Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by Kaczuszka (administrator) on KACZUSZKA-PC (06-01-2018 13:44:47)
Running from C:\Users\Kaczuszka\Downloads
Loaded Profiles: Kaczuszka (Available Profiles: Kaczuszka)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Malwarebytes) D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamtray.exe
(BitTorrent Inc.) C:\Users\Kaczuszka\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Kaczuszka\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
(BitTorrent Inc.) C:\Users\Kaczuszka\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
() C:\Program Files (x86)\Hostless Modem\Router Wi-Fi Movil\CheckNDISPort_df.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) D:\Program Files (x86)\Malwarebytes Anti-Malware\MBAMService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [1088944 2016-05-11] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => D:\PROGRAM FILES (X86)\MALWAREBYTES ANTI-MALWARE\mbamtray.exe [2786768 2016-11-29] (Malwarebytes)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [CheckNDISPortf0ac62] => C:\Program Files (x86)\Hostless Modem\Router Wi-Fi Movil\CheckNDISPort_df.exe [417176 2012-12-24] ()
HKU\S-1-5-21-926443373-218334621-2797000802-1001\...\Run: [uTorrent] => C:\Users\Kaczuszka\AppData\Roaming\uTorrent\uTorrent.exe [1981624 2017-12-31] (BitTorrent Inc.)
HKU\S-1-5-21-926443373-218334621-2797000802-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-926443373-218334621-2797000802-1001\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-926443373-218334621-2797000802-1001\...\MountPoints2: {4cfc1e1d-17b5-11e7-beaf-002421db2d8d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-926443373-218334621-2797000802-1001\...\MountPoints2: {f0b40685-eeb5-11e6-9eeb-002421db2d8d} - G:\CoJBiBLauncher.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 217.173.176.6 217.173.176.50
Tcpip\..\Interfaces\{F62D023E-0EDF-4DD3-92A8-2B8767A0E428}: [DhcpNameServer] 217.173.176.6 217.173.176.50

