Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-09-2017 02
Uruchomiony przez John (administrator)  STITCH (14-09-2017 11:42:32)
Uruchomiony z C:\Users\John\Downloads
Załadowane profile: John (Dostępne profile: John)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Flux Software LLC) C:\Users\John\AppData\Local\FluxSoftware\Flux\flux.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
() C:\Windows\System32\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9181696 2016-12-09] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\Run: [f.lux] => C:\Users\John\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd)
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\MountPoints2: {16a07b7d-62dd-11e7-818c-6c626d3b75cb} - I:\LGAutoRun.exe
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\MountPoints2: {18631df1-3736-11e7-956b-6c626d3b75cb} - G:\setup.exe
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\MountPoints2: {380acada-671e-11e7-9493-6c626d3b75cb} - I:\Setup.exe
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\MountPoints2: {380acade-671e-11e7-9493-6c626d3b75cb} - I:\Setup.exe
HKU\S-1-5-21-244014907-1456747685-330761947-1000\...\MountPoints2: {48d3a255-2cc8-11e7-9fab-806e6f6e6963} - E:\BlueBirds.exe
HKU\S-1-5-21-244014907-1456747685-330761947-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.60 62.179.1.61
Tcpip\..\Interfaces\{754C5748-8ACD-449A-B083-13AE95CB7F9A}: [DhcpNameServer] 62.179.1.60 62.179.1.61
Tcpip\..\Interfaces\{F88D1030-58F1-4A71-B47F-BC1F4BEE91C6}: [DhcpNameServer] 62.179.1.60 62.179.1.61

Internet Explorer:
==================
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-10] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 1mpzyrmj.default
FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default [2017-09-14]
FF Extension: (Google™ Translator) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2017-09-06]
FF Extension: (DuckDuckGo Plus) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2017-09-09]
FF Extension: (SCDL SoundCloud Downloader) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\scdl@mrvv.net.xpi [2017-09-02]
FF Extension: (Google Translator for Firefox) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\translator@zoli.bod.xpi [2017-09-06]
FF Extension: (Video DownloadHelper) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-10]
FF Extension: (Adblock Plus) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-08]
FF Extension: (Photon onboarding) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\1mpzyrmj.default\features\{66ae95b0-83a5-4f04-8bb9-3d075ee19b8b}\onboarding@mozilla.org.xpi [2017-09-13]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-09-11] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-09-11] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-08-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-08-22] (NVIDIA Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-08-22] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2098528 2017-09-10] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2977640 2017-09-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2017-09-10] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-07-16] ()
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek) [Brak podpisu cyfrowego]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus64.sys [20992 2015-01-21] (LG Electronics Inc.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [30720 2015-01-26] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [37376 2015-01-26] (LG Electronics Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-05-10] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-05-10] (Disc Soft Ltd)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [24056 2016-01-14] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [21496 2016-01-14] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2016-07-11] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2016-07-11] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57976 2017-08-22] (NVIDIA Corporation)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2016-06-15] (SplitmediaLabs Limited)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-09-14 11:42 - 2017-09-14 11:42 - 000012055 _____ C:\Users\John\Downloads\FRST.txt
2017-09-14 11:41 - 2017-09-14 11:42 - 000000000 ____D C:\FRST
2017-09-14 11:40 - 2017-09-14 11:40 - 002398208 _____ (Farbar) C:\Users\John\Downloads\FRST64.exe
2017-09-14 00:36 - 2017-09-14 00:37 - 000000000 ____D C:\Users\John\Desktop\Brazil.1985.DC.1080p.BluRay.H264.AAC-RARBG
2017-09-12 10:38 - 2017-09-12 10:42 - 000000000 ____D C:\Users\John\Desktop\Rekawiczki
2017-09-12 08:48 - 2017-09-12 10:08 - 000000000 ____D C:\Users\John\Desktop\Boj
2017-09-12 08:48 - 2017-09-12 09:37 - 000000000 ____D C:\Users\John\Desktop\Le
