Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-11-2017
Ran by Arkadius13 (administrator) on ARKADIUS13-PC (11-11-2017 16:18:16)
Running from C:\Users\Arkadius13\Desktop\FRST64
Loaded Profiles: Arkadius13 (Available Profiles: Arkadius13)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfwsa.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(Digital Wave Ltd) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
() C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2475984 2017-09-18] (Malwarebytes Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM\...\RunOnce: [!MOF64] => cmd.exe /c "cd %windir%\microsoft.net\framework64\v4.0.30319 & mofcomp.exe -autorecover mof\servicemodel.mof & mofcomp.exe -autorecover mof\servicemodel35.mof & mofcomp.exe -autorecover aspnet.mof & c (the data entry has 182 more characters).
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe [1192424 2017-09-12] (Digital Wave Ltd)
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10021040 2017-10-18] (Piriform Ltd)
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\Run: [GoogleDriveSync] => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\MountPoints2: E - E:\monsetup.exe
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\...\MountPoints2: {5e7a464c-9f13-11e7-a5c6-001fc6d54725} - F:\PMCsetup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{BB1282A1-4F40-4A2D-82DC-40F07940021C}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1244120915-4039251266-820905754-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-nl/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-18] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 8x5r0hpx.default-1509036194065
FF ProfilePath: C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065 [2017-11-11]
FF Extension: (ADB Helper) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\adbhelper@mozilla.org [2017-11-01]
FF Extension: (Bloker reklam Adguard) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\adguardadblocker@adguard.com.xpi [2017-10-31]
FF Extension: (Valence) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\fxdevtools-adapters@mozilla.org [2017-11-01]
FF Extension: (AdBlocker for Facebook™) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\jid1-dwtGBwQjx3SUQc@jetpack.xpi [2017-10-26]
FF Extension: (Privacy Badger) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2017-11-10]
FF Extension: (AdBlock) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-10-31]
FF Extension: (Emoji Cheatsheet for GitHub, Basecamp etc.) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\jid1-Xo5SuA6qc1DFpw@jetpack.xpi [2017-10-30]
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-26]
FF Extension: (Search image) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\searchimage@searchimage.fr.xpi [2017-11-01]
FF Extension: (SQLite Manager) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2017-11-01]
FF Extension: (Messenger for Facebook™) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{249b4e45-4fb9-4f6b-9754-7c0c1e605d44}.xpi [2017-11-01]
FF Extension: (No Name) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{4320ca4c-7207-4109-a96c-792a1dac9339}.xpi [2017-10-31]
FF Extension: (Youtube Dark Mode) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{5834f62d-6164-4cdd-a0a3-c00c66ec9d13}.xpi [2017-11-07]
FF Extension: (NoScript) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-11-10]
FF Extension: (insta-download) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{7b21dc78-ddbd-44c8-8621-161bb293598d}.xpi [2017-11-02]
FF Extension: (WorldIP) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{f36c6cd1-da73-491d-b290-8fc9115bfa55}.xpi [2017-10-31]
FF Extension: (Instagram) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{fb3b1352-9244-4fb1-b1a2-1331a89b0d9f}.xpi [2017-11-02]
FF Extension: (Redirect Remover) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{fe0258ab-4f74-43a1-8781-bcdf340f9ee9}.xpi [2017-10-31]
