Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-10-2017
Uruchomiony przez Rafał (administrator)  RAFAŁ (16-10-2017 13:07:29)
Uruchomiony z C:\Users\Rafał\Downloads
Załadowane profile: Rafał (Dostępne profile: Rafał)
Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
() C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
() C:\WINDOWS\Temp\gB23B.tmp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\MSOSYNC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510232 2014-01-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1374936 2014-01-14] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe [285272 2013-12-31] (Waves Audio Ltd.)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3777696 2014-01-16] (Dell Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2857128 2015-01-09] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-07-22] (Malwarebytes)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [RAFAŁ] => C:\Windows\TEMP\g951D.tmp.exe <==== UWAGA
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [133760 2014-01-08] (Atheros Communications)
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== UWAGA
HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== UWAGA
HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== UWAGA
HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== UWAGA
HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== UWAGA
HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== UWAGA
HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== UWAGA
HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== UWAGA
HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== UWAGA
HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== UWAGA
HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== UWAGA
HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== UWAGA
HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== UWAGA
HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== UWAGA
HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== UWAGA
HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== UWAGA
HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== UWAGA
HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== UWAGA
HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== UWAGA
HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== UWAGA
HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== UWAGA
HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== UWAGA
HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== UWAGA
HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== UWAGA
HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [969104 2017-09-16] (BitTorrent, Inc.)
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4836032 2017-08-14] (Disc Soft Ltd)
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\MountPoints2: {21d81ba5-840b-11e7-82b0-4cbb58361d73} - "F:\setup.exe" 
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\MountPoints2: {355faee4-ee3b-11e6-826e-4cbb58361d73} - "G:\setup.exe" 
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\MountPoints2: {ea38bb7e-919f-11e6-825b-4cbb58361d73} - "F:\LG_PC_Programs.exe" 
GroupPolicy: Ograniczenia - Chrome <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

ProxyServer: [S-1-5-21-886091981-26357939-1909133584-1001] => http=127.0.0.1:8888
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2
Tcpip\..\Interfaces\{2413F13E-298B-4062-80DA-DA0756723F0E}: [DhcpNameServer] 217.173.193.3 217.173.193.11
Tcpip\..\Interfaces\{E4774FAC-E21A-4414-B949-130359FF5A3A}: [DhcpNameServer] 31.11.202.254 37.8.214.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131262298137860110&GUID=402BB79A-3976-478F-8A9C-3D9A94C52C29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131262298137861752&GUID=402BB79A-3976-478F-8A9C-3D9A94C52C29
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: sjo0t5o2.default
FF DefaultProfile: j0fc1ru1.default
FF ProfilePath: C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\sjo0t5o2.default [2017-10-15]
FF Extension: (uBlock Origin) - C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\sjo0t5o2.default\Extensions\uBlock0@raymondhill.net.xpi [2017-06-12]
FF ProfilePath: C:\Users\Rafał\AppData\Roaming\Firefox\Firefox\Profiles\j0fc1ru1.default [2016-12-09] <==== UWAGA
FF Extension: (English (US) Language Pack) - C:\Users\Rafał\AppData\Roaming\Firefox\Firefox\Profiles\j0fc1ru1.default\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2016-12-07] [Brak podpisu cyfrowego]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-07-31] (Microsoft Corporation)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://www.youtube.com/
CHR StartupUrls: Profile 1 -> "www.wp.pl/?src01=dp220140820","hxxp://isearch.omiga-plus.com/?type=hp&ts=1421261813&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9CDA07010","hxxp://isearch.omiga-plus.com/?type=hppp&ts=1421261889&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9CDA07010"
CHR NewTab: Profile 1 ->  Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default [2017-01-30]
CHR Extension: (Tłumacz Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-12-09]
CHR Extension: (Prezentacje Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-09]
CHR Extension: (Dokumenty Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-09]
CHR Extension: (Dysk Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-09]
CHR Extension: (Turn Off the Lights) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2017-01-29]
CHR Extension: (YouTube) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-09]
CHR Extension: (uBlock Origin) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-12-19]
CHR Extension: (Arkusze Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-09]
CHR Extension: (Sky and Forest [FVD]) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\kabingleedfgfnnkebeaciehlcjjlkka [2016-12-09]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-01-29]
CHR Extension: (Konwerter Wideo) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2016-12-09]
CHR Extension: (Pocket) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2017-01-03]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (Gmail) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-09]
CHR Extension: (Chrome Media Router) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-09]
CHR Profile: C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-10-16]
CHR Extension: (Tłumacz Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-01-30]
CHR Extension: (Dokumenty) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Dysk Google) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-30]
CHR Extension: (YouTube) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-30]
CHR Extension: (uBlock Origin) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-10-14]
CHR Extension: (Stylish - Custom themes for any website) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2017-09-19]
CHR Extension: (Alloy) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fljipcgeenffdcglannkpppedokbpgjl [2017-09-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-30]
CHR Extension: (Click&Clean) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-10-03]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Ghostery) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-24]
CHR Extension: (Gmail) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-30]
CHR Extension: (Chrome Media Router) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Profile: C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-30]
HKU\S-1-5-21-886091981-26357939-1909133584-1001\...\StartMenuInternet\ChromeHTML: -> C:\Program Files (x86)\Standoor\Application\chrome.exe <==== UWAGA

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [318592 2014-01-08] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2017-04-11] (Dell Inc.)
