Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 17.01.2018 01
Uruchomiony przez sopraninho (administrator)  SOPRANINHO-SYS (18-01-2018 18:10:30)
Uruchomiony z C:\Users\sopraninho\Downloads
Załadowane profile: sopraninho (Dostępne profile: sopraninho)
Platform: Windows 7 Ultimate (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Arcai.com) C:\Program Files (x86)\arcai.com\aips.exe
(AMD) C:\Windows\System32\atieclxx.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(BitTorrent, Inc.) C:\Program Files (x86)\DNA\btdna.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Mystic Light\MysticLight_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
() C:\Program Files (x86)\arcai.com\netcut_windows.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-03-29] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKU\S-1-5-21-3710839944-1452387350-2688565584-1000\...\Run: [BitTorrent DNA] => C:\Program Files (x86)\DNA\btdna.exe [342336 2018-01-05] (BitTorrent, Inc.)
HKU\S-1-5-21-3710839944-1452387350-2688565584-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{0D75D8AC-A59C-4F76-97D6-95A2502885B7}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3710839944-1452387350-2688565584-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-gb/?ocid=iehp
SearchScopes: HKLM -> DefaultScope Yandex URL = hxxp://www.yandex.ru/yandsearch?stype=&nl=0&text={searchTerms}\
SearchScopes: HKLM -> Google URL = hxxp://www.google.ru/search?hl=ru&q={searchTerms}\
SearchScopes: HKLM -> Wikipedia URL = hxxp://ru.wikipedia.org/wiki/{searchTerms}\
SearchScopes: HKLM -> Yandex URL = hxxp://www.yandex.ru/yandsearch?stype=&nl=0&text={searchTerms}\
SearchScopes: HKLM-x32 -> DefaultScope Yandex URL = hxxp://www.yandex.ru/yandsearch?stype=&nl=0&text={searchTerms}\
SearchScopes: HKLM-x32 -> Google URL = hxxp://www.google.ru/search?hl=ru&q={searchTerms}\
SearchScopes: HKLM-x32 -> Wikipedia URL = hxxp://ru.wikipedia.org/wiki/{searchTerms}\
SearchScopes: HKLM-x32 -> Yandex URL = hxxp://www.yandex.ru/yandsearch?stype=&nl=0&text={searchTerms}\
SearchScopes: HKU\S-1-5-21-3710839944-1452387350-2688565584-1000 -> DefaultScope Yandex URL = 
SearchScopes: HKU\S-1-5-21-3710839944-1452387350-2688565584-1000 -> Google URL = 
SearchScopes: HKU\S-1-5-21-3710839944-1452387350-2688565584-1000 -> Wikipedia URL = 
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-3710839944-1452387350-2688565584-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-06-04] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-06-04] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-06-04] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-06-04] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 4ketb4b0.default
FF ProfilePath: C:\Users\sopraninho\AppData\Roaming\Mozilla\Firefox\Profiles\4ketb4b0.default [2018-01-18]
FF Homepage: Mozilla\Firefox\Profiles\4ketb4b0.default -> www.google.co.uk
FF Extension: (Disable JavaScript Shared Memory) - C:\Users\sopraninho\AppData\Roaming\Mozilla\Firefox\Profiles\4ketb4b0.default\features\{5ebefa46-397f-4e26-9c9a-0a825d8d9686}\disable-js-shared-memory@mozilla.org.xpi [2018-01-05] [Przestarzałe]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-09] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2010-05-05] (Adobe Systems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2010-07-10] (Oracle)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-09] ()
FF Plugin-x32: @bittorrent.com/BitTorrentDNA -> C:\Program Files (x86)\DNA\plugins\npbtdna.dll [2018-01-05] (BitTorrent, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2016-01-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2016-01-01] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default [2017-12-12]
CHR Extension: (Dokumenty) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-06]
CHR Extension: (Dysk Google) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-06]
CHR Extension: (YouTube) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-12-06]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-06]
CHR Extension: (Gmail) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-06]
