Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20.06.2018 Uruchomiony przez Piotr (administrator) DESKTOP-FD31UJI (02-07-2018 15:15:36) Uruchomiony z C:\Users\Piotr\Downloads Załadowane profile: Piotr (Dostępne profile: Piotr) Platform: Windows 10 Enterprise Wersja 1703 15063.250 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe () C:\Windows\SysWOW64\PnkBstrA.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2017-11-15] (Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA HKLM\...\Policies\Explorer: [SettingsPageVisibility] hide:gaming-broadcasting;gaming-gamebar;gaming-gamedvr;maps HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1 HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKLM\...\Policies\Explorer: [NoResolveSearch] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-460240359-4123749713-1119489378-1003\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5263040 2018-02-12] (Disc Soft Ltd) HKU\S-1-5-21-460240359-4123749713-1119489378-1003\...\Run: [EpicGamesLauncher] => D:\GRY\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32930704 2018-06-21] (Epic Games, Inc.) HKU\S-1-5-21-460240359-4123749713-1119489378-1003\...\Winlogon: [Shell] C:\Windows\System32\cmd.exe [271872 2017-03-18] (Microsoft Corporation) <==== UWAGA HKU\S-1-5-21-460240359-4123749713-1119489378-1003\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist ( start /MIN "" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2018-05-21] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS) GroupPolicy: Ograniczenia ? <==== UWAGA GroupPolicy\User: Ograniczenia ? <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{a278898e-9d95-44e7-9fe5-2e865385a80a}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== BHO: Brak nazwy -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> C:\Windows\system32\OldNewExplorer64.dll [2016-07-26] (www.startisback.com) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-16] (Microsoft Corporation) Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-12-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-06-24] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-06-24] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default [2018-07-02] CHR Extension: (Prezentacje) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-19] CHR Extension: (Dokumenty) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-19] CHR Extension: (Dysk Google) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-19] CHR Extension: (YouTube) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-19] CHR Extension: (Adblock Plus) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-05-16] CHR Extension: (Arkusze) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-19] CHR Extension: (FBDown Video Downloader) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2018-06-22] CHR Extension: (Dokumenty Google offline) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-19] CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-06-08] CHR Extension: (Avast Online Security) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-19] CHR Extension: (Ghostery – Bloker reklam chroniący prywatność) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-06-01] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03] CHR Extension: (e-pity - dodatek) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoeigeaodhbjogdigckajfhjbonaofg [2018-03-28] CHR Extension: (Gmail) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-19] CHR Extension: (Chrome Media Router) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-09] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6875688 2018-06-19] () S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2018-02-19] (Creative Labs) [Brak podpisu cyfrowego] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [Brak podpisu cyfrowego] S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480768 2018-02-12] (Disc Soft Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-20] (EasyAntiCheat Ltd) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-09-21] (Intel(R) Corporation) S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-09-21] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [197264 2017-09-25] (Intel