FF Extension: (Instagram Extension Plus) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\Extensions\{feb6c5e7-41e5-4da1-a08f-5e3b73055be2}.xpi [2017-10-30]
FF Extension: (Fixing the geo timeline) - C:\Users\Arkadius13\AppData\Roaming\Mozilla\Firefox\Profiles\8x5r0hpx.default-1509036194065\features\{0cb069fe-a26b-4c67-8eb0-050c3feb82e4}\timecop@mozilla.com.xpi [2017-11-11]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-29] ()
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-18] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-29] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-27] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 5
CHR StartupUrls: Profile 5 -> "hxxp://google.com/"
CHR Profile: C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-11-10]
CHR Profile: C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3 [2017-11-10]
CHR Extension: (AdBlock) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-10-25]
CHR Extension: (SoundCloud) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ipebkipbeggmmkjjljenoblnfaenambp [2017-10-26]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-25]
CHR Extension: (Material Dark) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\npadhaijchjemiifipabpmeebeelbmpd [2017-10-25]
CHR Extension: (Gmail) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-25]
CHR Profile: C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5 [2017-11-11]
CHR Extension: (Prezentacje) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-26]
CHR Extension: (Dokumenty) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-26]
CHR Extension: (Dysk Google) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-26]
CHR Extension: (SoundCloud Downloader) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\baignpanbngjdimbgmannbolcbplmofl [2017-10-26]
CHR Extension: (DuckDuckGo Search) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2017-11-10]
CHR Extension: (YouTube) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-26]
CHR Extension: (Box) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ejnkaeblpdcamcioiiabclakabcbjmbl [2017-10-26]
CHR Extension: (Arkusze) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-26]
CHR Extension: (Tokonda) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghonobjagekcnpkhcpjekbbejnjdlomg [2017-10-27]
CHR Extension: (AdBlock) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-11-09]
CHR Extension: (Conceptly - Mockup and UI Prototyping tool) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\habakdlaikbgemfpkmbdemabcnimenlp [2017-10-27]
CHR Extension: (Insightly) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hkopngnjabiaaibfkfgjhgdfpoholppn [2017-10-27]
CHR Extension: (SoundCloud) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ipebkipbeggmmkjjljenoblnfaenambp [2017-10-26]
CHR Extension: (WordPress.com) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\khjnjifipfkgglficmipimgjpbmlbemd [2017-10-26]
CHR Extension: (Material Theme) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\mdnphgdednjnpcoeamekbogoblkdajep [2017-11-11]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-26]
CHR Extension: (Gmail) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-26]
CHR Extension: (Chrome Media Router) - C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-27]
CHR Profile: C:\Users\Arkadius13\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-11]
CHR HKU\S-1-5-21-1244120915-4039251266-820905754-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\ARKADI~1\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-1244120915-4039251266-820905754-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