CHR Extension: (Chrome Media Router) - C:\Users\sopraninho\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-06]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AIPS; C:\Program Files (x86)\arcai.com\aips.exe [1833472 2017-05-19] (Arcai.com) [Brak podpisu cyfrowego]
R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [678912 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [678912 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6998536 2018-01-14] ()
R2 BFE; C:\Windows\System32\bfe.dll [704000 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 Browser; C:\Windows\System32\browser.dll [136192 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [599384 2017-08-01] (cFos Software GmbH)
R2 Dhcp; C:\Windows\system32\dhcpcore.dll [315904 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [181760 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 DPS; C:\Windows\system32\dps.dll [162816 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 eventlog; C:\Windows\System32\wevtsvc.dll [1647616 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 FontCache; C:\Windows\system32\FntCache.dll [1137664 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 gpsvc; C:\Windows\System32\gpsvc.dll [775168 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 IKEEXT; C:\Windows\System32\ikeext.dll [852992 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-09-21] (Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-09-21] (Intel(R) Corporation)
R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [568832 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [197264 2017-09-25] (Intel Corporation)
R2 LanmanServer; C:\Windows\system32\srvsvc.dll [235520 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc.)
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2667192 2017-10-13] (MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2347704 2017-08-31] (MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [5151928 2017-10-13] (MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2247864 2017-10-06] (MSI)
S2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2489016 2017-09-04] (MSI)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [132048 2017-02-21] (Micro-Star INT'L CO., LTD.)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2017-08-31] (MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [4848312 2017-08-31] (MSI)
S2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [75192 2017-04-12] (Micro-Star INT'L CO., LTD.)
S2 MSI_DPCLTSERVICE; C:\Program Files (x86)\MSI\DPC Latency Tuner\DPCLT_Service.exe [2151072 2017-10-06] (Micro-Star INT'L CO., LTD.)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [111568 2017-04-05] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2304696 2017-11-01] (Micro-Star INT'L CO., LTD.)
R2 MSI_MYSTICLIGHTSERVICE; C:\Program Files (x86)\MSI\Mystic Light\MysticLight_Service.exe [2043344 2017-04-05] (Micro-Star INT'L CO., LTD.)
S2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [70608 2016-12-02] (Micro-Star Int'l Co., Ltd.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [173520 2017-03-17] (MSI)
R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [409600 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 ProfSvc; C:\Windows\system32\profsvc.dll [209408 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 RasMan; C:\Windows\System32\rasmans.dll [343552 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 SessionEnv; C:\Windows\system32\sessenv.dll [122368 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [114176 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 Spooler; C:\Windows\System32\spoolsv.exe [557568 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 stisvc; C:\Windows\System32\wiaservc.dll [579584 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S4 SysMain; C:\Windows\system32\sysmain.dll [1715712 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 TermService; C:\Windows\System32\termsrv.dll [675840 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2010-08-12] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 UmRdpService; C:\Windows\System32\umrdp.dll [214528 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 vds; C:\Windows\System32\vds.exe [532992 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 WebClient; C:\Windows\System32\webclnt.dll [254464 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [202240 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [442368 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 WinRM; C:\Windows\system32\WsmSvc.dll [2018816 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1175040 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [116736 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 wudfsvc; C:\Windows\System32\WUDFSvc.dll [78848 2010-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18264 2017-02-23] (Intel(R) Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation)
S2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [67736 2017-10-20] (Logitech Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [200784 2017-07-25] (Intel Corporation)
R1 NetPeeker; C:\Windows\System32\DRIVERS\netpeeker.sys [1757648 2017-12-26] (eMing Software Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF; C:\Windows\SysWOW64\drivers\npf.sys [14448 2002-03-20] (Politecnico di Torino) [Brak podpisu cyfrowego]
S3 NTIOLib_ACTIVE_X; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NTIOLib_X64.sys [13776 2016-04-12] (MSI)
S3 NTIOLib_CC_DDR; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [14288 2017-07-10] (MSI)
S3 NTIOLib_DPC; C:\Program Files (x86)\MSI\DPC Latency Tuner\NTIOLib_X64.sys [14288 2017-03-29] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [14288 2017-03-29] (MSI)
S3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\Mystic Light\Lib\NTIOLib_X64.sys [14288 2017-03-08] (MSI)
R3 NTIOLib_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [14288 2017-03-15] (MSI)
R2 RAMDriv; C:\Windows\System32\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S3 NTIOLib_1_0_C; \??\L:\NTIOLib_X64.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-18 18:10 - 2018-01-18 18:10 - 000019985 _____ C:\Users\sopraninho\Downloads\FRST.txt
2018-01-18 18:05 - 2018-01-18 18:10 - 000000000 ____D C:\FRST
2018-01-18 18:05 - 2018-01-18 18:05 - 002393088 _____ (Farbar) C:\Users\sopraninho\Downloads\FRST64.exe
2018-01-17 22:32 - 2018-01-17 22:32 - 000279136 _____ C:\Windows\Minidump\011718-16801-01.dmp
2018-01-17 19:29 - 2018-01-17 19:30 - 000000000 ____D C:\Users\sopraninho\Desktop\FixitPC
2018-01-15 18:43 - 2018-01-15 18:44 - 000000241 _____ C:\Users\sopraninho\Desktop\Nowy dokument tekstowy.txt
2018-01-15 18:41 - 2018-01-15 18:41 - 000000000 ____D C:\Windows\CheckSur
2018-01-15 18:23 - 2018-01-15 18:33 - 564744309 _____ C:\Users\sopraninho\Downloads\Windows6.1-KB947821-v34-x64.msu
2018-01-15 17:35 - 2018-01-15 17:53 - 000000000 ____D C:\Users\sopraninho\Desktop\Nowy folder
2018-01-15 15:34 - 2018-01-15 15:34 - 000167034 _____ C:\Users\sopraninho\Downloads\fileassassin-setup-1.06.exe
2018-01-15 15:34 - 2018-01-15 15:34 - 000001068 _____ C:\Users\Public\Desktop\FileASSASSIN.lnk
2018-01-15 15:34 - 2018-01-15 15:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN
2018-01-15 15:34 - 2018-01-15 15:34 - 000000000 ____D C:\Program Files (x86)\FileASSASSIN
2018-01-15 15:23 - 2018-01-15 15:23 - 000000000 ____D C:\Users\sopraninho\AppData\Local\ElevatedDiagnostics
2018-01-15 15:20 - 2018-01-15 15:20 - 000000000 ____D C:\Users\sopraninho\AppData\Local\UnrealEngine
2018-01-15 15:20 - 2018-01-15 15:20 - 000000000 ____D C:\Users\sopraninho\AppData\Local\TslGame
2018-01-15 15:20 - 2018-01-15 15:20 - 000000000 ____D C:\Users\sopraninho\AppData\Local\NVIDIA Corporation
2018-01-15 14:18 - 2018-01-15 14:18 - 000000000 _____ C:\autoexec.bat
2018-01-15 14:16 - 2018-01-15 14:16 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\sopraninho\Downloads\SpyHunter-Installer.exe
2018-01-15 14:13 - 2018-01-15 14:13 - 004027136 _____ (Speedy HLDGS ) C:\Users\sopraninho\Downloads\setup.exe
2018-01-09 18:31 - 2018-01-09 18:31 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2018-01-09 18:31 - 2018-01-09 18:31 - 000000000 ____D C:\Program Files\Realtek