S2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2017-04-11] (Dell Inc.)
S3 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [278568 2014-10-31] (Aviata, Inc.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-08-14] (Disc Soft Ltd)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
S2 KMSEmulator; C:\ProgramData\KMSAuto\bin\KMSSS.exe [301056 2015-07-24] (MDL Forum, mod by Ratiborus) [Brak podpisu cyfrowego]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-07-22] (Malwarebytes) [Brak podpisu cyfrowego]
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-18] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-09] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1921768 2014-07-02] (SoftThinks SAS)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [32728 2017-04-25] (Dell Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-04-12] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-13] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-08] (Qualcomm Atheros)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [32960 2017-04-11] (Dell Inc.)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [32568 2017-04-11] (Dell Computer Corporation)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-11-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-11-21] (Disc Soft Ltd)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-10-14] (Malwarebytes)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 ptun0901; C:\Windows\system32\DRIVERS\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11973 2016-11-05] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Brak podpisu cyfrowego]
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42664 2015-01-09] (Synaptics Incorporated)
S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2016-11-17] () [Brak podpisu cyfrowego]
R3 VCSVADHWSer; C:\Windows\system32\DRIVERS\vcsvad.sys [29320 2015-10-01] (AVSOFT Corp.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-04-12] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-04-12] (Microsoft Corporation)
S3 AndnetBus; \SystemRoot\System32\drivers\lgandnetbus64.sys [X]
S3 AndNetDiag; \SystemRoot\system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; \SystemRoot\system32\DRIVERS\lgandnetmodem64.sys [X]
U0 aswVmm; Brak ImagePath
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S2 uxstyle; \??\C:\Windows\system32\Drivers\elytsxu.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-10-16 13:08 - 2017-10-16 13:08 - 000602112 _____ (OldTimer Tools) C:\Users\Rafał\Downloads\OTL.exe
2017-10-16 13:07 - 2017-10-16 13:07 - 000030058 _____ C:\Users\Rafał\Downloads\FRST.txt
2017-10-16 13:06 - 2017-10-16 13:07 - 000000000 ____D C:\FRST
2017-10-16 13:06 - 2017-10-16 13:06 - 002401792 _____ (Farbar) C:\Users\Rafał\Downloads\FRST64.exe
2017-10-16 13:01 - 2017-10-16 13:01 - 000448512 _____ (OldTimer Tools) C:\Users\Rafał\Downloads\TFC.exe
2017-10-16 12:57 - 2017-10-16 12:57 - 008250832 _____ (Malwarebytes) C:\Users\Rafał\Downloads\AdwCleaner.exe
2017-10-16 12:56 - 2017-10-16 12:56 - 006654960 _____ (AVAST Software) C:\Users\Rafał\Downloads\avast_free_antivirus_setup_online.exe
2017-10-16 12:55 - 2017-10-16 12:55 - 068408664 _____ (Malwarebytes ) C:\Users\Rafał\Downloads\mb3-setup-consumer-3.2.2.2029.exe
2017-10-16 12:53 - 2017-10-16 12:53 - 000000000 ___RD C:\Users\Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-10-16 12:53 - 2017-10-16 12:53 - 000000000 ____D C:\ProgramData\adaware
2017-10-16 11:55 - 2017-10-16 11:55 - 000003166 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-886091981-26357939-1909133584-1001
2017-10-16 11:55 - 2017-10-16 11:55 - 000002377 _____ C:\Users\Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive dla Firm.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002899 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002878 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002849 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002821 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002793 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000002785 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-10-15 23:43 - 2017-10-15 23:43 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2017-10-15 23:41 - 2017-10-15 23:41 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2017-10-15 23:41 - 2017-10-15 23:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-15 23:40 - 2017-10-15 23:40 - 000000000 ____D C:\Windows\PCHEALTH
