Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 02.01.2018
Uruchomiony przez admin (administrator)  JANUSZ-KOMPUTER (04-01-2018 19:56:45)
Uruchomiony z E:\POB\FRST64
Załadowane profile: admin (Dostępne profile: janusz & monika & admin & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Microsoft) C:\Program Files (x86)\Gigabyte\CloudStation\HomeCloud\GCloud.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\n360.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\System32\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\TimeMgmtDaemon.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\AlarmClock.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\n360.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\SIV\thermald.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-07-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\RunOnce: [SIV] => C:\Program Files (x86)\Gigabyte\SIV\sivro.exe [12072 2016-02-18] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [EasyTune] => C:\Program Files (x86)\Gigabyte\EasyTune\etro.exe [5632 2015-09-14] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
GroupPolicy: Ograniczenia <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\..\Interfaces\{1F3085ED-2BE4-472E-B28A-9894F02C7788}: [NameServer] 178.214.0.16,178.214.0.14

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2017-02-05] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2017-02-05] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine32\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine32\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1486588447033

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2017-02-05] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2017-02-05] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2016-11-07] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @IPC/npmedia3.0.0.1,version=3.0.0.1 -> C:\Program Files\webrec\Torch\3.0.0.1\npmedia3.0.0.1.dll [2013-11-16] ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2016-11-07] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2014-08-12] ()

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\Exts\Chrome.crx <nie znaleziono>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\Exts\Chrome.crx <nie znaleziono>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-30] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2017-11-20] ()
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526888 2017-11-12] (EasyAntiCheat Ltd)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Brak podpisu cyfrowego]
R2 GCloud; C:\Program Files (x86)\GIGABYTE\CloudStation\HomeCloud\GCloud.exe [19264 2014-06-18] (Microsoft)
R2 hasplms; C:\Windows\system32\hasplms.exe [4665168 2015-09-24] (SafeNet Inc.)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62760 2016-06-01] (GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 myPWTNTService.exe; c:\program files (x86)\ConSoft\Reflex pro\interfaces\myPWT\myPWTServer\bin\myPWTNTService.exe [77824 2015-03-04] () [Brak podpisu cyfrowego]
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\N360.exe [326144 2017-11-11] (Symantec Corporation)
S3 Origin Client Service; E:\Program Files (x86)\Origin\OriginClientService.exe [2155328 2017-12-23] (Electronic Arts)
S2 Origin Web Helper Service; E:\Program Files (x86)\Origin\OriginWebHelperService.exe [3025224 2017-12-23] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2017-09-30] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-09-03] ()
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek) [Brak podpisu cyfrowego]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [Brak podpisu cyfrowego]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 ALIWEHCD; C:\Windows\System32\Drivers\mfpec.sys [39552 2007-05-07] (None)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\BASHDefs\20180103.001\BHDrvx64.sys [1872024 2017-10-11] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\160B020.007\ccSetx64.sys [187544 2017-11-11] (Symantec Corporation)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [507984 2018-01-04] (Symantec Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-03-24] () [Brak podpisu cyfrowego]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14216 2011-03-24] () [Brak podpisu cyfrowego]
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [152656 2018-01-04] (Symantec Corporation)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-03-24] () [Brak podpisu cyfrowego]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [8456 2011-03-24] () [Brak podpisu cyfrowego]
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [118160 2016-10-04] (Future Technology Devices International Ltd.)
S3 FTSER2K; C:\Windows\System32\drivers\ftser2k.sys [88752 2016-10-04] ()
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [350552 2015-09-24] (SafeNet Inc.)