2018-01-09 18:31 - 2017-03-29 23:40 - 015202032 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 003299816 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 002190984 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 001382232 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 001337640 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 000852136 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 000604800 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2018-01-09 18:31 - 2017-03-29 23:40 - 000075536 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 003410832 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 003122648 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 001435136 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000984912 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000965016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000873456 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000532368 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000467152 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000381408 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000341144 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000341144 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000221960 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000209528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000166200 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2018-01-09 18:31 - 2017-03-29 23:39 - 000158696 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 003503040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 001016416 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000876400 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SEHDHF32.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000867152 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000865104 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000736936 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000525256 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000214824 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000110976 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000088312 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2018-01-09 18:31 - 2017-03-29 23:38 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2018-01-09 18:31 - 2017-03-29 23:37 - 003494264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2018-01-09 18:31 - 2017-03-29 23:37 - 003082024 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2018-01-09 18:31 - 2017-03-29 23:37 - 001353272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2018-01-09 18:31 - 2017-03-29 23:37 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2018-01-09 18:31 - 2017-03-29 23:37 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2018-01-09 18:31 - 2017-03-29 23:32 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2018-01-09 18:31 - 2017-03-29 23:32 - 005707264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2018-01-09 18:31 - 2017-03-29 23:32 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2018-01-09 18:31 - 2017-03-29 23:32 - 003014656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2018-01-09 18:31 - 2017-03-29 23:32 - 002209280 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2018-01-09 18:31 - 2017-03-29 23:32 - 000258864 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2018-01-09 18:31 - 2017-03-29 23:32 - 000105304 _____ C:\Windows\system32\audioLibVc.dll