2017-10-15 23:40 - 2017-10-15 23:40 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2017-10-15 23:40 - 2017-10-15 23:40 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-10-15 23:39 - 2017-10-15 23:39 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2017-10-15 23:39 - 2017-10-15 23:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-10-15 23:38 - 2017-10-15 23:40 - 000000000 ____D C:\Program Files\Microsoft Office
2017-10-15 23:38 - 2017-10-15 23:38 - 000000000 __RHD C:\MSOCache
2017-10-15 23:38 - 2017-10-15 23:38 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-10-15 23:19 - 2017-10-15 23:22 - 000001908 _____ C:\Windows\diagwrn.xml
2017-10-15 23:19 - 2017-10-15 23:22 - 000001908 _____ C:\Windows\diagerr.xml
2017-10-15 23:19 - 2017-10-15 23:19 - 000000000 ___HD C:\$WINDOWS.~BT
2017-10-15 22:36 - 2017-10-16 12:54 - 000000000 ____D C:\Windows\AutoKMS
2017-10-15 22:36 - 2017-10-15 22:36 - 000003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-10-15 22:35 - 2017-10-15 22:35 - 000000000 ____D C:\ProgramData\Microsoft Toolkit
2017-10-15 22:32 - 2017-10-15 22:32 - 000000000 ____D C:\ProgramData\KMSAuto
2017-10-15 22:18 - 2014-08-08 18:31 - 000027136 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\ptun0901.sys
2017-10-15 22:18 - 2014-05-25 02:36 - 000015360 _____ C:\Windows\system32\SppExtComObjHook.dll
2017-10-15 22:18 - 2014-05-25 02:36 - 000004608 _____ C:\Windows\system32\SppExtComObjPatcher.exe
2017-10-15 22:17 - 2017-10-15 22:38 - 000000000 ____D C:\Users\Rafał\AppData\Local\MSfree Inc
2017-10-15 22:16 - 2017-10-15 22:16 - 000000000 __RHD C:\Windows\KMS
2017-10-15 19:43 - 2017-10-15 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War - WARHAMMER II
2017-10-15 18:37 - 2017-10-15 18:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dishonored 2
2017-10-15 17:04 - 2017-10-15 17:04 - 000000000 ____D C:\Program Files (x86)\Steam
2017-10-15 15:46 - 2017-10-15 15:46 - 000398227 _____ C:\Users\Rafał\Downloads\Middle-EarthShadow.of.War-REPACK.torrent
2017-10-15 13:08 - 2017-10-15 13:08 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-10-15 00:41 - 2017-10-15 00:41 - 000016724 _____ C:\Windows\System32\Tasks\20507f89248l90000z7
2017-10-15 00:41 - 2017-10-15 00:41 - 000016712 _____ C:\Windows\System32\Tasks\82635f964l6515z6
2017-10-15 00:41 - 2017-10-15 00:41 - 000016704 _____ C:\Windows\System32\Tasks\6474o18c32w138
2017-10-15 00:41 - 2017-10-15 00:41 - 000016700 _____ C:\Windows\System32\Tasks\875o48c79w170
2017-10-15 00:41 - 2017-10-15 00:41 - 000000000 ___HD C:\ProgramData\875o48c79w170
2017-10-15 00:41 - 2017-10-15 00:41 - 000000000 ___HD C:\ProgramData\82635f964l6515z6
2017-10-15 00:41 - 2017-10-15 00:41 - 000000000 ___HD C:\ProgramData\6474o18c32w138
2017-10-15 00:41 - 2017-10-15 00:41 - 000000000 ___HD C:\ProgramData\20507f89248l90000z7
2017-10-15 00:37 - 2017-10-15 00:37 - 000004608 _____ C:\Windows\SECOH-QAD.exe
2017-10-15 00:37 - 2017-10-15 00:37 - 000003584 _____ C:\Windows\SECOH-QAD.dll
2017-10-11 21:40 - 2017-10-11 21:40 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-10-11 19:11 - 2017-09-07 23:08 - 025729536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-10-11 19:10 - 2017-09-14 21:30 - 007439704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-10-11 19:10 - 2017-09-14 21:30 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-10-11 19:10 - 2017-09-14 21:29 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-10-11 19:10 - 2017-09-14 03:18 - 001384216 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-10-11 19:10 - 2017-09-14 03:14 - 001124384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-10-11 19:10 - 2017-09-13 15:32 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-10-11 19:10 - 2017-09-13 15:31 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-10-11 19:10 - 2017-09-13 15:27 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2017-10-11 19:10 - 2017-09-09 20:53 - 022361864 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-10-11 19:10 - 2017-09-09 19:55 - 019790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-10-11 19:10 - 