R2 hardlock; C:\Windows\SysWOW64\drivers\hardlock.sys [665600 2017-02-02] (Aladdin Knowledge Systems) [Brak podpisu cyfrowego]
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\IPSDefs\20180103.003\IDSvia64.sys [1056920 2017-10-14] (Symantec Corporation)
R2 NPF; C:\Windows\SysWOW64\drivers\npf64.sys [36600 2017-12-07] (Riverbed Technology, Inc.)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13512 2015-12-09] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2016-12-01] () [Brak podpisu cyfrowego]
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\160B020.007\SRTSP64.SYS [812696 2017-11-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\160B020.007\SRTSPX64.SYS [49304 2017-11-11] (Symantec Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R0 SymEFASI; C:\Windows\System32\drivers\N360x64\160B020.007\SYMEFASI64.SYS [1938584 2017-11-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102600 2017-11-17] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\160B020.007\Ironx64.SYS [309984 2017-11-11] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\160B020.007\SYMNETS.SYS [566936 2017-11-11] (Symantec Corporation)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2014-10-31] (VIA Technologies, Inc.)
S3 VUSBSTOR; C:\Windows\System32\Drivers\vusbstor.sys [86064 2013-01-18] (VIA Technologies, Inc.)
S3 WUSBVBus; C:\Windows\System32\DRIVERS\mfpvbus.sys [12416 2006-10-20] (None)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [305664 2014-10-31] (VIA Technologies, Inc.)
U3 aciovz52; C:\Windows\System32\Drivers\aciovz52.sys [0 ] (Microsoft Corporation) <==== UWAGA (zerobajtowy plik/folder)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 MSICDSetup; \??\L:\CDriver64.sys [X]
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20170624.005\NAVENG.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20170624.005\NAVEX15.SYS [X]
S3 NTIOLib_1_0_C; \??\L:\NTIOLib_X64.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S4 nvvhci; system32\DRIVERS\nvvhci.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-04 19:00 - 2018-01-04 19:00 - 000000000 ____D C:\Windows\System32\Tasks\Remediation
2018-01-04 17:35 - 2018-01-04 17:35 - 000000000 ____D C:\Users\admin\AppData\Local\CrashDumps
2018-01-04 17:09 - 2018-01-04 17:09 - 000000000 ____D C:\Users\admin\AppData\LocalLow\Sauropod Studio
2018-01-04 16:33 - 2018-01-04 16:33 - 000000220 _____ C:\Users\janusz\Desktop\DEFCON.url
2018-01-04 13:38 - 2018-01-04 13:38 - 000000222 _____ C:\Users\janusz\Desktop\Just Cause 3.url
2018-01-04 12:46 - 2018-01-04 12:46 - 000007618 _____ C:\Users\admin\AppData\Local\Resmon.ResmonCfg
2018-01-04 12:34 - 2018-01-04 12:34 - 000110848 _____ C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2018-01-04 12:34 - 2018-01-04 12:34 - 000002251 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-01-04 12:34 - 2018-01-04 12:34 - 000002221 _____ C:\Users\admin\Desktop\Google Chrome.lnk
2018-01-04 12:34 - 2018-01-04 12:34 - 000000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2018-01-04 12:31 - 2018-01-04 12:34 - 000000000 ____D C:\Users\admin\AppData\Local\Google
2018-01-04 12:31 - 2018-01-04 12:34 - 000000000 ____D C:\Users\admin
2018-01-04 12:31 - 2018-01-04 12:31 - 000000020 ___SH C:\Users\admin\ntuser.ini
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Ustawienia lokalne
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Szablony
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Moje dokumenty
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Menu Start
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Documents\Moje wideo
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Documents\Moje obrazy
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Documents\Moja muzyka
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\Dane aplikacji
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\AppData\Local\Historia
2018-01-04 12:31 - 2018-01-04 12:31 - 000000000 _SHDL C:\Users\admin\AppData\Local\Dane aplikacji
2018-01-04 11:10 - 2018-01-04 19:56 - 000000000 ____D C:\FRST
2018-01-03 18:46 - 2018-01-03 18:46 - 000000000 _____ C:\Users\janusz\Desktop\IZA.txt
2018-01-03 17:59 - 2013-08-22 08:13 - 000078674 _____ C:\Users\janusz\Desktop\Muzeum Stalowa Wola (kosztorys).ath
2018-01-03 17:58 - 2014-09-09 17:34 - 000110379 _____ C:\Users\janusz\Desktop\muzeum 1.ath
2018-01-03 17:57 - 2018-01-03 17:57 - 000000911 _____ C:\Users\janusz\Desktop\PRZEDMIAR - Museum Stalowa Wola_v2.KST — skrót.lnk
