.exe [560760 2017-04-13] (Murray Hurps Software Pty Ltd) HKU\S-1-5-21-4102568238-114906716-964236493-1001\...\MountPoints2: {54f6e6b4-212e-11e7-8a28-f816541a9185} - "D:\HiSuiteDownLoader.exe" ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) GroupPolicy: Ograniczenia <======= UWAGA GroupPolicyScripts: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.55.1 Tcpip\..\Interfaces\{2fe9676f-26d4-4455-ad73-28ac45c0fb86}: [DhcpNameServer] 192.168.55.1 Tcpip\..\Interfaces\{875dc868-bf1c-41be-91c6-ca2f63beb8ef}: [DhcpNameServer] 192.168.55.1 Internet Explorer: ================== HKU\S-1-5-21-4102568238-114906716-964236493-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/ BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-04-22] (Microsoft Corporation) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-04-22] (Microsoft Corporation) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-04-22] (Microsoft Corporation) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-04-22] (Microsoft Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-22] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-22] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-22] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-22] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: wyvswjzm.default FF ProfilePath: C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\wyvswjzm.default [2017-04-25] FF Extension: (Eliminator Slajdów) - C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\wyvswjzm.default\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2016-05-31] FF Extension: (uBlock Origin) - C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\wyvswjzm.default\Extensions\uBlock0@raymondhill.net.xpi [2017-04-21] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_148.dll [2017-04-11] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll [2017-04-11] () FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-03-06] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-03-06] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-04] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-04] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-03-21] Chrome: ======= CHR Profile: C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default [2017-04-25] CHR Extension: (uBlock Origin) - C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-04-20] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08] CHR Extension: (Chrome Media Router) - C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-25] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3801280 2017-04-19] (Microsoft Corporation) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2624856 2017-03-09] (ESET) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [361376 2015-09-14] (Intel Corporation) R2 LPlatSvc; C:\WINDOWS\system32\LPlatSvc.exe [711256 2016-11-01] (Lenovo.) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-04-01] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-04-01] (NVIDIA Corporation) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [257624 2016-11-22] (Synaptics Incorporated) R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2016-07-13] (Synaptics Incorporated) R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2016-07-13] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) S3 wlpasvc; C:\WINDOWS\System32\lpasvc.dll [1295360 2017-03-18] (Microsoft Corporation) R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132848 2017-03-09] (ESET) R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [107344 2017-03-09] (ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14880 2017-03-09] (ESET) R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [178056 2017-03-09] (ESET) R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50752 2017-03-09] (ESET) R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [78192 2017-03-09] (ESET) R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [101648 2017-03-09] (ESET) S3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [32344 2016-07-20] (ELAN Microelectronic Corp.) S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18816 2016-11-25] (Huawei Technologies Co., Ltd.) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.) S3 iaLPSS2i_GPIO2_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [85504 2017-03-18] (Intel Corporation) S3 iaLPSS2i_I2C_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [168448 2017-03-18] (Intel Corporation) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [231168 2017-01-13] (Intel Corporation) R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [88256 2015-06-09] (Intel Corporation) R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\Netwbw02.sys [3525896 2016-11-09] (Intel Corporation) R2 NPF; C:\Windows\SysWoW64\drivers\npf64.sys [36600 2016-08-17] (Riverbed Technology, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_e512e33140587627\nvlddmkm.sys [14841784 2017-04-03] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-01-17] (Realtek ) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [787968 2017-01-18] (Realsil Semiconductor Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [64088 