Corporation) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-01-10] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-01-10] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2018-03-02] () S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [227504 2018-03-17] (AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199440 2018-03-17] (AVAST Software) R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343752 2018-03-17] (AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57680 2018-03-17] (AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software) S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software) S3 cpuz143; C:\Windows\temp\cpuz143\cpuz143_x64.sys [48960 2018-07-02] (CPUID) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-02-19] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-02-19] (Disc Soft Ltd) R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [89912 2016-08-29] (Intel Corporation) R3 ksaud; C:\Windows\system32\drivers\ksaud.sys [1148288 2011-07-06] (Creative Technology Ltd.) R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_485c1c3102021986\nvlddmkm.sys [17200392 2018-06-25] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30280 2018-01-10] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [68112 2018-06-24] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1010648 2017-10-20] (Realtek ) S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] () R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [46896 2018-04-23] () R3 sshid; C:\Windows\System32\drivers\sshid.sys [47944 2018-01-16] (SteelSeries ApS) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) S3 WiseRegNotify; C:\Windows\WiseRegNotify.sys [29616 2017-04-30] (WiseCleaner.com) [Brak podpisu cyfrowego] U4 Fax; Brak ImagePath U4 IEEtwCollectorService; Brak ImagePath U4 MapsBroker; Brak ImagePath U4 napagent; Brak ImagePath U4 RetailDemo; Brak ImagePath U4 TimeBroker; Brak ImagePath U4 WcsPlugInService; Brak ImagePath U4 WPCSvc; Brak ImagePath U4 XblAuthManager; Brak ImagePath U4 XblGameSave; Brak ImagePath U4 XboxNetApiSvc; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-07-02 15:15 - 2018-07-02 15:15 - 002412544 _____ (Farbar) C:\Users\Piotr\Downloads\FRST64.exe 2018-07-02 15:15 - 2018-07-02 15:15 - 000019020 _____ C:\Users\Piotr\Downloads\FRST.txt 2018-07-02 15:15 - 2018-07-02 15:15 - 000000000 ____D C:\FRST 2018-07-02 13:14 - 2018-07-02 13:14 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2018-07-02 13:14 - 2018-06-24 17:40 - 000132032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2018-07-02 13:13 - 2018-07-02 13:14 - 000000000 ____D C:\Windows\LastGood 2018-07-02 13:12 - 2018-06-25 19:25 - 040346984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 035250256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 031244248 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 013728120 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 011273632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 004350040 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 003760672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 002013784 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439836.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 001563392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 001468448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439836.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 001419200 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 001216872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 001092360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 000749472 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 000626616 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 000608512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll 2018-07-02 13:12 - 2018-06-25 19:25 - 000518208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 025961336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 017750344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 015165008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 004856232 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 004126128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 001356816 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 001347664 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 