S2 ATKFUSService; C:\Windows\system32\ATKFUSService.exe [69632 2007-11-30] (ASUSTeK COMPUTER INC.) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [647864 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1828472 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337696 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1149712 2016-09-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [727512 2016-11-02] (AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-09-12] (Digital Wave Ltd.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [155088 2017-09-18] (Malwarebytes Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-05-15] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2007-11-30] (ASUSTeK Computer Inc.)
R3 atkdisplf; C:\Windows\System32\drivers\ATKDispLowFilter.sys [39040 2007-11-30] (ASUSTeK Computer Inc.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [73992 2016-10-23] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-10-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [267520 2016-10-19] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [77440 2017-09-18] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14648 2010-08-31] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-11 16:10 - 2017-11-11 16:10 - 000000000 ____D C:\Users\Arkadius13\Documents\1
2017-11-11 15:07 - 2017-11-11 15:07 - 000000000 ____D C:\Users\Arkadius13\Documents\New folder
2017-11-11 14:19 - 2017-11-11 14:20 - 099327402 _____ C:\Users\Arkadius13\Documents\Daneiniedane.rar
2017-11-11 09:52 - 2017-11-11 09:52 - 000000946 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2017-11-11 09:52 - 2017-11-11 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-11-11 09:52 - 2017-11-11 09:52 - 000000000 ____D C:\Program Files\Common Files\AV
2017-11-11 09:48 - 2017-11-11 09:48 - 000003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-11-11 05:45 - 2017-11-11 05:54 - 000000000 ____D C:\Users\Arkadius13\.gradle
2017-11-11 05:44 - 2017-11-11 05:44 - 000000000 ____D C:\Users\Arkadius13\AndroidStudioProjects
2017-11-10 21:22 - 2017-11-10 21:22 - 000193400 _____ C:\Windows\system32\cc_20171110_212223.reg
2017-11-10 21:20 - 2017-11-10 21:20 - 000003020 _____ C:\Windows\System32\Tasks\{AF42CA4E-07B6-4C4F-A7DA-F1735BF1E621}
2017-11-10 21:19 - 2017-11-10 21:19 - 000003020 _____ C:\Windows\System32\Tasks\{77F5E3C8-CE95-4829-8D1F-B8D356BDE836}
2017-11-10 20:59 - 2017-11-10 21:02 - 017116302 _____ C:\Users\Arkadius13\Downloads\Windows6.1-KB2524375-x86.msu
2017-11-10 20:57 - 2017-11-10 20:58 - 000740056 _____ C:\Windows\system32\perfh015.dat
2017-11-10 20:57 - 2017-11-10 20:58 - 000155630 _____ C:\Windows\system32\perfc015.dat
2017-11-10 20:57 - 2017-11-10 20:57 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-11-10 20:57 - 2017-11-10 20:56 - 000337158 _____ C:\Windows\system32\perfi015.dat
2017-11-10 20:57 - 2017-11-10 20:56 - 000038710 _____ C:\Windows\system32\perfd015.dat
2017-11-10 20:56 - 2017-11-10 20:56 - 000000000 ____D C:\Windows\SysWOW64\pl
2017-11-10 20:56 - 2017-11-10 20:56 - 000000000 ____D C:\Windows\system32\pl
2017-11-10 20:35 - 2017-11-10 20:35 - 001211186 _____ (www.froggie.sk) C:\Users\Arkadius13\Desktop\Vistalizator.exe
2017-11-10 15:56 - 2017-11-10 15:56 - 004889976 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-10 05:27 - 2017-11-10 05:27 - 000058832 _____ C:\Users\Arkadius13\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-10 02:43 - 2017-11-11 16:18 - 000000000 ____D C:\Users\Arkadius13\Desktop\FRST64
2017-11-10 01:55 - 2017-11-10 01:55 - 000003260 _____ C:\Windows\System32\Tasks\{8FD0006B-67AC-4D6E-8062-23377D49D6E0}
2017-11-10 00:24 - 2017-11-11 16:18 - 000000000 ____D C:\FRST
2017-11-08 05:46 - 2017-11-08 05:46 - 000000000 ____D C:\Users\Arkadius13\Desktop\IBY9X-ESYXT-W4BZQ-QI4WX-A9LI7-INRS3
2017-11-08 02:43 - 2017-11-08 02:43 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\AVAST Software
2017-11-07 10:14 - 2017-11-07 10:14 - 000022148 _____ C:\Users\Arkadius13\.bash_history
2017-11-07 05:36 - 2017-11-07 05:37 - 023877015 _____ C:\Users\Arkadius13\Desktop\CF-Auto-Root-s3ve3g-s3ve3gxx-gti9301i.zip