2017-09-09 19:38 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2017-10-11 19:10 - 2017-09-09 18:10 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-10-11 19:10 - 2017-09-09 17:49 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-10-11 19:10 - 2017-09-09 17:47 - 014466560 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-10-11 19:10 - 2017-09-09 17:21 - 012879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-10-11 19:10 - 2017-09-09 15:13 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2017-10-11 19:10 - 2017-09-09 15:13 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-10-11 19:10 - 2017-09-09 15:13 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2017-10-11 19:10 - 2017-09-09 05:50 - 002013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-10-11 19:10 - 2017-09-09 05:50 - 001364552 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-10-11 19:10 - 2017-09-08 20:21 - 004168192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-10-11 19:10 - 2017-09-08 20:15 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-10-11 19:10 - 2017-09-08 19:39 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-10-11 19:10 - 2017-09-08 18:57 - 001084928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-10-11 19:10 - 2017-09-07 23:33 - 000686592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-10-11 19:10 - 2017-09-07 23:33 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-10-11 19:10 - 2017-09-07 23:32 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-10-11 19:10 - 2017-09-07 23:32 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-10-11 19:10 - 2017-09-07 23:17 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-10-11 19:10 - 2017-09-07 23:17 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-10-11 19:10 - 2017-09-07 23:15 - 002902528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-10-11 19:10 - 2017-09-07 23:00 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-10-11 19:10 - 2017-09-07 22:40 - 005982208 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-10-11 19:10 - 2017-09-07 22:32 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-10-11 19:10 - 2017-09-07 22:31 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-10-11 19:10 - 2017-09-07 22:29 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-10-11 19:10 - 2017-09-07 22:21 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-10-11 19:10 - 2017-09-07 22:13 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-10-11 19:10 - 2017-09-07 22:11 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-10-11 19:10 - 2017-09-07 22:10 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-10-11 19:10 - 2017-09-07 22:10 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-10-11 19:10 - 2017-09-07 22:08 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-10-11 19:10 - 2017-09-07 22:08 - 000656896 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-10-11 19:10 - 2017-09-07 21:54 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2017-10-11 19:10 - 2017-09-07 21:44 - 015262720 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-10-11 19:10 - 2017-09-07 21:40 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-10-11 19:10 - 2017-09-07 21:27 - 001548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-10-11 19:10 - 2017-09-07 21:17 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-10-11 19:10 - 2017-09-07 21:10 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-10-11 19:10 - 2017-09-07 21:09 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-10-11 19:10 - 2017-09-07 21:04 - 020267008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-10-11 19:10 - 2017-09-07 21:03 - 002292736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-10-11 19:10 - 2017-09-07 20:58 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-10-11 19:10 - 2017-09-07 20:39 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-10-11 19:10 - 2017-09-07 20:38 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-10-11 19:10 - 2017-09-07 20:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-10-11 19:10 - 2017-09-07 20:33 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-10-11 19:10 - 2017-09-07 20:29 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-10-11 19:10 - 2017-09-07 20:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-10-11 19:10 - 2017-09-07 20:27 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-10-11 19:10 - 2017-09-07 20:26 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-10-11 19:10 - 2017-09-07 20:25 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-10-11 19:10 - 2017-09-07 20:24 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-10-11 19:10 - 2017-09-07 20:17 - 013677568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-10-11 19:10 - 2017-09-07 20:01 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-10-11 19:10 - 2017-09-07 19:57 - 001316864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-10-11 19:10 - 2017-09-07 19:57 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-10-11 19:10 - 2017-08-13 21:48 - 000202592 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-10-11 19:10 - 2017-08-13 19:52 - 000174944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-10-11 19:10 - 2017-08-13 19:10 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2017-10-11 19:10 - 2017-08-13 18:33 - 000252416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2017-10-11 19:10 - 2017-08-11 04:54 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-10-11 19:10 - 2017-08-11 04:22 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-10-11 19:10 - 2017-08-11 04:20 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-10-11 19:10 - 2017-08-11 04:16 - 000275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2017-10-11 19:10 - 2017-08-11 03:57 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2017-10-11 19:10 - 2017-08-06 23:50 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-10-11 19:10 - 2017-08-06 23:20 - 000542720 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-10-11 19:10 - 2017-08-06 23:13 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-10-11 19:10 - 2017-08-06 09:08 - 000561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-10-11 19:10 - 2017-08-02 04:19 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-10-11 19:10 - 2017-08-01 10:25 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-10-04 12:52 - 2017-10-04 12:52 - 000000000 ____D C:\Users\Rafał\Documents\Bluetooth Folder
2017-10-02 19:12 - 2017-10-02 19:20 - 000000000 ____D C:\Users\Rafał\Documents\FIFA 18
2017-10-02 19:08 - 2017-10-02 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA18
2017-10-02 18:13 - 2017-10-02 18:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-10-02 18:13 - 2017-10-02 18:13 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2017-10-01 21:30 - 2017-10-16 01:06 - 000000000 ____D C:\INSTALACJE
2017-09-25 16:02 - 2017-09-25 16:02 - 000000000 ____D C:\Users\Rafał\Documents\Custom Office Templates
2017-09-20 15:17 - 2017-09-20 15:17 - 000000000 ____D C:\ProgramData\IObit
2017-09-19 22:12 - 2017-09-19 22:12 - 000000000 ____D C:\NVIDIA Corporation
2017-09-19 22:10 - 2014-10-29 04:50 - 001192960 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll.backup
2017-09-19 22:10 - 2014-10-29 04:39 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\uxinit.dll.backup
2017-09-19 22:10 - 2014-10-29 04:06 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll.backup
2017-09-19 21:44 - 2017-10-16 12:02 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-19 21:37 - 2017-09-19 21:37 - 000012288 ___SH C:\Users\Rafał\Documents\Thumbs.db
2017-09-18 20:24 - 2017-09-18 20:24 - 000001310 _____ C:\Users\Rafał\AppData\Local\recently-used.xbel
2017-09-18 19:28 - 2017-09-19 21:37 - 000000000 ____D C:\Users\Rafał\Documents\HitFilm Express 2017 Exports
2017-09-18 19:07 - 2017-09-18 19:07 - 000000000 ____D C:\Users\Rafał\AppData\Local\HitFilm Express 2017 Activation
2017-09-18 19:07 - 2017-09-18 19:07 - 000000000 ____D C:\Users\Rafał\AppData\Local\Crashpad
2017-09-18 19:07 - 2017-09-18 19:07 - 000000000 ____D C:\Users\Rafał\.HitFilm Express 2017
2017-09-18 19:05 - 2017-09-18 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitFilm Express 2017
2017-09-18 02:58 - 2017-10-15 00:29 - 000000000 ____D C:\Users\Rafał\AppData\Local\mpress
2017-09-18 01:21 - 2017-09-18 01:27 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\MOVAVI
2017-09-18 01:21 - 2017-09-18 01:21 - 000004128 _____ C:\ProgramData\bqeojehc.wbx
2017-09-17 12:38 - 2017-09-19 17:47 - 000000000 ____D C:\Users\Rafał\Documents\FXHOME