001157392 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 001069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 001063216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 000904720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 000814616 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 000652344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2018-07-02 13:12 - 2018-06-25 19:24 - 000634760 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll 2018-07-02 13:12 - 2018-06-24 19:27 - 001688848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2018-07-02 13:12 - 2018-06-24 19:27 - 000227928 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2018-07-02 13:12 - 2018-06-24 19:27 - 000068112 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys 2018-07-02 13:12 - 2018-06-24 19:27 - 000047648 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2018-07-02 13:12 - 2018-06-24 19:27 - 000044271 _____ C:\Windows\system32\nvinfo.pb 2018-07-02 13:06 - 2018-07-02 13:06 - 000000000 ____D C:\Users\Piotr\ansel 2018-07-02 13:01 - 2018-07-02 15:01 - 000002588 _____ C:\Windows\System32\Tasks\CreateExplorerShellUnelevatedTask 2018-07-02 12:57 - 2018-07-02 12:57 - 079912960 _____ C:\Windows\system32\config\SOFTWARE.iobit 2018-07-02 12:57 - 2018-07-02 12:57 - 006512640 _____ C:\Windows\system32\config\DRIVERS.iobit 2018-07-02 12:57 - 2018-07-02 12:57 - 000352256 _____ C:\Windows\system32\config\DEFAULT.iobit 2018-07-02 12:57 - 2018-07-02 12:57 - 000040960 _____ C:\Windows\system32\config\SECURITY.iobit 2018-07-02 12:57 - 2018-07-02 12:57 - 000040960 _____ C:\Windows\system32\config\SAM.iobit 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\Windows\Tasks\ImCleanDisabled 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\IObit 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\Users\Piotr\AppData\LocalLow\IObit 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\ProgramData\ProductData 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\ProgramData\IObit 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216} 2018-07-02 12:55 - 2018-07-02 12:55 - 000000000 ____D C:\Program Files (x86)\IObit 2018-07-02 12:54 - 2018-07-02 12:55 - 029792784 _____ (IObit ) C:\Users\Piotr\Downloads\advanced-systemcare-setup.exe 2018-07-02 12:49 - 2018-07-02 12:49 - 007395536 _____ (Malwarebytes) C:\Users\Piotr\Downloads\adwcleaner_7.2.1.exe 2018-07-02 12:49 - 2018-07-02 12:49 - 000000000 ____D C:\AdwCleaner 2018-07-02 12:15 - 2018-07-02 12:15 - 000000372 _____ C:\Users\Piotr\Downloads\fix_explorer.zip 2018-07-02 12:15 - 2016-11-05 00:50 - 000000354 _____ C:\Users\Piotr\Desktop\fix_explorer.reg 2018-07-02 11:41 - 2018-07-02 11:41 - 000001660 __RSH C:\ProgramData\ntuser.pol 2018-07-01 20:03 - 2018-07-01 20:11 - 060052694 _____ C:\Users\Piotr\Downloads\The Sims 4 Seasons v1.44.77.1020 (Language Changer) MULTi17.zip 2018-07-01 19:46 - 2018-07-01 19:46 - 015620617 _____ C:\Users\Piotr\Downloads\MTS_simalary44_1521579_Strings.rar 2018-07-01 19:31 - 2018-07-01 19:31 - 000000000 ____D C:\Users\Piotr\AppData\Local\Origin 2018-07-01 19:24 - 2018-07-01 19:24 - 000000542 _____ C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\The Sims 4.lnk 2018-07-01 15:15 - 2018-07-01 15:15 - 000000000 ____D C:\Users\Piotr\AppData\LocalLow\uTorrent 2018-06-28 19:38 - 2018-06-28 19:38 - 000011735 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii (2018) [S01E05] [720p] [WEBRip] [x264-KiT] [PL].torrent 2018-06-28 19:37 - 2018-06-28 19:37 - 000014763 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii (2018) [S01E04] [WEBRip] [XviD-KiT] [PL] (1).torrent 2018-06-28 19:36 - 2018-06-28 19:37 - 000014763 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii (2018) [S01E04] [WEBRip] [XviD-KiT] [PL].torrent 2018-06-24 10:35 - 2018-06-24 10:35 - 000015616 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Gnomy rozrabiaja _ Gnome Alone (2017) [480p] [WEB-DL] [XViD] [AC3-MORS] [Dubbing PL] [Karibu].torrent 2018-06-24 08:27 - 2018-06-24 08:27 - 000002413 _____ C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-06-23 22:13 - 2018-07-02 13:38 - 000000000 ____D C:\Users\Piotr\AppData\Local\FluxSoftware 2018-06-23 22:13 - 2018-06-23 22:13 - 001555048 _____ ( ) C:\Users\Piotr\Downloads\f.lux-21432-AsystentPobierania_2125688016.exe 