2018-01-03 16:57 - 2018-01-03 16:57 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Pixel Federation
2018-01-03 16:52 - 2013-10-08 14:55 - 000682743 _____ C:\Users\janusz\Desktop\Stalowa Wola -PW-Bud nr 1 SAD ETAP 2.dwg
2018-01-03 16:50 - 2018-01-03 23:20 - 000287217 _____ C:\Users\janusz\Desktop\StW ARCH 2 ETAP.ath
2018-01-03 16:50 - 2018-01-03 16:50 - 000000000 ____D C:\Users\janusz\Desktop\KOSZTORYS
2018-01-03 16:43 - 2018-01-03 22:22 - 000000000 ____D C:\Users\janusz\Desktop\GRY
2018-01-03 14:02 - 2018-01-03 14:02 - 000013530 _____ C:\Users\janusz\Desktop\Everything.ini
2018-01-03 13:53 - 2018-01-03 13:53 - 000000222 _____ C:\Users\janusz\Desktop\Galactic Junk League.url
2018-01-03 02:06 - 2018-01-03 02:06 - 000001642 _____ C:\Users\Public\Desktop\HQ Video Management System Client.lnk
2018-01-03 02:06 - 2018-01-03 02:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HQ Video Management System Station
2018-01-02 23:16 - 2018-01-02 23:16 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ser2pl64_01009.Wdf
2018-01-02 02:33 - 2018-01-02 02:33 - 000000000 ____D C:\Windows\pss
2018-01-02 00:28 - 2018-01-02 00:28 - 000003872 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-01-02 00:28 - 2018-01-02 00:28 - 000002806 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-01-02 00:28 - 2018-01-02 00:28 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-01-02 00:28 - 2018-01-02 00:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-01-02 00:28 - 2018-01-02 00:28 - 000000000 ____D C:\Program Files\CCleaner
2018-01-02 00:00 - 2018-01-02 00:03 - 000000000 ____D C:\MATS
2018-01-01 20:22 - 2018-01-01 20:22 - 000000000 ____D C:\Users\janusz\AppData\Roaming\LOVE
2017-12-31 02:09 - 2017-12-31 02:09 - 000001631 _____ C:\Users\janusz\Desktop\Castle Story.exe — skrót.lnk
2017-12-31 00:43 - 2017-12-31 00:43 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Oroboro games
2017-12-30 21:31 - 2017-12-30 21:31 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\WeirdBeard
2017-12-30 21:24 - 2017-12-30 21:24 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Juicy Beast Studio Ltd_
2017-12-30 21:16 - 2017-12-30 21:18 - 000000000 ____D C:\Users\janusz\AppData\Roaming\ROCKETSROCKETSROCKETS
2017-12-29 02:43 - 2017-12-29 02:43 - 000000192 _____ C:\Users\janusz\Desktop\Run History.csv
2017-12-29 02:19 - 2017-12-29 02:19 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-12-29 02:19 - 2017-12-15 23:47 - 000143960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-12-29 02:19 - 2017-09-14 00:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-12-29 02:19 - 2017-09-14 00:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-12-29 02:19 - 2017-09-14 00:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
2017-12-29 02:19 - 2017-09-14 00:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
2017-12-29 02:08 - 2017-12-16 01:21 - 040237456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 036305200 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 035157488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 029347640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 023266400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 019526512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 019039976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 018208784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 016854840 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-12-29 02:08 - 2017-12-16 01:21 - 013867656 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 013255032 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 011782096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 010883744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 003809072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 003799032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 003347952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 001990128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438871.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 001674736 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438871.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 001100600 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 001031984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000981816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000933168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000616240 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000527288 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000506672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000446400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000407248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000225208 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-12-29 02:08 - 2017-12-16 01:21 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-12-29 02:08 - 2017-12-16 01:21 - 000045496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-12-29 01:21 - 2018-01-04 12:34 - 000003036 _____ C:\Windows\System32\Tasks\MSIAfterburner