Internet Explorer:
==================
HKU\S-1-5-21-926443373-218334621-2797000802-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-12-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-12-18] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-12-18] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-12-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-12-18] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-12-18] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-18] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-18] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-18] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-18] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-12-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-12-18] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-926443373-218334621-2797000802-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Kaczuszka\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> mail.ru
CHR DefaultSearchURL: Default -> hxxps://inline.go.mail.ru/search?inline_comp=dse&q={searchTerms}&fr=chxtn11.0.3
CHR DefaultSearchKeyword: Default -> mail.ru
CHR DefaultSuggestURL: Default -> hxxp://suggests.go.mail.ru/chrome?q={searchTerms}
CHR Profile: C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default [2018-01-06]
CHR Extension: (Prezentacje) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Dysk Google) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-15]
CHR Extension: (YouTube) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-15]
CHR Extension: (Adblock Plus) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-12-31]
CHR Extension: (Arkusze) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-15]
CHR Extension: (AdBlock) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-08]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-30]
CHR Extension: (Gmail) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-15]
CHR Extension: (Chrome Media Router) - C:\Users\Kaczuszka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
CHR HKU\S-1-5-21-926443373-218334621-2797000802-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-926443373-218334621-2797000802-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [odijcgafkhpobjlnfdgiacpdenpmbgme] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-926443373-218334621-2797000802-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [phkdcinmmljblpnkohlipaiodlonpinf] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-926443373-218334621-2797000802-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pmpoaahleccaibbhfjfimigepmfmmbbk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761576 2017-12-25] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-06] (Disc Soft Ltd)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2016-05-11] ()
R2 MBAMService; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-27] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2124296 2017-02-28] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2185232 2017-02-28] (Electronic Arts)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-02-09] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-02-09] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77408 2016-11-29] ()
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [55232 2018-01-05] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2018-01-06] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2018-01-06] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2018-01-06] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [250816 2018-01-06] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2018-01-06] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-10-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50808 2017-10-27] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S3 appdrv01.fs.{3A57190D-8B3A-4928-A98E-F9478E88DE20}; System32\Drivers\appdrv01.fs.{3A57190D-8B3A-4928-A98E-F9478E88DE20}.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-06 13:44 - 2018-01-06 13:45 - 000015874 _____ C:\Users\Kaczuszka\Downloads\FRST.txt
2018-01-06 13:44 - 2018-01-06 13:44 - 000000000 ____D C:\FRST
2018-01-06 13:43 - 2018-01-06 13:43 - 002393088 _____ (Farbar) C:\Users\Kaczuszka\Downloads\FRST64.exe
2018-01-06 13:29 - 2018-01-06 13:29 - 000002432 _____ C:\Users\Kaczuszka\Desktop\AdwCleaner[C0].txt
2018-01-06 13:26 - 2018-01-06 13:26 - 000002647 _____ C:\Users\Kaczuszka\Desktop\AdwCleaner[S0].txt
2018-01-06 13:24 - 2018-01-06 13:36 - 000000000 ____D C:\AdwCleaner
2018-01-06 13:24 - 2018-01-06 13:24 - 008172032 _____ (Malwarebytes) C:\Users\Kaczuszka\Downloads\adwcleaner_7.0.5.0.exe
2018-01-06 13:17 - 2018-01-06 13:32 - 000102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-01-06 13:17 - 2018-01-06 13:32 - 000081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-01-06 13:17 - 2018-01-06 13:17 - 000176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2018-01-06 13:16 - 2018-01-06 13:32 - 000250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2018-01-06 13:16 - 2018-01-06 13:32 - 000043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-01-06 13:16 - 2018-01-06 13:16 - 000000897 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-01-06 13:16 - 2018-01-06 13:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-01-06 13:16 - 2016-11-29 06:27 - 000077408 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-01-06 13:13 - 2018-01-06 13:16 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-05 23:23 - 2018-01-05 23:24 - 000003846 _____ C:\Users\Kaczuszka\Desktop\mb-clean-results.txt
2018-01-05 23:23 - 2018-01-05 23:23 - 000863696 _____ (Malwarebytes) C:\Users\Kaczuszka\Downloads\mb-clean-3.1.0.1031.exe
2018-01-05 21:33 - 2018-01-06 13:31 - 000000000 ____D C:\Users\Kaczuszka\AppData\LocalLow\uTorrent
2018-01-05 09:41 - 2018-01-05 09:44 - 000000000 ____D C:\Program Files\CCleaner
2018-01-05 09:41 - 2018-01-05 09:41 - 000002806 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-01-05 09:41 - 2018-01-05 09:41 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-01-05 09:41 - 2018-01-05 09:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-01-05 09:40 - 2018-01-05 09:40 - 000030401 _____ C:\ProgramData\agent.uninstall.1515141603.bdinstall.bin
2018-01-05 09:39 - 2018-01-05 09:40 - 000000000 ____D C:\Users\Kaczuszka\Downloads\Ccleaner Professional v5.12.5431 FINAL + Serials [TechTools.net]
2018-01-05 09:28 - 2018-01-05 09:28 - 000055232 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2018-01-02 11:18 - 2018-01-02 11:18 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2018-01-02 11:04 - 2018-01-02 11:04 - 000023112 _____ C:\Windows\system32\Drivers\hitmanpro35.sys
2018-01-02 11:04 - 2018-01-02 11:04 - 000000000 ____D C:\Program Files\Hitman Pro 3.5
2018-01-01 19:57 - 2018-01-02 10:57 - 000000000 ____D C:\ProgramData\HitmanPro
2018-01-01 19:56 - 2018-01-02 11:18 - 000000000 ____D C:\ProgramData\Hitman Pro
2018-01-01 19:48 - 2018-01-01 19:48 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2018-01-01 19:45 - 2018-01-01 19:45 - 000048901 _____ C:\ProgramData\agent.1514832343.bdinstall.bin
2018-01-01 19:45 - 2018-01-01 19:45 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2018-01-01 19:44 - 2018-01-01 19:44 - 009932672 _____ C:\Users\Kaczuszka\Downloads\bitdefender_online.exe
2017-12-31 23:22 - 2017-12-31 23:22 - 000000000 ____D C:\Users\Kaczuszka\Documents\WB Games
2017-12-31 22:46 - 2017-12-31 22:46 - 000000985 _____ C:\Users\Public\Desktop\Batman - Arkham City (Settings).lnk
2017-12-31 22:46 - 2017-12-31 22:46 - 000000886 _____ C:\Users\Public\Desktop\Batman - Arkham City.lnk
2017-12-31 22:46 - 2017-12-31 22:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman - Arkham City
2017-12-31 22:08 - 2017-12-31 22:08 - 000000000 ____D C:\Users\Kaczuszka\AppData\Local\Setup Integrity Check
2017-12-31 20:01 - 2017-12-31 20:02 - 007629380 _____ C:\Users\Kaczuszka\Downloads\lol.zip
2017-12-31 19:53 - 2017-12-31 21:57 - 000000000 ____D C:\Users\Kaczuszka\Downloads\Batman.Arkham.City.EN-RU.Repack.by.z10yded
2017-12-20 20:47 - 2017-12-20 20:47 - 000000766 _____ C:\Users\Kaczuszka\Desktop\Cheat Engine.lnk
2017-12-20 20:47 - 2017-12-20 20:47 - 000000000 ____D C:\Users\Kaczuszka\Documents\My Cheat Tables
2017-12-20 20:47 - 2017-12-20 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.7
2017-12-20 20:45 - 2017-12-20 20:46 - 012140312 _____ (Cheat Engine ) C:\Users\Kaczuszka\Downloads\CheatEngine67.exe
2017-12-16 20:30 - 2017-12-16 20:30 - 000000000 ____D C:\Users\Kaczuszka\Documents\Atari
2017-12-16 20:30 - 2017-12-16 20:30 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\Atari
2017-12-16 20:30 - 2017-12-16 20:30 - 000000000 ____D C:\Users\Kaczuszka\AppData\Local\Atari
2017-12-16 20:29 - 2017-12-16 20:29 - 000000000 ____D C:\ProgramData\Tages
2017-12-16 20:29 - 2017-12-16 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-12-16 17:34 - 2017-12-16 17:56 - 000000000 ____D C:\Users\Kaczuszka\Downloads\The.Chronicles.of.Riddick.Assault.on.Dark.Athena-GOG
2017-12-16 15:14 - 2017-12-16 15:14 - 000000000 ____D C:\Users\Kaczuszka\Documents\Call of Juarez - Bound in Blood
2017-12-16 15:13 - 2017-12-16 15:13 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2017-12-16 15:12 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-12-16 14:32 - 2017-12-16 14:48 - 000000000 ____D C:\Users\Kaczuszka\Downloads\Call Of Juarez Bound In Blood Razor1911 MAXSPEED
2017-12-15 16:49 - 2017-12-15 16:49 - 002123081 _____ C:\Users\Kaczuszka\Downloads\eFaktura FVP_19627_12_17.pdf
2017-12-15 10:04 - 2017-12-15 10:04 - 000342469 _____ C:\Users\Kaczuszka\Downloads\10316.pdf
2017-12-13 20:42 - 2017-12-13 20:42 - 003448876 _____ C:\Users\Kaczuszka\Desktop\Thomas Bergersen - Our Destiny (Sun).wav
2017-12-09 15:00 - 2017-12-09 15:00 - 000000000 ____D C:\Users\Kaczuszka\Documents\CPY_SAVES
2017-12-09 15:00 - 2017-12-09 15:00 - 000000000 ____D C:\Users\Kaczuszka\AppData\Local\238010
2017-12-09 14:04 - 2017-12-09 14:15 - 000000000 ____D C:\Users\Kaczuszka\Downloads\Deus Ex Human Revolution Director's Cut repack Mr DJ

