Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12.02.2018
Ran by SYSTEM on MININT-6BMNKL9 (18-02-2018 15:02:38)
Running from E:\PP\FRST
Platform: Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.[/b]

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-14] (Realtek Semiconductor)
HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-03] (CyberLink Corp.)
HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [UpdatePSTShortCut] => "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [Bonus.SSR.FR10] => C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [941320 2010-01-18] (ABBYY.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Samsung PanelMgr] => C:\windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-01-05] ()
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [296096 2012-10-14] (RealNetworks, Inc.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
Startup: C:\Users\euro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2015-04-28]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ABBYY.Licensing.FineReader.Corporate.10.0; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe [814344 2009-12-18] (ABBYY)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
S2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S4 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [153808 2010-06-08] (Avanquest Software)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; C:\windows\system32\ampa.sys [35760 2016-12-25] ()
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-07-14] (Windows (R) 2003 DDK 3790 provider)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-09-18] (Duplex Secure Ltd.)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 cpuz132; \??\C:\Users\euro\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
S2 DgiVecp; \??\C:\windows\system32\Drivers\DgiVecp.sys [X]
S2 eamonm; system32\DRIVERS\eamonm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-16 14:34 - 2018-02-18 15:02 - 000000000 ____D C:\FRST
2018-02-13 16:31 - 2018-02-10 11:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2018-02-13 16:31 - 2018-02-09 22:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2018-02-13 16:31 - 2018-02-09 21:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2018-02-13 16:31 - 2018-02-09 21:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2018-02-13 16:31 - 2018-02-09 21:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2018-02-13 16:31 - 2018-02-09 21:45 - 000668160 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2018-02-13 16:31 - 2018-02-09 21:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2018-02-13 16:31 - 2018-02-09 21:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2018-02-13 16:31 - 2018-02-09 21:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2018-02-13 16:31 - 2018-02-09 21:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2018-02-13 16:31 - 2018-02-09 21:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2018-02-13 16:31 - 2018-02-09 21:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2018-02-13 16:31 - 2018-02-09 21:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2018-02-13 16:31 - 2018-02-09 21:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2018-02-13 16:31 - 2018-02-09 21:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2018-02-13 16:31 - 2018-01-12 08:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2018-02-13 16:31 - 2018-01-12 08:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2018-02-13 16:31 - 2018-01-12 08:29 - 001309928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2018-02-13 16:31 - 2018-01-12 08:29 - 000250600 _____ (Microsoft Corporation) C:\Windows\System32\clfs.sys
2018-02-13 16:31 - 2018-01-12 08:29 - 000240872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2018-02-13 16:31 - 2018-01-12 08:29 - 000187624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2018-02-13 16:31 - 2018-01-12 08:29 - 000137960 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2018-02-13 16:31 - 2018-01-12 08:29 - 000067304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2018-02-13 16:31 - 2018-01-12 08:27 - 001310528 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2018-02-13 16:31 - 2018-01-12 08:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\System32\StructuredQuery.dll
2018-02-13 16:31 - 2018-01-12 08:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\System32\xpsrchvw.exe
2018-02-13 16:31 - 2018-01-12 08:05 - 000055808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2018-02-13 16:31 - 2018-01-12 08:05 - 000025728 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2018-02-13 16:31 - 2018-01-11 08:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2018-02-13 16:31 - 2018-01-11 08:01 - 002403328 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2018-02-13 16:31 - 2018-01-05 08:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2018-02-13 16:31 - 2018-01-05 08:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\System32\t2embed.dll