2017-09-11 08:52 - 2017-09-11 08:52 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-11 08:52 - 2017-09-11 08:52 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-10 21:14 - 2017-09-10 21:14 - 000076152 _____ C:\Windows\system32\PnkBstrA.exe
2017-09-07 17:42 - 2017-09-07 17:55 - 000000000 ____D C:\Users\John\Desktop\FOX RANGER
2017-09-02 13:04 - 2017-09-02 13:04 - 054481648 _____ C:\Users\John\Downloads\torbrowser-install-7.0.4_pl.exe
2017-08-31 22:56 - 2017-08-31 22:56 - 000000000 ____D C:\Users\John\AppData\Local\ExampleGame
2017-08-31 22:56 - 2017-08-31 22:56 - 000000000 ____D C:\ProgramData\Steam
2017-08-31 22:51 - 2017-08-31 22:51 - 000000819 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Redeemer.lnk
2017-08-30 19:27 - 2017-09-12 23:25 - 000000000 ____D C:\Users\John\AppData\Roaming\WhatsApp
2017-08-30 19:27 - 2017-08-30 19:27 - 000002122 _____ C:\Users\John\Desktop\WhatsApp.lnk
2017-08-30 19:27 - 2017-08-30 19:27 - 000000000 ____D C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2017-08-30 19:26 - 2017-08-30 19:27 - 000000000 ____D C:\Users\John\AppData\Local\WhatsApp
2017-08-30 19:26 - 2017-08-30 19:27 - 000000000 ____D C:\Users\John\AppData\Local\SquirrelTemp
2017-08-30 19:26 - 2017-08-30 19:26 - 084144400 _____ (WhatsApp) C:\Users\John\Downloads\WhatsAppSetup.exe
2017-08-30 15:21 - 2017-08-30 15:21 - 000040407 _____ C:\Users\John\Downloads\POTWIERDZENIE_TRANSAKCJI_20170830_152054.pdf
2017-08-27 20:12 - 2017-08-27 20:12 - 001838673 _____ (pendrivelinux.com) C:\Users\John\Downloads\YUMI-2.0.4.9.exe
2017-08-27 20:11 - 2017-08-27 20:12 - 279969792 _____ C:\Users\John\Downloads\gparted-live-0.29.0-1-amd64.iso
2017-08-27 20:10 - 2017-08-27 20:10 - 278459095 _____ C:\Users\John\Downloads\gparted-live-0.29.0-1-amd64.zip
2017-08-27 19:48 - 2017-08-27 19:48 - 000013833 _____ C:\Users\John\Downloads\packages-0.29.0-1-amd64.txt
2017-08-26 21:35 - 2017-08-26 21:35 - 000000000 ____D C:\Users\John\AppData\Local\HellbladeGame
2017-08-26 21:35 - 2017-08-26 21:35 - 000000000 ____D C:\Users\John\ansel
2017-08-26 13:38 - 2017-08-26 13:38 - 000000421 _____ C:\Users\John\Downloads\UPDATE_pass.zip
2017-08-26 13:12 - 2017-08-26 13:12 - 014557695 _____ C:\Users\John\Downloads\H3+B_UPDATE_3.11+WIFI.zip
2017-08-26 11:42 - 2017-08-26 11:43 - 045173228 _____ C:\Users\John\Downloads\UPDATE.zip
2017-08-25 16:28 - 2017-08-25 16:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK 11n USB Wireless LAN Utility
2017-08-25 16:28 - 2017-08-25 16:28 - 000000000 ____D C:\Program Files (x86)\Cisco
2017-08-25 16:28 - 2009-04-02 04:27 - 000188416 ____R (Realtek Semiconductor Corp. ) C:\Windows\system32\RTLExtUI.dll
2017-08-25 16:28 - 2009-04-02 04:27 - 000188416 ____R (Realtek Semiconductor Corp. ) C:\Windows\RTLExtUI.dll
2017-08-25 16:28 - 2009-03-31 08:31 - 000380928 ____R (Realtek) C:\Windows\system32\RtlUI2.exe
2017-08-25 16:28 - 2009-03-31 08:31 - 000380928 ____R (Realtek) C:\Windows\RtlUI2.exe
2017-08-25 16:28 - 2009-02-05 02:49 - 000451072 _____ C:\Windows\SysWOW64\ISSRemoveSP.exe
2017-08-25 16:28 - 2008-07-01 06:31 - 000614400 ____R (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2017-08-25 16:28 - 2008-07-01 06:31 - 000614400 ____R (Realtek Semiconductor Corp. ) C:\Windows\Rtlihvs.dll
2017-08-25 15:07 - 2017-08-25 15:07 - 000000000 ____D C:\Users\John\AppData\Local\Intel
2017-08-25 14:33 - 2017-09-04 18:16 - 000000000 ____D C:\Users\John\AppData\Roaming\obs-studio
2017-08-25 14:33 - 2017-08-25 14:33 - 000000000 ____D C:\ProgramData\Intel Telemetry
2017-08-25 14:32 - 2017-08-25 14:32 - 000000000 ____D C:\Program Files\Common Files\Intel
2017-08-25 14:30 - 2017-08-25 14:32 - 000000000 ____D C:\ProgramData\Intel
2017-08-25 14:30 - 2017-08-25 14:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2017-08-25 14:29 - 2017-08-25 14:30 - 000000000 ____D C:\Program Files (x86)\obs-studio
2017-08-25 14:27 - 2017-08-25 14:28 - 101899104 _____ (obsproject.com) C:\Users\John\Downloads\OBS-Studio-20.0.1-Full-Installer.exe
2017-08-25 14:27 - 2017-08-25 14:27 - 000000000 ____D C:\Windows\system32\appmgmt
2017-08-25 14:25 - 2017-08-28 08:04 - 000000000 ____D C:\Users\John\AppData\Roaming\NVIDIA
2017-08-25 14:18 - 2017-08-25 14:18 - 000000000 ____D C:\Users\John\AppData\Local\SplitMediaLabs
2017-08-25 14:18 - 2017-08-25 14:18 - 000000000 ____D C:\ProgramData\SplitMediaLabs
2017-08-25 14:17 - 2017-08-25 14:17 - 119592920 _____ (SplitmediaLabs) C:\Users\John\Downloads\XSplit_Broadcaster_3.0.1705.3124-pku47.exe
2017-08-25 14:17 - 2017-08-25 14:17 - 000000000 ____D C:\Users\John\AppData\Roaming\SplitmediaLabs