2017-09-17 12:38 - 2017-09-18 19:20 - 000000000 ____D C:\Users\Rafał\AppData\Local\HitFilm 4 Express Activation
2017-09-17 12:38 - 2017-09-18 19:07 - 000000000 ____D C:\Users\Rafał\AppData\Local\FXHOME Helper
2017-09-17 12:38 - 2017-09-18 19:07 - 000000000 ____D C:\Users\Rafał\AppData\Local\FXHOME
2017-09-17 12:34 - 2017-09-17 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitFilm 4 Express
2017-09-17 12:33 - 2017-09-19 15:52 - 000000000 ____D C:\Program Files\FXHOME
2017-09-17 12:33 - 2017-09-19 15:52 - 000000000 ____D C:\Program Files\Common Files\OFX
2017-09-17 12:32 - 2017-09-19 15:52 - 000000000 ____D C:\Program Files\Boris FX, Inc
2017-09-17 12:32 - 2017-09-18 19:04 - 000000000 ____D C:\ProgramData\FXHOME
2017-09-17 12:32 - 2017-09-17 12:32 - 000000000 ____D C:\Program Files (x86)\Boris FX, Inc
2017-09-17 12:23 - 2017-09-18 21:28 - 000000034 _____ C:\Users\Rafał\AppData\Roaming\AdobeWLCMCache.dat
2017-09-17 12:12 - 2017-09-17 12:12 - 000001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
2017-09-17 12:12 - 2017-09-17 12:12 - 000000000 ____D C:\ProgramData\ALM
2017-09-17 12:09 - 2017-09-17 12:09 - 000001558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2017-09-17 05:08 - 2017-09-17 05:08 - 000000000 ____D C:\Users\Rafał\AppData\Local\enchant
2017-09-17 04:57 - 2017-09-17 04:57 - 000000000 ____D C:\Users\Rafał\AppData\Local\fontconfig
2017-09-17 03:08 - 2017-09-19 15:45 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\ActivePresenter
2017-09-17 01:43 - 2017-09-28 22:00 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\audacity
2017-09-17 01:43 - 2017-09-17 01:43 - 000000000 ____D C:\Users\Rafał\AppData\Local\Audacity
2017-09-16 21:53 - 2017-09-20 00:36 - 000000000 ____D C:\Users\Rafał\Documents\REAPER Media
2017-09-16 21:52 - 2017-09-17 12:15 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\REAPER
2017-09-16 21:52 - 2017-09-16 21:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REAPER
2017-09-16 21:52 - 2017-09-16 21:52 - 000000000 ____D C:\Program Files (x86)\REAPER
2017-09-16 20:26 - 2017-09-16 20:26 - 000000961 _____ C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk
2017-09-16 20:26 - 2017-09-16 20:26 - 000000000 ____D C:\Program Files (x86)\uTorrent

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-10-16 12:58 - 2016-10-14 14:08 - 000000000 ____D C:\Users\Rafał\AppData\Local\CrashDumps
2017-10-16 12:58 - 2014-10-28 21:12 - 000000000 ____D C:\Program Files (x86)\Dell Backup and Recovery
2017-10-16 12:56 - 2016-10-11 20:16 - 000003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-886091981-26357939-1909133584-1001
2017-10-16 12:54 - 2014-03-18 11:52 - 002147010 _____ C:\Windows\system32\PerfStringBackup.INI
2017-10-16 12:54 - 2014-03-18 11:25 - 001030296 _____ C:\Windows\system32\perfh015.dat
2017-10-16 12:54 - 2014-03-18 11:25 - 000239742 _____ C:\Windows\system32\perfc015.dat
2017-10-16 12:54 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-10-16 12:52 - 2016-10-11 20:12 - 000000000 ____D C:\Users\Rafał\OneDrive
2017-10-16 12:50 - 2016-10-11 20:07 - 000000000 ____D C:\Users\Rafał
2017-10-16 12:49 - 2014-10-28 21:08 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-16 12:49 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-16 12:49 - 2013-08-22 16:44 - 005120104 _____ C:\Windows\system32\FNTCACHE.DAT
2017-10-16 12:02 - 2017-08-06 12:21 - 000004568 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-10-16 12:02 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-10-16 12:02 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-10-16 00:52 - 2016-12-30 00:04 - 000000000 ____D C:\Users\Rafał\Downloads\Programy
2017-10-16 00:49 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-10-15 23:42 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-10-15 23:41 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-10-15 23:39 - 2014-03-18 11:28 - 000000000 ____D C:\Windows\ShellNew
2017-10-15 23:39 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2017-10-15 23:39 - 2013-08-22 15:25 - 000000226 _____ C:\Windows\win.ini
2017-10-15 22:37 - 2016-12-09 02:39 - 000000040 _____ C:\Program Files (x86)\settings.dat
2017-10-15 22:02 - 2016-11-21 00:21 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\DAEMON Tools Lite