2017-11-06 14:48 - 2017-11-07 07:39 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\LiveReload
2017-11-06 14:48 - 2017-11-06 14:48 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\LiveReload
2017-11-06 12:56 - 2017-11-06 13:23 - 000071532 _____ C:\Users\Arkadius13\Downloads\fb-messenger-php-master.zip
2017-11-06 06:19 - 2017-11-06 13:01 - 000000000 _____ C:\Users\Arkadius13\function get_raw_facebook_avatar_url($uid)
2017-11-06 06:15 - 2017-11-06 14:39 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Sublime Text 3
2017-11-06 06:15 - 2017-11-06 06:15 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Sublime Text 3
2017-11-05 20:12 - 2017-11-05 20:12 - 000000890 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 3.lnk
2017-11-05 20:12 - 2017-11-05 20:12 - 000000000 ____D C:\Program Files\Sublime Text 3
2017-11-05 20:11 - 2017-11-05 20:12 - 008952928 _____ (Sublime HQ Pty Ltd ) C:\Users\Arkadius13\Downloads\Sublime Text Build 3143 x64 Setup.exe
2017-11-05 18:27 - 2017-11-05 18:27 - 000000001 _____ C:\Users\Arkadius13\Desktop\ł.txt
2017-11-05 12:13 - 2017-11-11 15:07 - 000000000 ___RD C:\Users\Arkadius13\Desktop\PROCODER
2017-11-05 03:41 - 2017-11-11 10:02 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-04 02:21 - 2017-11-04 02:21 - 000000000 ____D C:\Users\Default\AppData\Local\Google
2017-11-04 02:21 - 2017-11-04 02:21 - 000000000 ____D C:\Users\Default User\AppData\Local\Google
2017-11-03 20:11 - 2017-11-11 16:08 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Telegram Desktop
2017-11-03 20:11 - 2017-11-03 20:11 - 000001007 _____ C:\Users\Arkadius13\Desktop\Telegram.lnk
2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2017-11-03 20:10 - 2017-11-03 20:11 - 021059112 _____ (Telegram Messenger LLP ) C:\Users\Arkadius13\Downloads\tsetup.1.1.23.exe
2017-11-02 18:46 - 2017-11-02 18:46 - 000035647 _____ C:\Users\Arkadius13\Downloads\arkadius13.daportfolio.com
2017-11-01 12:13 - 2017-11-01 12:20 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Thunderbird
2017-11-01 12:13 - 2017-11-01 12:13 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Thunderbird
2017-10-31 09:58 - 2017-10-31 10:01 - 000000001 _____ C:\Users\Arkadius13\Desktop\g.txt
2017-10-30 17:38 - 2017-10-30 17:38 - 000000000 ____D C:\Program Files (x86)\WordPress.com
2017-10-30 02:40 - 2017-10-30 02:55 - 000000928 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-10-29 23:33 - 2017-11-11 15:43 - 000000000 ____D C:\Users\Arkadius13\Documents\lit
2017-10-29 20:24 - 2017-10-29 20:24 - 000000000 ____D C:\Windows\System32\Tasks\SmartFTP
2017-10-29 20:23 - 2017-10-29 20:23 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\SmartFTP
2017-10-29 10:19 - 2017-11-05 04:02 - 000000000 ___RD C:\Users\Arkadius13\Google Drive
2017-10-29 09:06 - 2017-10-29 09:50 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-10-29 09:06 - 2017-10-29 09:50 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-10-29 09:06 - 2017-10-29 09:50 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-10-29 09:06 - 2017-10-29 09:50 - 000000000 ____D C:\Windows\system32\Macromed
2017-10-29 08:32 - 2017-10-29 08:32 - 000000000 ____D C:\ProgramData\regid.2006-08.com.smartftp
2017-10-29 08:32 - 2017-10-29 08:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartFTP Client
2017-10-29 08:32 - 2017-10-29 08:32 - 000000000 ____D C:\Program Files\SmartFTP Client
2017-10-29 06:13 - 2017-10-29 06:13 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Android
2017-10-29 03:20 - 2017-10-29 03:20 - 000000000 ____D C:\Users\Arkadius13\Documents\Adobe
2017-10-29 02:16 - 2017-11-11 08:23 - 000001496 _____ C:\Users\Arkadius13\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2017-10-28 23:56 - 2017-10-28 23:56 - 000000000 ____D C:\Users\Arkadius13\.AndroidStudio3.0
2017-10-28 23:49 - 2017-10-28 23:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2017-10-28 23:47 - 2017-10-28 23:47 - 000000000 ____D C:\Program Files\Android