2017-12-29 01:17 - 2017-12-16 01:21 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-12-28 20:00 - 2017-12-28 20:00 - 000146014 _____ C:\Users\janusz\Documents\SFGDemoV2.0.rar
2017-12-28 01:30 - 2017-12-28 01:31 - 000000000 ____D C:\Users\janusz\AppData\Roaming\electron-quick-start
2017-12-28 00:48 - 2017-12-28 00:48 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Capital j Media LLC
2017-12-26 18:03 - 2017-12-26 18:03 - 000000000 ____D C:\Users\janusz\AppData\Local\Quadriga Games
2017-12-26 01:23 - 2017-12-29 02:44 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Sauropod Studio
2017-12-24 01:22 - 2017-12-07 19:52 - 000038344 _____ () C:\Windows\SysWOW64\Drivers\InstallNpfApp.exe
2017-12-22 23:55 - 2017-12-22 23:55 - 000000000 ____D C:\Program Files\SecuGen
2017-12-21 02:36 - 2017-12-21 11:27 - 000000000 ____D C:\Users\janusz\AppData\Roaming\PortForward.com
2017-12-21 02:36 - 2017-12-21 02:36 - 000000000 ____D C:\Program Files (x86)\Portforward
2017-12-15 20:58 - 2017-12-15 20:58 - 000000000 ____D C:\Program Files\Rockstar Games
2017-12-15 20:58 - 2017-12-15 20:58 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2017-12-13 13:55 - 2017-11-17 05:23 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-12-13 13:55 - 2017-11-15 02:27 - 000395968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-12-13 13:55 - 2017-11-15 01:36 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-12-13 13:55 - 2017-11-14 04:57 - 025731072 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-12-13 13:55 - 2017-11-14 04:43 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-12-13 13:55 - 2017-11-14 04:43 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-12-13 13:55 - 2017-11-14 04:32 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-12-13 13:55 - 2017-11-14 04:31 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-12-13 13:55 - 2017-11-14 04:31 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-12-13 13:55 - 2017-11-14 04:30 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-12-13 13:55 - 2017-11-14 04:30 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-12-13 13:55 - 2017-11-14 04:30 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-12-13 13:55 - 2017-11-14 04:25 - 005925888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-12-13 13:55 - 2017-11-14 04:24 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-12-13 13:55 - 2017-11-14 04:24 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-12-13 13:55 - 2017-11-14 04:21 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-12-13 13:55 - 2017-11-14 04:20 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-12-13 13:55 - 2017-11-14 04:20 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-12-13 13:55 - 2017-11-14 04:20 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-12-13 13:55 - 2017-11-14 04:20 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-12-13 13:55 - 2017-11-14 04:15 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-12-13 13:55 - 2017-11-14 04:12 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-12-13 13:55 - 2017-11-14 04:06 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-12-13 13:55 - 2017-11-14 04:06 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-12-13 13:55 - 2017-11-14 04:05 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-12-13 13:55 - 2017-11-14 04:03 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-12-13 13:55 - 2017-11-14 04:02 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-12-13 13:55 - 2017-11-14 04:00 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-12-13 13:55 - 2017-11-14 03:59 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-12-13 13:55 - 2017-11-14 03:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-12-13 13:55 - 2017-11-14 03:48 - 015267328 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-12-13 13:55 - 2017-11-14 03:48 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-12-13 13:55 - 2017-11-14 03:48 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-12-13 13:55 - 2017-11-14 03:47 