2016-11-22] (Synaptics Incorporated) R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2016-07-13] (Synaptics Incorporated) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) NETSVCx32: TokenBroker -> C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-04-25 18:45 - 2017-04-25 18:45 - 00016221 _____ C:\Users\Kuba\Downloads\FRST.txt 2017-04-25 18:44 - 2017-04-25 18:45 - 00000000 ____D C:\FRST 2017-04-25 18:44 - 2017-04-25 18:44 - 02426368 _____ (Farbar) C:\Users\Kuba\Downloads\FRST64.exe 2017-04-25 18:41 - 2017-04-25 18:42 - 00000000 ____D C:\Program Files\Reimage 2017-04-25 18:40 - 2017-04-25 18:42 - 00000140 _____ C:\WINDOWS\Reimage.ini 2017-04-25 18:06 - 2017-04-25 18:08 - 436782552 _____ (NVIDIA Corporation) C:\Users\Kuba\Downloads\381.89-notebook-win10-64bit-international-whql.exe 2017-04-24 19:36 - 2017-04-24 19:36 - 00000000 ____D C:\Users\Kuba\AppData\Local\DBG 2017-04-21 22:55 - 2017-04-21 22:55 - 00018489 _____ C:\Users\Kuba\Desktop\Jakub Telecki.zip 2017-04-21 20:50 - 2017-04-21 20:51 - 00000000 ____D C:\Users\Kuba\Downloads\Kolejki 2017-04-21 20:50 - 2017-04-21 20:50 - 00004417 _____ C:\Users\Kuba\Downloads\Kolejki.zip 2017-04-21 18:57 - 2017-04-22 22:51 - 00000000 ____D C:\Users\Kuba\Desktop\Jakub Telecki 2017-04-21 16:58 - 2017-04-21 16:58 - 00001946 _____ C:\Users\Kuba\Desktop\BlueJ.lnk 2017-04-21 16:58 - 2017-04-21 16:58 - 00000000 ____D C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueJ 2017-04-21 16:58 - 2017-04-21 16:58 - 00000000 ____D C:\Program Files (x86)\BlueJ 2017-04-20 21:19 - 2017-04-20 21:19 - 00000000 ___DL C:\Users\Kuba\AppData\LocalLow\PlayReady 2017-04-18 18:49 - 2017-04-18 18:49 - 00000000 ____D C:\Users\Kuba\AppData\Roaming\Notepad++ 2017-04-18 18:49 - 2017-04-18 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2017-04-18 18:49 - 2017-04-18 18:49 - 00000000 ____D C:\Program Files\Notepad++ 2017-04-18 18:48 - 2017-04-18 18:48 - 00000000 ____D C:\Tasm 1.4 2017-04-18 18:48 - 2017-04-18 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tasm 1.4 2017-04-18 18:48 - 2013-02-06 14:26 - 00002075 _____ C:\Users\Public\Desktop\Tasm 1.4 Windows 7 - Windows 8 64 bit By Techapple.net.lnk 2017-04-16 13:36 - 2017-04-16 13:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2017-04-16 13:36 - 2017-04-16 13:36 - 00000000 ____D C:\Program Files\Classic Shell 2017-04-15 18:52 - 2017-04-15 18:53 - 00000000 ____D C:\Users\Kuba\Documents\Pliki programu Outlook 2017-04-14 19:07 - 2017-04-14 19:07 - 00000000 ____D C:\Users\Kuba\.android 2017-04-14 19:04 - 2017-04-16 13:35 - 00000000 ____D C:\Users\Kuba\AppData\Local\Hisuite 2017-04-14 19:04 - 2017-04-14 19:04 - 00000000 ____D C:\Users\Kuba\Documents\HiSuite 2017-04-14 19:04 - 2016-11-25 08:15 - 02152176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFUpdate_01009.dll 2017-04-14 19:04 - 2016-11-25 08:15 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll 2017-04-14 19:04 - 2016-11-25 08:15 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll 2017-04-14 19:04 - 2016-11-25 08:15 - 01002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusbcoinstaller2.dll 2017-04-14 19:04 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys 2017-04-14 19:04 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys 2017-04-14 19:04 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys 2017-04-14 19:04 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys 2017-04-14 19:04 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 23675392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 19334144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 11869696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 08319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-04-13 20:48 - 2017-04-13 20:48 - 08247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 06756920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 02444184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01411640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01323880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-04-13 20:48 - 2017-04-13 20:48 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-04-13 20:48 - 2017-04-13 20:48 - 00986592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-04-13 20:48 - 2017-04-13 20:48 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-04-13 20:48 - 2017-04-13 20:48 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-04-13 20:48 - 2017-04-13 20:48 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-04-13 20:48 - 2017-04-13 20:48 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00205728 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-04-13 20:48 - 2017-04-13 20:48 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-04-13 20:48 - 2017-04-13 20:48 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-04-13 20:48 - 2017-04-13 20:28 - 00000000 ____D C:\Windows.old 2017-04-13 20:47 - 2017-04-13 20:47 - 00543648 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-04-13 20:47 - 2017-04-13 20:47 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-04-13 20:47 - 2017-04-13 20:47 