2017-10-28 22:52 - 2017-10-28 23:06 - 714340664 _____ (Google Inc.) C:\Users\Arkadius13\Downloads\android-studio-ide-171.4408382-windows.exe
2017-10-28 18:49 - 2017-10-28 18:50 - 053702264 _____ C:\Users\Arkadius13\Downloads\torbrowser-install-7.0.8_pl.exe
2017-10-27 20:31 - 2017-10-27 20:31 - 000000239 _____ C:\Users\Arkadius13\.gitconfig
2017-10-27 07:02 - 2017-10-27 20:49 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Atom
2017-10-27 07:02 - 2017-10-27 07:02 - 000000000 ____D C:\Users\Arkadius13\.atom
2017-10-27 07:01 - 2017-10-27 07:02 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\atom
2017-10-27 06:57 - 2017-10-27 06:59 - 138726432 _____ (GitHub Inc.) C:\Users\Arkadius13\Downloads\AtomSetup-x64.exe
2017-10-27 06:46 - 2017-10-27 06:48 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\GitHubDesktop
2017-10-27 06:44 - 2017-10-27 06:44 - 000000000 ____D C:\Program Files (x86)\GitHub Desktop Installer
2017-10-27 06:39 - 2017-10-27 06:40 - 083181568 _____ C:\Users\Arkadius13\Downloads\GitHubDesktopSetup.msi
2017-10-27 02:09 - 2017-10-27 02:11 - 000000037 _____ C:\Users\Arkadius13\.minttyrc
2017-10-27 01:15 - 2017-11-07 00:20 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-10-27 01:13 - 2017-10-27 01:13 - 000003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-10-27 01:13 - 2017-10-27 01:13 - 000003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-10-27 00:59 - 2017-10-27 00:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2017-10-27 00:59 - 2017-10-27 00:59 - 000000000 ____D C:\ProgramData\Git
2017-10-27 00:58 - 2017-10-27 00:59 - 000000000 ____D C:\Program Files\Git
2017-10-27 00:02 - 2017-10-27 00:02 - 000000000 ____D C:\Windows\pss
2017-10-26 23:46 - 2017-11-11 13:53 - 000004130 _____ C:\Windows\System32\Tasks\CCleaner Update
2017-10-26 23:46 - 2017-10-26 23:46 - 000002810 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-10-26 23:46 - 2017-10-26 23:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-10-26 23:46 - 2017-10-26 23:46 - 000000000 ____D C:\Program Files\CCleaner
2017-10-26 23:11 - 2017-10-26 23:11 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Cloud SDK
2017-10-26 23:06 - 2017-10-26 23:09 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\gcloud
2017-10-26 23:04 - 2017-10-26 23:04 - 000368648 _____ C:\Users\Arkadius13\Downloads\GoogleCloudSDKInstaller.exe
2017-10-26 22:43 - 2017-11-11 08:21 - 000000132 _____ C:\Users\Arkadius13\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2017-10-26 17:42 - 2017-11-01 16:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-26 17:42 - 2017-10-30 13:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-10-26 17:42 - 2017-10-30 02:55 - 000000940 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-10-26 16:58 - 2017-10-26 16:58 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\IIIQF
2017-10-26 16:29 - 2017-10-26 16:29 - 000000000 ____D C:\Users\Arkadius13\New folder
2017-10-26 16:15 - 2017-10-30 21:06 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\WordPress.com
2017-10-26 16:15 - 2017-10-26 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WordPress.com
2017-10-26 16:14 - 2017-10-26 16:15 - 056443592 _____ C:\Users\Arkadius13\Downloads\wordpress-com-2-9-1-setup.exe
2017-10-25 06:10 - 2017-10-25 06:10 - 000000000 ____D C:\Users\Arkadius13\Documents\Lightshot
2017-10-25 06:07 - 2017-11-11 16:06 - 000000398 _____ C:\Windows\Tasks\update-sys.job
2017-10-25 06:07 - 2017-11-11 15:09 - 000000398 _____ C:\Windows\Tasks\update-S-1-5-21-1244120915-4039251266-820905754-1000.job
2017-10-25 06:07 - 2017-10-25 06:07 - 000003294 _____ C:\Windows\System32\Tasks\update-sys
2017-10-25 06:07 - 2017-10-25 06:07 - 000003282 _____ C:\Windows\System32\Tasks\update-S-1-5-21-1244120915-4039251266-820905754-1000
2017-10-25 06:07 - 2017-10-25 06:07 - 000000425 _____ C:\Users\Arkadius13\AppData\Local\UserProducts.xml