2018-01-09 18:31 - 2017-03-29 23:32 - 000023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2018-01-09 18:31 - 2017-03-29 18:08 - 012733323 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2018-01-09 18:31 - 2017-03-29 18:08 - 005804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2018-01-09 18:30 - 2017-03-29 23:37 - 001780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 001591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000708304 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000680544 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000406448 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2APIPCLL.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000366120 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000360344 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000253856 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000203840 _____ (Harman) C:\Windows\system32\HMHVS.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000179592 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000134192 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2018-01-09 18:30 - 2017-03-29 23:37 - 000084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 005346992 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 002993712 _____ (Audyssey Labs) C:\Windows\system32\AudysseyEfx.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 002444680 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001959600 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001520008 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOProp.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001326416 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOv251.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 001170872 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOvlldp.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000362048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000310416 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2018-01-09 18:30 - 2017-03-29 23:36 - 000252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 007172904 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 006264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 001133064 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 000416504 _____ (Harman) C:\Windows\system32\HMUI.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 000378376 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 000154360 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 000122312 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2018-01-09 18:30 - 2017-03-29 23:32 - 000118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2018-01-09 18:30 - 2016-09-22 06:55 - 002839520 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2018-01-06 21:51 - 2018-01-06 21:58 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\Awesomium
2018-01-06 20:17 - 2017-07-29 22:12 - 000004144 _____ C:\Users\sopraninho\Desktop\l2.ini
2018-01-06 18:22 - 2018-01-06 18:22 - 000000606 _____ C:\Users\sopraninho\Desktop\L2 — skrót.lnk
2018-01-06 18:08 - 2009-04-06 09:08 - 000005174 _____ C:\Windows\SysWOW64\nppt9x.vxd
2018-01-06 18:08 - 2009-04-06 09:08 - 000004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys
2018-01-06 17:39 - 2018-01-06 17:42 - 1841514781 _____ C:\Users\sopraninho\Downloads\Lineage_II_High_Five_Installer.zip
2018-01-06 17:00 - 2018-01-06 16:59 - 004957771 ____R C:\Users\sopraninho\Desktop\Leatrix_Latency_Fix_3.03.zip
2018-01-06 16:49 - 2018-01-06 16:49 - 001821696 _____ C:\Users\sopraninho\Downloads\L2Ashenvale.exe
2018-01-06 16:47 - 2018-01-06 16:47 - 000000000 ____D C:\Users\sopraninho\Desktop\l2ice
2018-01-06 16:34 - 2018-01-06 16:34 - 000000000 ____D C:\Users\sopraninho\Desktop\System l2graveland
2018-01-05 21:30 - 2018-01-06 09:09 - 000000000 ____D C:\Users\sopraninho\Downloads\l2europ[ooooo
2018-01-05 18:50 - 2018-01-06 17:42 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\BitTorrent
2018-01-05 18:49 - 2018-01-18 18:07 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\DNA
2018-01-05 18:49 - 2018-01-18 16:26 - 000000000 ____D C:\Program Files (x86)\DNA
2018-01-05 18:49 - 2018-01-05 18:49 - 000000000 ____D C:\Users\sopraninho\AppData\Local\DNA
2018-01-05 18:49 - 2018-01-05 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitTorrent
2018-01-05 18:49 - 2018-01-05 18:49 - 000000000 ____D C:\Program Files (x86)\BitTorrent
2018-01-05 16:57 - 2018-01-05 16:59 - 064585472 ____H C:\Users\sopraninho\Downloads\.getxfer.4940.0.mega
2018-01-05 16:54 - 2018-01-05 16:54 - 000000000 ____D C:\Windows\System32\Tasks\MEGA