2017-08-25 10:36 - 2017-08-22 02:40 - 000512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-08-25 10:36 - 2017-08-22 02:40 - 000418936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 006463424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 002479224 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 001762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 000549312 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 000392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 000082040 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-08-25 10:36 - 2017-08-22 01:10 - 000069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-08-25 10:36 - 2017-08-22 00:54 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2017-08-25 10:36 - 2017-08-22 00:33 - 000135800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-08-25 10:36 - 2017-08-19 09:10 - 008142301 _____ C:\Windows\system32\nvcoproc.bin
2017-08-25 10:36 - 2017-06-15 21:32 - 000541984 _____ C:\Windows\system32\vulkan-1.dll
2017-08-25 10:36 - 2017-06-15 21:32 - 000525088 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-08-25 10:36 - 2017-06-15 21:32 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe
2017-08-25 10:36 - 2017-06-15 21:32 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-08-25 10:34 - 2017-08-22 02:40 - 040240248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 035881592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 035314112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 028985976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 023132184 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 021405440 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 018849272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 018704744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 017807096 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 015409088 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-08-25 10:34 - 2017-08-22 02:40 - 014687256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 013782904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 012225984 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 011692528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 010072768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 004188872 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 003802048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 003692216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 003354560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438541.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 001615448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 001597888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438541.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 001067456 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 001005176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000972920 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000690320 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000609728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000512672 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000491720 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000429920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000218712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-08-25 10:34 - 2017-08-22 02:40 - 000171384 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000154208 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000149040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000057976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-08-25 10:34 - 2017-08-22 02:40 - 000045976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-08-25 10:34 - 2017-08-22 02:40 - 000044190 _____ C:\Windows\system32\nvinfo.pb
2017-08-25 10:34 - 2017-08-22 02:40 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-08-25 10:34 - 2017-08-22 02:40 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2017-08-25 09:27 - 2017-08-25 09:27 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-08-20 00:17 - 2017-08-20 00:17 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.lnk

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-09-14 09:45 - 2009-07-14 06:45 - 000021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-14 09:45 - 2009-07-14 06:45 - 000021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-14 09:43 - 2011-04-12 15:21 - 000739694 _____ C:\Windows\system32\perfh015.dat
2017-09-14 09:43 - 2011-04-12 15:21 - 000155268 _____ C:\Windows\system32\perfc015.dat
2017-09-14 09:43 - 2009-07-14 07:13 - 001668226 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-14 09:43 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-09-14 09:36 - 2017-04-29 12:45 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-14 09:36 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-14 02:00 - 2017-04-30 16:20 - 000000000 ____D C:\Users\John\AppData\Local\Adobe
2017-09-14 00:46 - 2017-04-30 09:59 - 000000000 ____D C:\Users\John\AppData\Roaming\foobar2000
2017-09-14 00:36 - 2017-04-29 20:33 - 000000000 ____D C:\Users\John\AppData\Roaming\uTorrent