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-04-13 20:47 - 2017-04-13 19:52 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-04-13 20:23 - 2017-04-13 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2017-04-13 20:23 - 2017-04-13 20:23 - 00000000 ____D C:\ProgramData\ESET 2017-04-13 20:23 - 2017-04-13 20:23 - 00000000 ____D C:\Program Files\ESET 2017-04-13 20:12 - 2017-04-13 20:12 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-04-13 20:10 - 2017-04-13 20:10 - 00000020 ___SH C:\Users\Kuba\ntuser.ini 2017-04-13 20:07 - 2017-04-13 20:07 - 00000000 ____D C:\ProgramData\USOShared 2017-04-13 19:59 - 2017-04-25 18:32 - 01888698 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-04-13 19:59 - 2017-04-13 19:59 - 00007623 _____ C:\WINDOWS\diagwrn.xml 2017-04-13 19:59 - 2017-04-13 19:59 - 00007623 _____ C:\WINDOWS\diagerr.xml 2017-04-13 19:58 - 2017-04-25 18:26 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-04-13 19:58 - 2017-04-25 16:35 - 00004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{18191469-3AC5-4678-926D-1E141B4469D1} 2017-04-13 19:58 - 2017-04-13 19:58 - 00023044 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-04-13 19:58 - 2017-04-13 19:58 - 00003438 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-04-13 19:58 - 2017-04-13 19:58 - 00002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-04-13 19:58 - 2017-04-13 19:58 - 00002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-04-13 19:58 - 2017-04-13 19:58 - 00002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-04-13 19:58 - 2017-04-13 19:58 - 00002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-04-13 19:58 - 2017-04-13 19:58 - 00002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-04-13 19:58 - 2017-04-13 19:58 - 00002566 _____ C:\WINDOWS\System32\Tasks\Odkurzacz 2017-04-13 19:58 - 2017-04-13 19:58 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple 2017-04-13 19:56 - 2017-04-13 19:56 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-04-13 19:54 - 2017-04-13 19:56 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-04-13 19:54 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-04-13 19:53 - 2017-04-25 18:26 - 00000000 ____D C:\ProgramData\Synaptics 2017-04-13 19:53 - 2017-04-25 18:26 - 00000000 ____D C:\ProgramData\NVIDIA 2017-04-13 19:53 - 2017-04-14 23:01 - 00000000 ____D C:\Users\Kuba 2017-04-13 19:53 - 2017-04-13 19:54 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-04-13 19:53 - 2017-04-13 19:54 - 00000000 ____D C:\ProgramData\Conexant 2017-04-13 19:53 - 2017-04-13 19:54 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-04-13 19:53 - 2017-04-13 19:54 - 00000000 ____D C:\Program Files\CONEXANT 2017-04-13 19:53 - 2017-04-13 19:54 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-04-13 19:53 - 2017-04-13 19:53 - 01701376 _____ (TODO: ) C:\WINDOWS\SysWOW64\RebootPrompt.exe 2017-04-13 19:53 - 2017-04-13 19:53 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Ustawienia lokalne 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Szablony 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Moje dokumenty 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Menu Start 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Documents\Moje wideo 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Documents\Moje obrazy 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Documents\Moja muzyka 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\Dane aplikacji 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\AppData\Local\Historia 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 _SHDL C:\Users\Kuba\AppData\Local\Dane aplikacji 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2017-04-13 19:53 - 2017-04-13 19:53 - 00000000 ____D C:\WINDOWS\Cnxt 2017-04-13 19:53 - 2017-04-01 04:10 - 06437312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 02481208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 00549944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 00146880 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-04-13 19:53 - 2017-04-01 04:10 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-04-13 19:53 - 2017-04-01 04:09 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-04-13 19:53 - 2017-03-31 12:15 - 07851747 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-04-13 19:52 - 2017-04-25 18:26 - 00385008 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-04-13 19:52 - 2017-04-25 18:26 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-04-13 19:52 - 2017-04-25 17:56 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-04-13 19:52 - 2017-04-14 20:16 - 00000000 ____D C:\Intel 2017-04-13 19:52 - 2017-04-13 19:53 - 00000000 ____D C:\Program Files\Synaptics 2017-04-13 19:52 - 2017-04-13 19:52 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2017-04-13 19:52 - 2017-04-13 19:52 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-04-13 19:52 - 2017-04-13 19:52 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2017-04-13 19:52 - 2017-04-13 19:52 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-04-13 19:52 - 2017-04-13 19:52 - 00000000 ____D C:\Program