2018-06-23 22:13 - 2018-06-23 22:13 - 000832552 _____ C:\Users\Piotr\Downloads\flux-setup.exe 2018-06-23 22:13 - 2018-06-23 22:13 - 000000127 _____ C:\Windows\wininit.ini 2018-06-23 19:53 - 2018-06-23 19:53 - 000199577 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Player One - Ready Player One (2018) [1080p] [WEB-DL] [H264-WEBTiFUL] [MULTi22-Napisy PL].torrent 2018-06-23 00:34 - 2018-07-02 13:13 - 000000000 ____D C:\Users\Piotr\AppData\Local\NVIDIA 2018-06-23 00:33 - 2018-06-23 00:33 - 004100664 _____ (ppy) C:\Users\Piotr\Downloads\osu!install.exe 2018-06-23 00:33 - 2018-06-23 00:33 - 000000000 ____D C:\Users\Piotr\Downloads\Localisation 2018-06-18 11:25 - 2018-06-18 11:25 - 000048502 _____ C:\Users\Piotr\Downloads\Wniosek_42929_242467_20180110_211606.pdf 2018-06-14 12:47 - 2018-06-14 12:47 - 000063637 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Jeszcze Dalej Niz Polnoc - Bienvenue chez les Ch tis (2008) [DVDRip.XviD] [Lektor PL] [D.T.m1125].torrent 2018-06-13 23:01 - 2018-06-13 23:01 - 000000000 ____D C:\Users\Piotr\AppData\LocalLow\ProGames Studio 2018-06-13 19:56 - 2018-06-13 19:56 - 000021068 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii S01E03 - Hokus Pokus [720p.WEB-DL.H.264.AC3] [PL].torrent 2018-06-10 17:53 - 2018-06-10 17:53 - 000021103 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii 2018 (SEZON 1 E02) [720p] [WEBRip] [x264-KiT] [Serial polski] [zibi6248].torrent 2018-06-10 17:52 - 2018-06-10 17:52 - 000020842 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Kobiety mafii (2018) [S01E01] [720p] [WEBRip] [x264-KiT] [PL].torrent 2018-06-08 19:42 - 2018-06-08 19:42 - 009348248 _____ ( ) C:\Users\Piotr\Downloads\NapiProjektSetup2.2.0.2399.exe 2018-06-08 18:46 - 2018-06-08 18:46 - 000206596 _____ C:\Users\Piotr\Downloads\[EX-TORRENTY.ORG] Ciche miejsce _ A Quiet Place (2018) [720p] [HC] [HDRip] [X264] [AC3] [EVO] [NAPISY PL] [DarkAngel].torrent ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-07-02 15:01 - 2018-05-31 18:22 - 000003398 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000003176 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002984 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002956 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002914 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002838 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002786 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-05-31 18:22 - 000002744 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-07-02 15:01 - 2018-03-20 20:30 - 000002856 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-460240359-4123749713-1119489378-1003 2018-07-02 15:01 - 2018-02-19 01:31 - 000002218 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2018-07-02 15:01 - 2018-02-19 01:23 - 000003118 _____ C:\Windows\System32\Tasks\klcp_update 2018-07-02 15:01 - 2018-02-19 01:20 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2018-07-02 15:01 - 2018-02-19 01:16 - 000003118 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification 2018-07-02 15:01 - 2018-02-19 00:53 - 000003496 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2018-07-02 15:01 - 2018-02-19 00:53 - 000003272 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2018-07-02 15:01 - 2017-04-30 15:35 - 000003380 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4C578060-0740-4D33-8AEE-CF2DC3FC3A15} 2018-07-02 15:01 - 2017-04-30 14:44 - 000002546 _____ C:\Windows\System32\Tasks\StartIsBack health check 2018-07-02 14:00 - 2017-04-30 14:27 - 002662432 _____ C:\Windows\system32\PerfStringBackup.INI 2018-07-02 14:00 - 2017-03-20 05:58 - 001230540 _____ C:\Windows\system32\perfh015.dat 2018-07-02 14:00 - 2017-03-20 05:58 - 000284480 _____ C:\Windows\system32\perfc015.dat 2018-07-02 13:54 - 2018-02-19 01:12 - 000000000 ____D C:\ProgramData\NVIDIA 2018-07-02 13:53 - 2017-04-30 14:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-07-02 13:14 - 2018-05-31 18:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2018-07-02 13:14 - 2018-02-19 01:11 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2018-07-02 13:14 - 2017-03-18 23:01 - 000000000 ____D C:\Windows\INF 2018-07-02 13:08 - 2018-05-31 20:07 - 000000000 ____D C:\Users\Piotr\AppData\Local\NVIDIA Corporation 