2018-02-13 16:31 - 2018-01-05 08:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2018-02-13 16:30 - 2018-02-09 22:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2018-02-13 16:30 - 2018-02-09 22:07 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2018-02-13 16:30 - 2018-02-09 21:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2018-02-13 16:30 - 2018-02-09 21:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2018-02-13 16:30 - 2018-02-09 21:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2018-02-13 16:30 - 2018-02-09 21:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2018-02-13 16:30 - 2018-02-09 21:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2018-02-13 16:30 - 2018-02-09 21:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2018-02-13 16:30 - 2018-02-09 21:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2018-02-13 16:30 - 2018-02-09 21:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2018-02-13 16:30 - 2018-02-09 21:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2018-02-13 16:30 - 2018-02-09 21:49 - 000104960 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2018-02-13 16:30 - 2018-02-09 21:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2018-02-13 16:30 - 2018-02-09 21:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2018-02-13 16:30 - 2018-02-09 21:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2018-02-13 16:30 - 2018-02-09 21:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2018-02-13 16:30 - 2018-02-09 21:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2018-02-13 16:30 - 2018-02-09 21:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2018-02-13 16:30 - 2018-02-09 21:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2018-02-13 16:30 - 2018-02-09 21:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2018-02-13 16:30 - 2018-02-09 21:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 001062912 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000655360 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000400896 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000099840 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000082432 _____ (Microsoft Corporation) C:\Windows\System32\bcrypt.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2018-02-13 16:30 - 2018-01-12 08:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2018-02-13 16:30 - 2018-01-12 08:05 - 000024064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys
2018-02-13 16:30 - 2018-01-12 08:02 - 000097792 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe
2018-02-13 16:30 - 2018-01-12 08:02 - 000050688 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys
2018-02-13 16:30 - 2018-01-12 08:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2018-02-13 16:30 - 2018-01-12 08:02 - 000029696 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll
2018-02-13 16:30 - 2018-01-12 08:02 - 000016896 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe
2018-02-13 16:30 - 2018-01-12 07:59 - 000262656 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2018-02-13 16:30 - 2018-01-12 07:57 - 000226304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2018-02-13 16:30 - 2018-01-12 07:57 - 000124416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2018-02-13 16:30 - 2018-01-12 07:57 - 000098304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2018-02-13 16:30 - 2018-01-12 07:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2018-02-13 16:30 - 2018-01-12 07:56 - 000069632 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2018-02-13 16:30 - 2018-01-12 07:56 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2018-02-13 16:30 - 2018-01-12 07:56 - 000015872 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2018-02-13 16:30 - 2018-01-05 08:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2018-02-13 16:30 - 2018-01-05 08:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2018-02-13 16:30 - 2018-01-05 07:50 - 000034304 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2018-02-13 16:15 - 2018-02-13 16:15 - 000000975 _____ C:\Users\euro\Desktop\dmde — skrót.lnk
2018-02-10 09:42 - 2018-02-10 09:42 - 000000000 ____D C:\ProgramData\AomeiBR
2018-02-10 09:35 - 2018-02-10 11:13 - 000000000 ____D C:\Windows\amlog
2018-02-10 09:33 - 2018-02-10 09:48 - 000000980 _____ C:\Windows\ampa.ini
2018-02-10 09:32 - 2018-02-14 01:54 - 000028672 _____ C:\Windows\AMCPY2M
2018-02-10 09:14 - 2015-07-16 11:12 - 006131200 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2018-02-10 09:14 - 2015-07-16 11:12 - 000856064 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2018-02-10 09:14 - 2015-07-16 11:12 - 000053248 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2018-02-10 09:14 - 2015-07-16 07:14 - 000355840 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2018-02-10 09:14 - 2014-12-11 09:47 - 000074240 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2018-02-10 09:07 - 2018-02-14 01:51 - 000001024 ____H C:\AMTAG.BIN
2018-02-10 09:07 - 2018-02-10 09:07 - 000001247 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Standard Edition 6.6.lnk
2018-02-10 09:06 - 2018-02-14 01:51 - 000000000 ____D C:\Program Files\AOMEI Partition Assistant Standard Edition 6.6
2018-02-10 09:06 - 2017-11-20 06:45 - 001722728 _____ C:\Windows\ampa.exe
2018-02-10 09:06 - 2016-12-25 14:26 - 000035760 _____ C:\Windows\System32\ampa.sys