2018-01-05 16:54 - 2018-01-05 16:54 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2018-01-05 16:54 - 2018-01-05 16:54 - 000000000 ____D C:\Users\sopraninho\AppData\Local\MEGAsync
2018-01-05 16:54 - 2018-01-05 16:54 - 000000000 ____D C:\Users\sopraninho\AppData\Local\Mega Limited
2018-01-03 19:49 - 2018-01-03 19:49 - 000180083 _____ C:\Users\sopraninho\Desktop\piti jest gej.wma
2018-01-01 22:24 - 2018-01-15 14:09 - 000000655 _____ C:\Users\sopraninho\Desktop\celownik csgo.txt
2018-01-01 20:38 - 2018-01-01 20:55 - 000000000 ____D C:\Users\sopraninho\AppData\Local\Rock__N__Roll_Defense
2017-12-31 18:56 - 2018-01-15 11:48 - 000000095 _____ C:\Windows\winamp.ini
2017-12-31 18:56 - 2017-12-31 18:56 - 000000000 ____D C:\Program Files (x86)\Winamp
2017-12-31 18:54 - 2017-12-31 18:54 - 000001604 _____ C:\Users\sopraninho\Desktop\house.m3u
2017-12-30 20:15 - 2018-01-02 12:55 - 000000000 ____D C:\ProgramData\SmartGuard
2017-12-26 23:44 - 2017-12-26 23:45 - 000000000 ____D C:\Program Files (x86)\NAPI-PROJEKT
2017-12-26 23:44 - 2017-12-26 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2017-12-26 23:24 - 2018-01-18 17:29 - 000000684 _____ C:\Windows\SysWOW64\rsatest.txt
2017-12-26 23:24 - 2018-01-18 17:29 - 000000064 _____ C:\Windows\SysWOW64\aes.txt
2017-12-26 23:24 - 2018-01-18 16:28 - 000000000 ____D C:\Program Files (x86)\arcai.com
2017-12-26 23:24 - 2017-12-26 23:24 - 000000123 _____ C:\Users\Public\Desktop\netcut.url
2017-12-26 23:24 - 2017-12-26 23:24 - 000000123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\netcut.url
2017-12-26 23:24 - 2017-12-26 23:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\netcut
2017-12-26 23:23 - 2017-12-26 23:24 - 003167112 _____ (arcai.com ) C:\Users\sopraninho\Downloads\netcut.exe
2017-12-26 23:20 - 2017-12-26 23:20 - 000000000 ____D C:\Windows\pss
2017-12-26 23:16 - 2017-12-26 23:16 - 000915128 _____ (Riverbed Technology, Inc.) C:\Users\sopraninho\Downloads\WinPcap_4_1_3(1).exe
2017-12-26 23:12 - 2017-12-26 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arcai.com
2017-12-26 23:08 - 2017-12-26 23:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2017-12-26 23:07 - 2017-12-26 23:07 - 000915128 _____ (Riverbed Technology, Inc.) C:\Users\sopraninho\Downloads\WinPcap_4_1_3.exe
2017-12-26 23:02 - 2018-01-18 18:05 - 000107287 _____ C:\Windows\NetPkr.str
2017-12-26 23:02 - 2018-01-18 16:26 - 000002548 _____ C:\Windows\NetPkr.Rul
2017-12-26 23:02 - 2017-12-26 23:02 - 001757648 _____ (eMing Software Inc.) C:\Windows\system32\Drivers\netpeeker.sys
2017-12-26 23:02 - 2017-12-26 23:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Net-Peeker
2017-12-26 23:02 - 2017-12-26 23:02 - 000000000 ____D C:\ProgramData\eMingSoftware
2017-12-26 23:02 - 2017-12-26 23:02 - 000000000 ____D C:\Program Files (x86)\NetPeeker
2017-12-26 22:59 - 2017-12-26 23:01 - 013786027 _____ C:\Users\sopraninho\Downloads\Net-Peeker.Personal.4.0.0.1383.zip
2017-12-26 15:02 - 2017-12-26 15:02 - 000000000 ____D C:\Users\sopraninho\Documents\My Games
2017-12-22 18:09 - 2018-01-07 20:15 - 000000430 _____ C:\Users\sopraninho\Desktop\jakis informacje.txt
2017-12-20 22:27 - 2017-12-20 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2017-12-19 16:48 - 2017-12-19 16:48 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\Adobe
2017-12-19 16:47 - 2018-01-09 19:11 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-19 16:47 - 2018-01-09 19:11 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-19 16:47 - 2018-01-09 19:11 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-12-19 16:47 - 2018-01-09 19:11 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-19 16:47 - 2017-12-19 16:47 - 000000000 ____D C:\Users\sopraninho\AppData\Roaming\Macromedia
2017-12-19 16:46 - 2018-01-01 02:05 - 000000000 ____D C:\Users\sopraninho\AppData\Local\Adobe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-18 17:27 - 2017-12-07 18:08 - 000000000 ____D C:\Users\sopraninho\AppData\LocalLow\Mozilla
2018-01-18 16:47 - 2017-12-07 18:24 - 000000000 ____D C:\Program Files (x86)\Steam
2018-01-18 16:35 - 2009-07-14 04:45 - 000016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-18 16:35 - 2009-07-14 04:45 - 000016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-18 16:26 - 2016-01-01 00:52 - 000000286 _____ C:\Windows\Tasks\RtlNetworkGenieVistaStart.job