2017-09-12 10:43 - 2017-05-13 13:30 - 000001496 _____ C:\Users\John\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2017-09-12 08:47 - 2017-04-29 15:11 - 000001748 _____ C:\Users\John\Desktop\MPC-HC x64.lnk
2017-09-11 08:52 - 2017-04-30 16:21 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-11 08:52 - 2017-04-29 20:49 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-10 21:14 - 2017-07-16 11:34 - 000226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-09-10 21:05 - 2017-07-16 11:34 - 000214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2017-09-10 21:01 - 2017-05-08 22:55 - 000000000 ____D C:\Users\John\AppData\Roaming\Origin
2017-09-10 21:00 - 2017-05-08 22:55 - 000000000 ____D C:\Program Files (x86)\Origin
2017-09-10 21:00 - 2017-05-08 22:54 - 000000000 ____D C:\ProgramData\Origin
2017-09-07 21:55 - 2017-04-30 21:40 - 000000000 ____D C:\Users\John\AppData\Local\CrashDumps
2017-09-07 11:30 - 2017-04-29 12:32 - 000000000 ____D C:\Users\John\AppData\LocalLow\Mozilla
2017-09-05 14:34 - 2017-06-25 12:32 - 000000000 ____D C:\!_EXPORT
2017-09-05 13:51 - 2017-06-22 00:23 - 000000000 ____D C:\ProgramData\boost_interprocess
2017-09-04 12:59 - 2017-04-30 16:34 - 000000000 ____D C:\Users\John\dwhelper
2017-08-31 22:56 - 2017-05-12 19:29 - 000000000 ____D C:\Users\John\AppData\Local\UnrealEngine
2017-08-27 07:44 - 2017-05-21 02:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-27 07:44 - 2017-04-29 12:32 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-26 21:35 - 2017-04-29 12:44 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-26 21:35 - 2017-04-29 12:11 - 000000000 ____D C:\Users\John
2017-08-26 12:31 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2017-08-26 10:08 - 2017-04-29 13:08 - 000000000 ____D C:\Users\John\AppData\Local\Ubisoft Game Launcher
2017-08-25 16:28 - 2017-04-29 12:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-25 16:28 - 2017-04-29 12:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-25 14:32 - 2017-04-29 12:33 - 000000000 ____D C:\Program Files (x86)\Intel
2017-08-25 12:52 - 2017-04-29 12:44 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-25 10:37 - 2017-04-29 12:45 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-25 10:37 - 2017-04-29 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-08-25 10:37 - 2017-04-29 12:42 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-25 10:36 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\Help
2017-08-25 09:15 - 2017-07-09 14:55 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 09:15 - 2017-04-29 12:45 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-24 09:17 - 2017-08-06 11:07 - 000000000 ____D C:\Users\John\Documents\ProfileCache
2017-08-24 09:11 - 2017-08-06 11:07 - 000000000 ____D C:\Users\John\Documents\The Crew
2017-08-20 00:17 - 2017-05-13 13:02 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-08-20 00:17 - 2017-05-13 13:01 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-08-20 00:17 - 2017-05-13 13:01 - 000000000 ____D C:\Program Files\Adobe
2017-08-20 00:17 - 2017-04-29 20:49 - 000000000 ____D C:\Users\John\AppData\Roaming\Adobe
2017-08-20 00:15 - 2017-06-21 23:39 - 000001530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2017-08-18 06:37 - 2017-04-29 12:45 - 001923008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-08-18 06:37 - 2017-04-29 12:45 - 001755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-08-18 06:37 - 2017-04-29 12:45 - 001505728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-08-18 06:37 - 2017-04-29 12:45 - 001317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-08-18 06:37 - 2017-04-29 12:45 - 000121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-08-18 06:36 - 2017-07-09 14:55 - 000179136 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-08-18 06:36 - 2017-07-09 14:55 - 000146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-08-17 18:26 - 2017-04-29 12:45 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat

==================== Pliki w katalogu głównym wybranych folderów =======

2017-05-13 13:30 - 2017-09-12 10:43 - 000001496 _____ () C:\Users\John\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs

Niektóre pliki w TEMP:
====================
2017-04-29 12:45 - 2017-04-20 02:18 - 000754352 _____ (NVIDIA Corporation) C:\Users\John\AppData\Local\Temp\nvSCPAPI.dll
2017-07-09 15:20 - 2017-08-22 00:33 - 000368760 _____ (NVIDIA Corporation) C:\Users\John\AppData\Local\Temp\nvStInst.exe
2011-11-03 16:13 - 2011-11-03 16:13 - 001786688 _____ () C:\Users\John\AppData\Local\Temp\sonarinst.exe
2014-09-12 01:44 - 2014-09-12 01:44 - 004216840 _____ (Microsoft Corporation) C:\Users\John\AppData\Local\Temp\vcredist9_x86.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-09-10 19:03

==================== Koniec  FRST.txt ============================