2018-02-09 14:19 - 2017-03-07 07:06 - 002746880 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2018-02-09 14:19 - 2017-03-07 07:06 - 000221184 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2018-02-09 14:19 - 2017-03-07 07:06 - 000013824 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2018-02-09 13:44 - 2012-08-23 06:44 - 000014848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2018-02-09 13:44 - 2012-08-23 03:12 - 000192000 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2018-02-09 13:40 - 2013-10-01 16:42 - 000049152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2018-02-09 13:40 - 2013-10-01 16:32 - 000012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2018-02-09 13:40 - 2013-10-01 16:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2018-02-09 13:40 - 2013-10-01 16:14 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2018-02-09 13:40 - 2013-10-01 16:14 - 000017920 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2018-02-09 13:40 - 2013-10-01 15:45 - 000032256 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2018-02-09 13:40 - 2013-10-01 14:34 - 001068544 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2018-02-09 13:37 - 2018-01-21 15:42 - 000117480 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
2018-02-09 13:37 - 2018-01-21 15:20 - 000533504 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 001893888 _____ (Microsoft Corporation) C:\Windows\System32\aitstatic.exe
2018-02-09 13:37 - 2018-01-19 06:05 - 001314304 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000594944 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000508416 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000337920 _____ (Microsoft Corporation) C:\Windows\System32\centel.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000311808 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000212992 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll
2018-02-09 13:37 - 2018-01-19 06:05 - 000190464 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2018-02-09 13:37 - 2017-12-05 09:08 - 000072704 _____ (Microsoft Corporation) C:\Windows\System32\TabSvc.dll
2018-02-09 13:37 - 2017-12-05 07:54 - 000334848 _____ (Microsoft Corporation) C:\Windows\System32\wisptis.exe
2018-02-08 11:00 - 2017-12-31 18:00 - 012880384 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 001499648 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 001417728 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 001390080 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 001155584 _____ (Microsoft Corporation) C:\Windows\System32\sysmain.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000872448 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000741888 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000564736 _____ (Microsoft Corporation) C:\Windows\System32\MPSSVC.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000463360 _____ (Microsoft Corporation) C:\Windows\System32\FirewallAPI.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000377344 _____ (Microsoft Corporation) C:\Windows\System32\rpcss.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000328192 _____ (Microsoft Corporation) C:\Windows\System32\p2psvc.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000294400 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000269824 _____ (Microsoft Corporation) C:\Windows\System32\pnrpsvc.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000217600 _____ (Microsoft Corporation) C:\Windows\System32\P2P.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000171008 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000089088 _____ (Microsoft Corporation) C:\Windows\System32\icfupgd.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\System32\INETRES.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000033280 _____ (Microsoft Corporation) C:\Windows\System32\traffic.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\oleres.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000010752 _____ (Microsoft Corporation) C:\Windows\System32\wshnetbs.dll
2018-02-08 11:00 - 2017-12-31 18:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 001806848 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000047104 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:54 - 001214184 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2018-02-08 11:00 - 2017-12-31 17:54 - 000712936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2018-02-08 11:00 - 2017-12-31 17:54 - 000201960 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fltMgr.sys
2018-02-08 11:00 - 2017-12-31 17:54 - 000198888 _____ (Microsoft Corporation) C:\Windows\System32\halmacpi.dll
2018-02-08 11:00 - 2017-12-31 17:54 - 000198888 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll
2018-02-08 11:00 - 2017-12-31 17:54 - 000173288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdyboost.sys
2018-02-08 11:00 - 2017-12-31 17:54 - 000139496 _____ (Microsoft Corporation) C:\Windows\System32\halacpi.dll
2018-02-08 11:00 - 2017-12-31 17:54 - 000105192 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2018-02-08 11:00 - 2017-12-31 17:50 - 000317952 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2018-02-08 11:00 - 2017-12-31 17:43 - 000104448 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pacer.sys
2018-02-08 11:00 - 2017-12-31 17:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mpsdrv.sys
2018-02-08 11:00 - 2017-12-31 17:43 - 000036352 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netbios.sys
2018-02-08 11:00 - 2017-12-31 17:43 - 000018944 _____ (Microsoft Corporation) C:\Windows\System32\wfapigp.dll
2018-02-08 11:00 - 2017-12-31 17:43 - 000013824 _____ (Microsoft Corporation) C:\Windows\System32\wshqos.dll