2018-01-18 16:26 - 2009-07-14 05:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-18 00:24 - 2017-12-06 20:35 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-01-17 22:32 - 2017-12-09 23:20 - 888742625 _____ C:\Windows\MEMORY.DMP
2018-01-17 22:32 - 2017-12-09 23:20 - 000000000 ____D C:\Windows\Minidump
2018-01-17 18:58 - 2016-01-01 00:52 - 000069756 _____ C:\Windows\cFosSpeed_Setup_Log.txt
2018-01-15 18:07 - 2016-01-01 00:39 - 000000000 ____D C:\ProgramData\Package Cache
2018-01-15 17:45 - 2017-08-16 13:46 - 000438080 _____ (Microsoft Corporation) C:\Users\sopraninho\Desktop\msvcp140.dll
2018-01-15 14:18 - 2016-01-01 00:26 - 000000000 ____D C:\Users\sopraninho
2018-01-09 19:11 - 2010-08-12 20:06 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-09 18:31 - 2016-01-01 00:41 - 000000000 ____D C:\Windows\system32\RTCOM
2018-01-09 18:31 - 2016-01-01 00:41 - 000000000 ____D C:\Windows\system32\DAX3
2018-01-09 18:31 - 2016-01-01 00:41 - 000000000 ____D C:\Windows\system32\DAX2
2018-01-09 18:31 - 2016-01-01 00:41 - 000000000 ____D C:\ProgramData\Audyssey Labs
2018-01-09 18:31 - 2016-01-01 00:40 - 000000000 ___HD C:\Program Files (x86)\Temp
2018-01-09 18:31 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\inf
2018-01-09 18:30 - 2016-01-01 00:39 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-01-09 00:01 - 2016-01-01 00:48 - 000002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-01-06 18:24 - 2017-12-07 18:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-05 18:34 - 2017-12-07 18:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-30 16:31 - 2010-08-12 15:32 - 000738468 _____ C:\Windows\system32\perfh015.dat
2017-12-30 16:31 - 2010-08-12 15:32 - 000154578 _____ C:\Windows\system32\perfc015.dat
2017-12-30 16:31 - 2009-07-14 15:18 - 000714708 _____ C:\Windows\system32\perfh019.dat
2017-12-30 16:31 - 2009-07-14 15:18 - 000149382 _____ C:\Windows\system32\perfc019.dat
2017-12-30 16:31 - 2009-07-14 05:13 - 002529024 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-26 23:24 - 2017-12-12 20:40 - 000000000 ____D C:\Program Files (x86)\WinPcap
2017-12-26 23:12 - 2017-12-12 20:40 - 000000000 ____D C:\Program Files (x86)\netcut
2017-12-22 21:46 - 2017-12-15 20:49 - 000003262 _____ C:\Windows\System32\Tasks\shutdown

Niektóre pliki w TEMP:
====================
2018-01-15 19:04 - 2018-01-15 19:04 - 000000180 _____ () C:\Users\sopraninho\AppData\Local\Temp\00e481b5e22dbe1f649fcddd505d3eb7.dll
2018-01-15 19:04 - 2018-01-17 19:37 - 000000017 _____ () C:\Users\sopraninho\AppData\Local\Temp\d53f26eb6520244f1993015a10dbf430.dll

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe
[2009-07-13 23:56] - [2010-08-13 07:37] - 003399680 _____ (Microsoft Corporation) CDA2947B8AF350D9C5072C6C9B5478DB

C:\Windows\SysWOW64\explorer.exe
[2010-08-13 07:52] - [2010-08-13 07:31] - 003144704 _____ (Microsoft Corporation) 8FC9F53A65A29BFB9EF1A8FBD9797DB8

C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll
[2009-07-13 23:38] - [2010-06-04 08:41] - 001008128 _____ (Microsoft Corporation) 6B179C1FB800F953757CC5F5ED42DF94

C:\Windows\SysWOW64\User32.dll
[2009-07-13 23:24] - [2010-06-04 07:43] - 000828416 _____ (Microsoft Corporation) 8BE2DDDAFE3778FF1E5C8B5802055587

C:\Windows\system32\userinit.exe
[2009-07-13 23:50] - [2010-06-04 08:38] - 000030720 _____ (Microsoft Corporation) FEC03AB7D1B2DB3909CB931B2D2B7C7E

C:\Windows\SysWOW64\userinit.exe
[2009-07-13 23:34] - [2010-06-04 07:51] - 000026624 _____ (Microsoft Corporation) A1C9C01C02AF6A2C81CAC34CD5E65F9B

C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll
[2009-07-13 23:21] - [2010-06-04 08:38] - 000356864 _____ (Microsoft Corporation) 90F1DF4FCE7B5DA11AC3708EDF876EBA

C:\Windows\SysWOW64\dnsapi.dll
[2009-07-13 23:12] - [2010-06-04 07:51] - 000270336 _____ (Microsoft Corporation) 0A4DAE5FC272BE9897F6C61DFFA3A994

C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-12-19 19:45

==================== Koniec  FRST.txt ============================