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-06 13:45 - 2017-02-04 16:50 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\uTorrent
2018-01-06 13:39 - 2009-07-14 05:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-06 13:39 - 2009-07-14 05:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-06 13:32 - 2017-01-15 13:06 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-06 13:31 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-06 13:10 - 2017-11-15 16:47 - 000000000 ____D C:\Users\Kaczuszka\Downloads\Malwarebytes Premium 3.0  FINAL + Crack [TechTools.ME]
2018-01-05 23:15 - 2017-02-06 14:13 - 000000000 ____D C:\Users\Kaczuszka\AppData\Local\CrashDumps
2018-01-05 22:04 - 2017-10-11 20:23 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-01-05 22:02 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-01-05 22:00 - 2017-10-11 20:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-01-05 09:45 - 2017-02-09 12:46 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\DAEMON Tools Lite
2018-01-05 09:41 - 2017-08-12 07:55 - 000000000 ____D C:\Windows\system32\appmgmt
2018-01-01 17:18 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-12-31 22:53 - 2009-07-14 06:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-12-31 21:31 - 2017-11-26 20:43 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\Factorio
2017-12-31 18:54 - 2017-10-11 20:36 - 000000000 ____D C:\ProgramData\KMSAutoS
2017-12-17 11:32 - 2017-11-15 16:32 - 000000000 ____D C:\Users\Kaczuszka\Desktop\Gry
2017-12-16 14:37 - 2017-11-27 16:15 - 000000000 ____D C:\Users\Kaczuszka\Desktop\Praca magisterska
2017-12-13 20:43 - 2017-02-11 21:58 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-12-13 20:42 - 2017-04-14 20:56 - 000000000 ____D C:\Users\Kaczuszka\AppData\Roaming\audacity
2017-12-09 14:59 - 2017-03-02 21:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mr DJ
2017-12-09 14:38 - 2017-02-09 15:55 - 000000000 ____D C:\Windows\SysWOW64\directx
2017-12-09 11:04 - 2017-01-15 11:51 - 000002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-07 22:48 - 2017-12-06 19:43 - 000112789 _____ C:\Users\Kaczuszka\Desktop\Wyschłoziemcy zwiastun.prproj

==================== Files in the root of some directories =======

2017-02-07 19:26 - 2017-02-07 19:54 - 318912029 _____ () C:\Users\Kaczuszka\AppData\Local\ACCCx3_9_5_353.zip.aamdownload
2017-02-07 19:26 - 2017-02-07 19:54 - 000003560 _____ () C:\Users\Kaczuszka\AppData\Local\ACCCx3_9_5_353.zip.aamdownload.aamd
2017-02-18 13:08 - 2017-02-18 13:08 - 000000000 ___SH () C:\Users\Kaczuszka\AppData\Local\LumaEmu
2017-12-05 11:59 - 2017-12-05 11:59 - 000000839 _____ () C:\Users\Kaczuszka\AppData\Local\recently-used.xbel
2017-08-08 20:06 - 2017-08-08 20:06 - 000007605 _____ () C:\Users\Kaczuszka\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2018-01-05 09:39 - 2018-01-02 10:55 - 011584088 _____ (SurfRight B.V.) C:\Users\Kaczuszka\AppData\Local\Temp\HitmanPro.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-01-01 04:55

==================== End of FRST.txt ============================