Files\Intel 2017-04-13 19:52 - 2015-09-14 18:10 - 00092648 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-04-13 19:10 - 2017-04-13 19:12 - 00000036 _____ C:\WINDOWS\progress.ini 2017-04-13 18:59 - 2017-04-13 20:04 - 00000000 ___HD C:\$GetCurrent 2017-04-13 16:28 - 2017-04-13 19:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad Muncher 2017-04-11 20:41 - 2017-03-28 07:37 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll 2017-04-11 20:41 - 2017-03-28 07:28 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-04-08 20:39 - 2017-04-08 20:39 - 00000000 ____D C:\ProgramData\Oracle 2017-04-07 22:05 - 2017-04-07 22:05 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-04-07 22:05 - 2017-04-01 05:27 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2017-04-07 22:05 - 2017-03-10 23:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-04-07 22:05 - 2017-03-10 23:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-04-07 22:05 - 2017-03-10 23:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-04-07 22:05 - 2017-03-10 23:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-04-07 22:00 - 2017-04-03 16:49 - 00048696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2017-04-07 22:00 - 2017-04-01 05:27 - 40201152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 35354048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 35280320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 28592184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 11111392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 11056272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 10635192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 09316648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 09014792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 08876272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 04085712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 03790904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 03602296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 03246016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 01988032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438165.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 01591352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438165.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 01278528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 01055800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00995920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00990144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00960448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00911296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00776048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00688968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00612088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00577544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00499136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-04-07 22:00 - 2017-04-01 05:27 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb 2017-04-07 22:00 - 2017-04-01 05:27 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-04-07 22:00 - 2017-04-01 05:27 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-04-04 17:52 - 2017-04-08 22:43 - 00000000 ____D C:\Users\Kuba\Downloads\Listy 2017-04-04 17:48 - 2017-04-04 17:48 - 00005825 _____ C:\Users\Kuba\Downloads\Listy.zip 2017-03-31 16:51 - 2017-03-31 17:20 - 00000000 ____D C:\ProgramData\Ad Muncher 2017-03-28 18:35 - 2017-04-13 19:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-03-28 18:35 - 2017-03-28 18:35 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk 2017-03-28 18:35 - 2017-03-28 18:35 - 00000000 ____D C:\Program Files\iTunes 2017-03-28 18:35 - 2017-03-28 18:35 - 00000000 ____D C:\Program Files\iPod 2017-03-28 18:34 - 2017-03-28 18:34 - 00000000 ____D C:\Program Files (x86)\Apple Software Update ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-04-25 18:42 - 2016-11-15 17:56 - 00000000 ____D C:\Users\Kuba\AppData\LocalLow\Mozilla 2017-04-25 18:39 - 2016-10-04 09:02 - 00000000 ____D C:\Users\Kuba\AppData\Local\ClassicShell 2017-04-25 18:32 - 2017-03-20 05:58 - 00848366 _____ C:\WINDOWS\system32\perfh015.dat 2017-04-25 18:32 - 2017-03-20 05:58 - 00169544 _____ C:\WINDOWS\system32\perfc015.dat 2017-04-25 18:26 - 2016-10-04 08:56 - 00000000 __SHD C:\Users\Kuba\IntelGraphicsProfiles 2017-04-25 18:25 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-04-25 16:35 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-04-25 16:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-04-22 22:27 - 2016-10-04 08:47 - 00000000 ____D C:\Users\Kuba\AppData\Local\Packages 2017-04-22 20:11 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-04-22 20:10 - 2016-10-04 09:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2017-04-21 16:56 - 2017-01-16 17:55 - 00000000 ____D C:\WINDOWS\system32\appmgmt 2017-04-21 16:29 - 2016-10-04 09:25 - 00002338 _____ C:\Users\Kuba\Desktop\Google Chrome.lnk 2017-04-20 20:58 - 2016-10-04 09:25 - 