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-12-13 13:55 - 2017-11-14 03:46 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-12-13 13:55 - 2017-11-14 03:39 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-12-13 13:55 - 2017-11-14 03:27 - 001544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-12-13 13:55 - 2017-11-14 03:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-12-13 13:55 - 2017-11-14 02:37 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-12-13 13:55 - 2017-11-14 02:15 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-12-13 13:55 - 2017-11-14 02:15 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-12-13 13:55 - 2017-11-14 02:15 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-12-13 13:55 - 2017-11-14 02:10 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-12-13 13:55 - 2017-11-14 01:32 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-12-13 13:55 - 2017-11-14 01:31 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-12-13 13:55 - 2017-11-07 21:56 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-12-13 13:55 - 2017-11-07 21:46 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-12-13 13:55 - 2017-11-07 21:46 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-12-13 13:55 - 2017-11-07 21:46 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-12-13 13:55 - 2017-11-07 21:44 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-12-13 13:55 - 2017-11-07 21:41 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-12-13 13:55 - 2017-11-07 21:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-12-13 13:55 - 2017-11-07 21:40 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-12-13 13:55 - 2017-11-07 21:39 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-12-13 13:55 - 2017-11-07 21:38 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-12-13 13:55 - 2017-11-07 21:38 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-12-13 13:55 - 2017-11-07 21:29 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-12-13 13:55 - 2017-11-07 21:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-12-13 13:55 - 2017-11-07 21:28 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-12-13 13:55 - 2017-11-07 21:27 - 004509696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-12-13 13:55 - 2017-11-07 21:26 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-12-13 13:55 - 2017-11-07 21:24 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-12-13 13:55 - 2017-11-07 21:19 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-12-13 13:55 - 2017-11-07 21:18 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-12-13 13:55 - 2017-11-07 21:17 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-12-13 13:55 - 2017-11-07 21:17 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-12-13 13:55 - 2017-11-07 21:04 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-12-13 13:55 - 2017-11-07 21:01 - 001313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-12-13 13:55 - 2017-11-07 20:58 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-12-13 13:55 - 2017-11-07 17:31 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-12-13 13:55 - 2017-11-07 17:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-12-13 13:55 - 2017-11-04 16:31 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2017-12-13 13:55 - 2017-11-04 16:31 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2017-12-13 13:55 - 2017-11-04 16:10 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2017-12-13 13:55 - 2017-11-04 16:10 - 000142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2017-12-13 13:55 - 2017-11-02 17:55 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-12-13 13:55 - 2017-11-02 17:55 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\rtm.dll
2017-12-13 13:55 - 2017-11-02 17:55 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2017-12-13 13:55 - 2017-11-02 17:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\iprtprio.dll
2017-12-13 13:55 - 2017-11-02 16:11 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-12-13 13:55 - 2017-11-02 16:11 - 000115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtm.dll
2017-12-13 13:55 - 2017-11-02 16:11 - 000075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
2017-12-13 13:55 - 2017-11-02 15:56 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtprio.dll