2017-10-25 06:07 - 2017-10-25 06:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2017-10-25 06:07 - 2017-10-25 06:07 - 000000000 ____D C:\Program Files (x86)\Skillbrains
2017-10-24 18:31 - 2017-10-24 18:31 - 001130328 _____ (Google Inc.) C:\Users\Arkadius13\Downloads\ChromeSetup.exe
2017-10-24 00:50 - 2017-10-27 20:50 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\GitHub Desktop
2017-10-24 00:50 - 2017-10-27 07:02 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2017-10-24 00:50 - 2017-10-27 07:02 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\SquirrelTemp
2017-10-24 00:48 - 2017-10-24 00:50 - 084365272 _____ (GitHub, Inc.) C:\Users\Arkadius13\Downloads\GitHubDesktopSetup.exe
2017-10-19 18:45 - 2017-10-19 18:45 - 000000001 _____ C:\Users\Arkadius13\Desktop\G..txt
2017-10-19 18:41 - 2017-10-19 18:41 - 000000001 _____ C:\Users\Arkadius13\Desktop\H.txt
2017-10-19 15:59 - 2017-10-19 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2017-10-18 18:35 - 2017-10-18 18:35 - 000000000 ____D C:\Users\Arkadius13\AppData\LocalLow\Oracle

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-11 16:07 - 2017-09-22 07:37 - 000000000 ____D C:\AdwCleaner
2017-11-11 16:03 - 2017-09-20 19:00 - 000000000 ____D C:\ProgramData\MFAData
2017-11-11 15:54 - 2009-07-14 05:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-11 15:54 - 2009-07-14 05:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-11 15:50 - 2017-09-26 09:54 - 000000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2017-11-11 15:46 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-11 15:41 - 2017-09-18 23:01 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\BitComet
2017-11-11 14:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-11 09:52 - 2017-09-20 18:57 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Avg
2017-11-11 09:51 - 2017-09-26 10:24 - 000000000 ___HD C:\$AVG
2017-11-11 09:51 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-11 09:48 - 2017-09-26 10:22 - 000000000 ____D C:\Program Files (x86)\AVG
2017-11-11 09:48 - 2017-09-20 18:57 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\AvgSetupLog
2017-11-11 09:47 - 2017-09-20 18:59 - 000000000 ____D C:\ProgramData\Avg
2017-11-11 07:22 - 2017-10-01 01:18 - 000000000 ____D C:\Users\Arkadius13\.android
2017-11-11 05:45 - 2017-09-18 14:50 - 000000000 ____D C:\Users\Arkadius13
2017-11-10 21:25 - 2017-09-18 14:55 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Deployment
2017-11-10 21:24 - 2017-09-18 14:55 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Google
2017-11-10 20:57 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\SysWOW64\winrm
2017-11-10 20:57 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\SysWOW64\WCN
2017-11-10 20:57 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\SysWOW64\slmgr
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files\Windows Defender
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files\DVD Maker
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-11-10 20:57 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-11-10 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\MUI
2017-11-10 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2017-11-10 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2017-11-10 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\servicing
2017-11-10 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\System
2017-11-10 20:56 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2017-11-10 20:56 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\system32\winrm
2017-11-10 20:56 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\system32\WCN
2017-11-10 20:56 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\system32\slmgr
2017-11-10 20:56 - 2011-04-12 09:17 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\com
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\sysprep