00002350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-04-20 20:58 - 2016-10-04 08:53 - 00000000 ____D C:\Program Files\Mozilla Firefox 2017-04-18 18:53 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF 2017-04-18 17:04 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat 2017-04-17 21:23 - 2016-11-11 13:22 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2017-04-17 21:22 - 2016-11-11 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2017-04-17 12:41 - 2016-10-04 09:26 - 00000000 ____D C:\Users\Kuba\AppData\Roaming\AIMP 2017-04-17 12:41 - 2016-10-04 09:26 - 00000000 ____D C:\Program Files (x86)\AIMP 2017-04-15 18:53 - 2016-10-04 09:14 - 00002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2017-04-15 12:02 - 2016-10-04 09:02 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2017-04-14 18:45 - 2016-10-04 08:48 - 00000000 ___RD C:\Users\Kuba\OneDrive 2017-04-13 20:51 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-04-13 20:48 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup 2017-04-13 20:24 - 2016-10-04 09:35 - 00000000 ____D C:\Users\Kuba\AppData\Local\ESET 2017-04-13 20:23 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-04-13 20:18 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-04-13 20:10 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-04-13 20:10 - 2016-10-04 08:47 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-04-13 20:07 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate 2017-04-13 20:04 - 2016-11-15 18:24 - 00001058 __RSH C:\ProgramData\ntuser.pol 2017-04-13 20:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-04-13 20:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache 2017-04-13 20:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration 2017-04-13 20:00 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT 2017-04-13 19:59 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-04-13 19:58 - 2017-03-20 06:00 - 00000000 ____D C:\WINDOWS\HoloShell 2017-04-13 19:57 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media 2017-04-13 19:57 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries 2017-04-13 19:56 - 2017-02-15 00:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP 2017-04-13 19:56 - 2017-01-20 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz 2017-04-13 19:56 - 2016-11-18 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP250 series 2017-04-13 19:56 - 2016-11-05 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2017-04-13 19:56 - 2016-10-05 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016 2017-04-13 19:56 - 2016-10-04 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-04-13 19:56 - 2016-10-04 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotosizer 2017-04-13 19:56 - 2016-10-04 09:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2017-04-13 19:56 - 2016-10-04 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-04-13 19:54 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-04-13 19:54 - 2017-02-08 20:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2017-04-13 19:54 - 2016-11-18 21:04 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information 2017-04-13 19:54 - 2016-11-05 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant 2017-04-13 19:54 - 2016-07-16 13:47 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-04-13 19:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-04-13 19:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help 2017-04-13 19:53 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-04-13 16:28 - 2016-10-04 20:28 - 00000000 ____D C:\Program Files (x86)\Ad Muncher 2017-04-11 20:56 - 2016-10-04 20:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2017-04-11 20:56 - 2016-10-04 20:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2017-04-11 20:45 - 2016-10-04 09:02 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-04-11 20:43 - 2016-10-04 09:02 - 148601744 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-04-08 20:48 - 2017-03-21 23:20 - 00000000 ____D C:\Users\Kuba\Downloads\IteratoryTablicoweWer2 2017-04-08 20:39 - 2016-10-04 11:00 - 00000000 ____D C:\Users\Kuba\bluej 2017-04-03 18:56 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-04-03 18:56 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-03-30 21:12 - 2017-03-07 20:20 - 00000000 ____D C:\Users\Kuba\AppData\LocalLow\Adblock Plus for IE 2017-03-28 18:34 - 2016-10-04 09:48 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2017-03-28 18:34 - 2016-10-04 09:47 - 00000000 ____D C:\Program Files\Common Files\Apple ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-04-13 19:53 - 2017-04-13 19:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Pliki do przeniesienia lub usunięcia: ==================== C:\Users\Public\VOIP.dat Niektóre pliki w TEMP: ==================== 2017-04-25 18:40 - 2017-04-25 18:40 - 13444944 _____ (Reimage) C:\Users\Kuba\AppData\Local\Temp\ReimagePackage.exe 2016-08-16 09:48 - 2016-08-16 09:48 - 0488960 _____ () C:\Users\Kuba\AppData\Local\Temp\sqlite3.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-04-24 20:27 ==================== Koniec FRST.txt ============================