2017-10-15 22:02 - 2016-11-18 14:02 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\uTorrent
2017-10-15 20:17 - 2017-02-17 16:25 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\The Creative Assembly
2017-10-15 19:51 - 2016-12-11 01:32 - 000000000 ____D C:\ProgramData\DxO Labs
2017-10-15 19:48 - 2016-12-30 03:46 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\MPC-HC
2017-10-15 13:08 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-10-15 00:58 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-10-14 23:05 - 2016-10-11 21:00 - 004585472 ___SH C:\Users\Rafał\Downloads\Thumbs.db
2017-10-14 22:06 - 2016-12-09 03:37 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-10-14 22:01 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2017-10-12 17:53 - 2016-12-26 21:29 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\AIMP
2017-10-11 21:43 - 2016-10-14 01:44 - 000000000 ____D C:\Windows\system32\MRT
2017-10-11 21:40 - 2016-10-14 01:43 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-10-11 12:03 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-10-11 12:02 - 2016-10-13 12:17 - 004088832 ___SH C:\Users\Rafał\Desktop\Thumbs.db
2017-10-11 11:58 - 2016-10-11 20:08 - 000000000 ____D C:\Users\Rafał\AppData\Local\Packages
2017-10-11 11:58 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-05 23:26 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-10-05 00:48 - 2016-12-11 01:45 - 000000000 ____D C:\Program Files (x86)\Corel
2017-10-04 12:48 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-10-02 19:10 - 2016-10-21 18:05 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-26 01:35 - 2016-12-09 03:25 - 000002225 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-19 21:43 - 2016-11-23 17:59 - 000000000 ____D C:\Users\Rafał\AppData\Local\Adobe
2017-09-18 01:52 - 2014-10-29 04:35 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-09-17 12:25 - 2016-10-11 20:10 - 000000000 ____D C:\Users\Rafał\AppData\Roaming\Adobe
2017-09-17 12:13 - 2016-12-12 02:55 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-09-17 12:12 - 2016-12-12 02:53 - 000000000 ____D C:\Program Files\Adobe
2017-09-17 12:12 - 2016-12-12 02:48 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-09-16 21:30 - 2013-08-22 15:25 - 000000245 _____ C:\Windows\system.ini
2017-09-16 21:04 - 2016-10-20 19:04 - 000127568 _____ C:\Users\Rafał\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Pliki w katalogu głównym wybranych folderów =======

2016-12-09 02:39 - 2016-12-09 02:39 - 000000000 _____ () C:\Program Files (x86)\metadata
2016-12-09 02:39 - 2017-10-15 22:37 - 000000040 _____ () C:\Program Files (x86)\settings.dat
2017-09-17 12:23 - 2017-09-18 21:28 - 000000034 _____ () C:\Users\Rafał\AppData\Roaming\AdobeWLCMCache.dat
2017-08-18 13:29 - 2017-08-18 17:14 - 000000132 _____ () C:\Users\Rafał\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2016-11-17 23:27 - 2016-11-17 23:27 - 000001167 _____ () C:\Users\Rafał\AppData\Roaming\trace_FilterInstaller.1.txt
2016-11-17 23:27 - 2016-11-19 00:49 - 000000905 _____ () C:\Users\Rafał\AppData\Roaming\trace_FilterInstaller.txt
2016-11-17 23:27 - 2016-11-19 00:49 - 000000000 _____ () C:\Users\Rafał\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2017-09-18 20:24 - 2017-09-18 20:24 - 000001310 _____ () C:\Users\Rafał\AppData\Local\recently-used.xbel
2016-10-11 20:36 - 2016-10-11 20:36 - 000007608 _____ () C:\Users\Rafał\AppData\Local\Resmon.ResmonCfg
2017-09-18 01:21 - 2017-09-18 01:21 - 000004128 _____ () C:\ProgramData\bqeojehc.wbx
2014-10-28 20:42 - 2014-10-28 20:42 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-10-16 16:55 - 2016-10-16 16:55 - 000000032 _____ () C:\ProgramData\Temp.log
2014-10-28 21:01 - 2014-10-28 21:01 - 000000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
2014-10-28 20:58 - 2014-10-28 20:59 - 000000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
2014-10-28 20:59 - 2014-10-28 21:00 - 000000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log
2014-10-28 21:00 - 2014-10-28 21:01 - 000000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log
2014-10-28 20:57 - 2014-10-28 20:58 - 000000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-10-12 16:00

==================== Koniec  FRST.txt ============================