2017-12-13 13:55 - 2017-10-17 00:04 - 001001984 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2017-12-13 13:55 - 2017-10-16 23:46 - 000953344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2017-12-13 13:55 - 2017-10-12 01:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-12-09 23:40 - 2017-12-29 02:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-12-08 12:13 - 2017-12-08 12:13 - 000000000 ____D C:\Windows\E10DB5DAE57640EAA7FC1CB2A7B283A6.TMP

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-04 19:54 - 2017-03-13 18:28 - 000026192 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2018-01-04 19:54 - 2016-11-07 09:42 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-04 19:53 - 2016-11-16 10:19 - 000000000 ____D C:\Users\janusz\AppData\LocalLow\Mozilla
2018-01-04 18:43 - 2009-07-14 05:45 - 000014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-04 18:43 - 2009-07-14 05:45 - 000014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-04 18:37 - 2017-06-19 21:31 - 000000000 ____D C:\Users\janusz\.umplayer
2018-01-04 18:35 - 2017-08-21 23:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2018-01-04 18:35 - 2016-11-07 11:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-04 18:35 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-04 17:43 - 2009-07-14 18:55 - 000775098 _____ C:\Windows\system32\perfh015.dat
2018-01-04 17:43 - 2009-07-14 18:55 - 000167598 _____ C:\Windows\system32\perfc015.dat
2018-01-04 17:43 - 2009-07-14 06:13 - 001757306 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-04 17:43 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-01-04 16:33 - 2016-12-05 21:52 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-01-04 12:24 - 2017-02-22 18:19 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2018-01-04 11:06 - 2017-03-20 00:56 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2018-01-04 01:42 - 2017-06-19 23:42 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Media Player Classic
2018-01-04 01:41 - 2016-11-07 15:15 - 000000000 ____D C:\Users\janusz\AppData\Roaming\TS3Client
2018-01-03 21:17 - 2017-06-14 09:11 - 000000000 ____D C:\Users\janusz\AppData\Local\NPE
2018-01-03 21:04 - 2016-11-07 15:30 - 000000000 ____D C:\Users\janusz\AppData\Local\CrashDumps
2018-01-03 20:59 - 2016-11-07 17:02 - 000007611 _____ C:\Users\janusz\AppData\Local\Resmon.ResmonCfg
2018-01-03 20:57 - 2016-11-07 15:15 - 000000000 ____D C:\Users\janusz\AppData\Roaming\GG
2018-01-03 13:28 - 2016-12-08 20:35 - 000215128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2018-01-03 13:28 - 2016-11-07 12:18 - 000215128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2018-01-03 13:28 - 2016-11-07 12:03 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Origin
2018-01-03 13:26 - 2016-11-07 11:56 - 000000000 ____D C:\ProgramData\Origin
2018-01-03 02:03 - 2014-01-01 10:46 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-01-02 23:09 - 2016-11-09 18:31 - 000000000 ____D C:\Users\janusz\AppData\Local\Ubisoft Game Launcher
2018-01-02 21:36 - 2014-01-01 16:30 - 000000000 ____D C:\Users\janusz\AppData\Local\ElevatedDiagnostics
2018-01-02 21:36 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-01-02 00:33 - 2017-04-17 23:08 - 000000000 ____D C:\Users\janusz\AppData\Roaming\uTorrent
2018-01-02 00:33 - 2016-11-10 08:26 - 000000000 ____D C:\Users\janusz\AppData\Roaming\XnView
2018-01-02 00:32 - 2014-01-01 12:09 - 000000000 ____D C:\Windows\Panther
2018-01-02 00:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\ModemLogs
2018-01-02 00:05 - 2017-09-20 21:41 - 000000000 ____D C:\temp
2018-01-01 22:43 - 2016-11-28 21:39 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari800Win PLus
2018-01-01 20:35 - 2017-10-09 01:58 - 000045286 _____ C:\Windows\SysWOW64\PCPELog.txt
2017-12-29 22:13 - 2017-09-07 00:10 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-29 02:27 - 2016-11-07 09:42 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-12-29 02:27 - 2016-11-07 09:42 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-12-29 02:27 - 2014-01-01 16:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-29 02:15 - 2016-11-15 22:38 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-12-27 01:04 - 2017-08-26 13:53 - 000000000 ____D C:\Users\janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossout
2017-12-25 18:44 - 2016-11-07 12:18 - 000226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2017-12-23 02:29 - 2017-02-14 00:21 - 000000000 ____D C:\Users\DefaultAppPool
2017-12-21 02:36 - 2016-11-07 10:04 - 000000000 ____D C:\Users\janusz\AppData\Local\Downloaded Installations