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\oobe
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\MUI
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\migwiz
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\Dism
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\com
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-11-10 20:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\IME
2017-11-10 03:41 - 2011-04-12 09:28 - 000000000 ___RD C:\Users\Public\Recorded TV
2017-11-08 02:52 - 2017-10-01 01:18 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Wondershare
2017-11-08 02:43 - 2017-09-18 15:16 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-11-08 02:43 - 2017-09-18 15:16 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-11-08 02:43 - 2017-09-18 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-11-08 02:43 - 2017-09-18 15:16 - 000000000 ____D C:\Program Files\WinRAR
2017-11-07 20:21 - 2009-07-14 06:08 - 000032546 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-05 12:11 - 2016-05-15 21:31 - 000741084 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-01 17:00 - 2017-10-11 18:01 - 000000000 ____D C:\Users\Arkadius13\AppData\LocalLow\Mozilla
2017-10-31 15:02 - 2017-09-18 15:05 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Skype
2017-10-29 10:05 - 2017-09-22 06:57 - 000000000 ____D C:\Users\Arkadius13\AppData\Local\Adobe
2017-10-29 10:05 - 2017-09-18 14:56 - 000000000 ____D C:\Program Files (x86)\Google
2017-10-29 09:50 - 2017-09-20 13:16 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-10-29 08:31 - 2017-09-18 15:02 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-29 03:20 - 2017-09-18 14:51 - 000000000 ____D C:\Users\Arkadius13\AppData\Roaming\Adobe
2017-10-27 00:17 - 2017-09-22 06:57 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-10-26 23:59 - 2017-09-18 23:33 - 000000000 ____D C:\Windows\Panther
2017-10-25 03:46 - 2017-09-23 06:36 - 000000058 _____ C:\Users\Arkadius13\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2017-10-24 06:13 - 2017-10-01 19:59 - 000000000 ____D C:\Users\Arkadius13\Desktop\Do obejrzenia
2017-10-23 05:50 - 2017-09-26 09:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2017-10-23 05:50 - 2017-09-26 09:54 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2017-10-22 08:55 - 2017-09-22 08:19 - 000000000 ___RD C:\Users\Arkadius13\Desktop\Mandelbulb3Dv189x1
2017-10-21 04:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\LiveKernelReports
2017-10-19 16:00 - 2017-09-18 23:01 - 000000816 _____ C:\Users\Public\Desktop\BitComet.lnk
2017-10-19 12:06 - 2017-10-01 20:00 - 000000000 ____D C:\Users\Arkadius13\Desktop\Do pakowania
2017-10-18 18:41 - 2017-09-22 07:44 - 000000000 ____D C:\ProgramData\Oracle
2017-10-18 18:37 - 2017-09-22 07:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-10-18 18:37 - 2017-09-22 07:44 - 000000000 ____D C:\Program Files\Java
2017-10-18 18:36 - 2017-09-22 07:44 - 000110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-10-12 19:17 - 2017-09-22 01:04 - 000000000 ____D C:\Program Files (x86)\FreeCodecPack

==================== Files in the root of some directories =======

2017-10-26 22:43 - 2017-11-11 08:21 - 000000132 _____ () C:\Users\Arkadius13\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2017-10-29 02:16 - 2017-11-11 08:23 - 000001496 _____ () C:\Users\Arkadius13\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2017-09-23 06:36 - 2017-10-25 03:46 - 000000058 _____ () C:\Users\Arkadius13\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2017-10-25 06:07 - 2017-10-25 06:07 - 000000003 _____ () C:\Users\Arkadius13\AppData\Local\updater.log
2017-10-25 06:07 - 2017-10-25 06:07 - 000000425 _____ () C:\Users\Arkadius13\AppData\Local\UserProducts.xml

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-09 15:56

==================== End of FRST.txt ============================