2018-02-08 11:00 - 2017-12-31 17:41 - 000007168 _____ (Microsoft Corporation) C:\Windows\System32\comcat.dll
2018-02-08 11:00 - 2017-12-31 17:38 - 000271360 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2018-02-08 11:00 - 2017-12-31 17:36 - 000314368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2018-02-08 11:00 - 2017-12-31 17:36 - 000313344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2018-02-08 11:00 - 2017-12-31 17:35 - 000514048 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys
2018-02-08 11:00 - 2017-12-31 17:35 - 000115712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2018-02-08 11:00 - 2017-12-31 17:35 - 000081408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dfsc.sys
2018-02-08 11:00 - 2017-12-31 17:35 - 000006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:35 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:35 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 11:00 - 2017-12-31 17:35 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2018-02-08 11:00 - 2017-12-20 22:27 - 000535656 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2018-02-08 11:00 - 2017-12-05 09:08 - 000481792 _____ (Microsoft Corporation) C:\Windows\System32\mscms.dll
2018-02-08 11:00 - 2017-12-05 09:08 - 000215040 _____ (Microsoft Corporation) C:\Windows\System32\icm32.dll
2018-02-08 11:00 - 2017-12-05 07:49 - 000032768 _____ (Microsoft Corporation) C:\Windows\System32\WcsPlugInService.dll
2018-02-07 03:12 - 2018-02-07 03:12 - 000000000 ____D C:\Program Files\Common Files\Adobe
2018-02-07 01:37 - 2017-11-07 08:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2018-02-07 01:37 - 2017-11-04 07:10 - 000158720 _____ (Microsoft Corporation) C:\Windows\System32\itircl.dll
2018-02-07 01:37 - 2017-11-04 07:10 - 000142336 _____ (Microsoft Corporation) C:\Windows\System32\itss.dll
2018-02-07 01:37 - 2017-11-02 07:11 - 000271360 _____ (Microsoft Corporation) C:\Windows\System32\iprtrmgr.dll
2018-02-07 01:37 - 2017-11-02 07:11 - 000115200 _____ (Microsoft Corporation) C:\Windows\System32\rtm.dll
2018-02-07 01:37 - 2017-11-02 07:11 - 000075264 _____ (Microsoft Corporation) C:\Windows\System32\mprdim.dll
2018-02-07 01:37 - 2017-11-02 06:56 - 000008192 _____ (Microsoft Corporation) C:\Windows\System32\iprtprio.dll
2018-02-07 01:37 - 2017-10-16 14:46 - 000953344 _____ (Microsoft Corporation) C:\Windows\System32\gpedit.dll
2018-02-07 01:37 - 2017-10-11 16:14 - 000247808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-16 15:21 - 2009-07-13 20:34 - 000014736 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-16 15:21 - 2009-07-13 20:34 - 000014736 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-14 02:00 - 2010-06-14 12:57 - 000744036 _____ C:\Windows\System32\perfh015.dat
2018-02-14 02:00 - 2010-06-14 12:57 - 000157486 _____ C:\Windows\System32\perfc015.dat
2018-02-14 02:00 - 2009-07-26 12:06 - 001679274 _____ C:\Windows\System32\PerfStringBackup.INI
2018-02-14 02:00 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\inf
2018-02-14 01:44 - 2016-12-29 10:42 - 002593792 ___SH C:\Users\euro\Desktop\Thumbs.db
2018-02-14 00:51 - 2009-07-13 20:33 - 000421800 _____ C:\Windows\System32\FNTCACHE.DAT
2018-02-13 16:55 - 2017-10-11 12:03 - 127229528 ____C (Microsoft Corporation) C:\Windows\System32\MRT-KB890830.exe
2018-02-13 16:55 - 2013-08-09 14:54 - 000000000 ____D C:\Windows\System32\MRT
2018-02-13 16:54 - 2010-09-18 08:10 - 127229528 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe
2018-02-13 16:50 - 2009-07-13 18:04 - 000000510 _____ C:\Windows\win.ini
2018-02-09 14:33 - 2012-01-29 11:48 - 000007597 _____ C:\Users\euro\AppData\Local\Resmon.ResmonCfg
2018-02-09 13:49 - 2015-04-15 20:33 - 000000000 ____D C:\Windows\System32\appraiser
2018-02-09 13:49 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-02-08 10:30 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\System32\Setup
2018-02-07 03:12 - 2010-10-07 12:38 - 000000000 ____D C:\Program Files\Adobe
2018-02-07 03:12 - 2010-08-11 03:26 - 000000000 ____D C:\ProgramData\Adobe
2018-01-23 10:58 - 2010-09-18 06:16 - 000456864 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2018-02-08 11:00] - [2017-12-31 18:00] - 000377344 _____ (Microsoft Corporation) BF1B8CFDE3B075F2DA2652C3D35EC212

C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 23%
Total physical RAM: 2008.61 MB
Available physical RAM: 1546.37 MB
Total Virtual: 2008.61 MB
Available Virtual: 1565.74 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:106.39 GB) (Free:60.67 GB) NTFS
Drive e: () (Fixed) (Total:106.39 GB) (Free:34.84 GB) NTFS
Drive f: (RECOVERY) (Fixed) (Total:20 GB) (Free:6.87 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive g: (Dysk naprawy Windows 7 32-bitowy) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF
Drive h: (KINGSTON 2G) (Removable) (Total:1.92 GB) (Free:0.29 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from drive)]


==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 1C17C5D5)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=106.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=106.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: 314ABAB0)
Partition 1: (Not Active) - (Size=1.9 GB) - (Type=0B)

LastRegBack: 2018-02-07 02:30

==================== End of FRST.txt ============================