2017-12-16 01:21 - 2017-11-09 05:01 - 001615472 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-12-16 01:21 - 2017-11-09 04:33 - 022257256 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-12-16 01:21 - 2017-11-09 04:33 - 000492232 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-12-16 01:21 - 2017-11-09 04:32 - 015028168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-12-16 01:21 - 2017-11-09 04:32 - 004285520 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-12-16 01:21 - 2016-11-07 09:41 - 000046182 _____ C:\Windows\system32\nvinfo.pb
2017-12-15 23:34 - 2016-11-07 09:42 - 005964688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 002589168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 001767408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 000608056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 000450544 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 000123704 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-12-15 23:34 - 2016-11-07 09:42 - 000082928 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-12-15 21:11 - 2016-11-07 09:48 - 000000000 ____D C:\Users\janusz\Documents\Rockstar Games
2017-12-15 18:00 - 2016-11-07 15:14 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-12-14 19:17 - 2016-11-07 09:42 - 007917671 _____ C:\Windows\system32\nvcoproc.bin
2017-12-14 04:05 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-12-14 03:16 - 2009-07-14 05:45 - 000415008 _____ C:\Windows\system32\FNTCACHE.DAT
2017-12-14 03:15 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\Setup
2017-12-14 03:15 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\Setup
2017-12-14 02:46 - 2016-11-07 10:35 - 000000000 ____D C:\Windows\system32\MRT
2017-12-14 02:34 - 2017-10-12 00:02 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-12-14 02:34 - 2016-11-07 10:35 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-12-13 02:00 - 2016-11-07 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-12-13 01:07 - 2017-01-31 21:59 - 000004566 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-12-13 01:07 - 2017-01-15 13:58 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-12-13 01:07 - 2016-12-14 00:52 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-13 01:07 - 2016-12-14 00:52 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-13 01:07 - 2016-12-14 00:52 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-13 01:07 - 2016-12-14 00:52 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-08 12:12 - 2016-11-07 11:40 - 000000000 ____D C:\Users\janusz\Documents\My Games
2017-12-07 19:52 - 2017-08-18 16:47 - 000036600 _____ (Riverbed Technology, Inc.) C:\Windows\SysWOW64\Drivers\npf64.sys
2017-12-07 19:52 - 2017-08-18 16:47 - 000036600 _____ (Riverbed Technology, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

==================== Pliki w katalogu głównym wybranych folderów =======

2017-10-08 11:53 - 2017-10-08 11:53 - 000021368 _____ (Schneider Electric) C:\Users\janusz\en_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000021368 _____ (Schneider Electric) C:\Users\janusz\es_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000021880 _____ (Schneider Electric) C:\Users\janusz\fr_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000021880 _____ (Schneider Electric) C:\Users\janusz\grm_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000021368 _____ (Schneider Electric) C:\Users\janusz\it_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000020344 _____ (Schneider Electric) C:\Users\janusz\jp_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 001079808 _____ (Microsoft Corporation) C:\Users\janusz\mfc80u.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000626688 _____ (Microsoft Corporation) C:\Users\janusz\msvcr80.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 013923704 _____ (Schneider Electric) C:\Users\janusz\PCPE Setup.exe
2017-10-08 11:53 - 2017-10-08 11:53 - 000021368 _____ (Schneider Electric) C:\Users\janusz\pt_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000018808 _____ () C:\Users\janusz\ResourceReader.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000020856 _____ (Schneider Electric) C:\Users\janusz\ru_res.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000019832 _____ (Schneider Electric) C:\Users\janusz\zh_res.dll
2018-01-04 12:46 - 2018-01-04 12:46 - 000007618 _____ () C:\Users\admin\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
C:\Windows\system32\drivers\sptd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= UWAGA

LastRegBack: 2017-12-30 05:11

==================== Koniec  FRST.txt ============================