2018-07-02 13:06 - 2018-02-19 00:46 - 000000000 ____D C:\Users\Piotr 2018-07-02 12:58 - 2018-03-17 10:21 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2018-07-02 12:57 - 2018-02-25 23:48 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\MPC-HC 2018-07-02 12:57 - 2018-02-19 01:25 - 000000000 ____D C:\Program Files (x86)\Steam 2018-07-02 12:57 - 2018-02-19 01:21 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\DAEMON Tools Lite 2018-07-02 12:57 - 2017-04-30 15:21 - 000000000 ____D C:\Windows\Panther 2018-07-02 12:39 - 2017-03-18 13:40 - 000065536 _____ C:\Windows\system32\config\BBI 2018-07-02 12:28 - 2017-04-30 14:21 - 000000000 ____D C:\Windows\system32\SleepStudy 2018-07-01 23:46 - 2018-02-19 01:26 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\uTorrent 2018-07-01 20:14 - 2018-02-19 01:33 - 000000000 ___RD C:\Users\Piotr\Desktop\GAMES 2018-07-01 20:05 - 2018-05-07 00:13 - 000000928 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2018-07-01 20:05 - 2018-05-07 00:04 - 000001038 _____ C:\Users\Piotr\Desktop\TechPowerUp GPU-Z.lnk 2018-07-01 20:05 - 2018-03-28 17:37 - 000001173 _____ C:\Users\Piotr\Desktop\e-pity 2017 - program, pity roczne, e-deklaracje.lnk 2018-07-01 20:05 - 2018-02-19 01:35 - 000001302 _____ C:\Users\Piotr\Desktop\TeamSpeak 3 Client.lnk 2018-07-01 20:05 - 2018-02-19 01:31 - 000000879 _____ C:\Users\Public\Desktop\CCleaner.lnk 2018-07-01 20:05 - 2018-02-19 01:24 - 000001117 _____ C:\Users\Piotr\Desktop\NapiProjekt.lnk 2018-07-01 20:05 - 2018-02-19 01:21 - 000001838 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2018-07-01 20:05 - 2018-02-19 01:20 - 000001987 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2018-07-01 20:05 - 2018-02-19 00:54 - 000002404 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2018-07-01 18:37 - 2018-02-19 01:29 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\steelseries-engine-3-client 2018-07-01 17:37 - 2018-02-22 01:02 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\TS3Client 2018-06-27 11:29 - 2018-02-19 00:54 - 000002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-06-25 19:26 - 2018-05-31 18:21 - 000551840 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2018-06-25 19:26 - 2018-05-31 18:21 - 000457144 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2018-06-24 17:39 - 2018-05-31 18:21 - 000001951 _____ C:\Windows\NvContainerRecovery.bat 2018-06-24 17:31 - 2018-05-31 18:21 - 005947520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 002612624 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 001767360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 000633792 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 000451144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 000124200 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2018-06-24 17:31 - 2018-05-31 18:21 - 000083424 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2018-06-24 14:36 - 2018-05-07 16:34 - 000000000 ____D C:\Users\Piotr\AppData\Local\CrashDumps 2018-06-24 08:27 - 2018-02-19 00:49 - 000000000 ___RD C:\Users\Piotr\OneDrive 2018-06-23 14:23 - 2018-05-17 23:06 - 000004264 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2018-06-20 12:52 - 2018-05-31 18:21 - 008207422 _____ C:\Windows\system32\nvcoproc.bin 2018-06-18 11:51 - 2018-02-19 01:25 - 000000000 ____D C:\Users\Piotr\AppData\Local\Spotify 2018-06-18 11:42 - 2018-02-19 01:24 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Spotify 2018-06-17 01:02 - 2018-02-19 01:35 - 000000000 ____D C:\Users\Piotr\AppData\Local\TeamSpeak 3 Client 2018-06-13 23:01 - 2018-03-01 13:34 - 000000000 ____D C:\Users\Piotr\Documents\My Games 2018-06-11 23:28 - 2017-03-18 23:03 - 000000000 __SHD C:\Users\Public\Libraries 2018-06-08 19:42 - 2018-02-19 01:24 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\NapiProjekt ==================== Pliki w katalogu głównym wybranych folderów ======= 2018-03-20 21:00 - 2018-03-20 21:00 - 000738304 _____ () C:\Users\Piotr\AppData\Roaming\1758db578fa3a657241d3d450808c5a6.exe 2018-02-19 01:47 - 2018-02-19 01:47 - 000733184 _____ () C:\Users\Piotr\AppData\Roaming\6e53122d1854f281c3184321aa814b50.exe Niektóre pliki w TEMP: ==================== 2018-07-01 19:47 - 2018-07-01 19:47 - 004161132 _____ (Don HO don.h@free.fr) C:\Users\Piotr\AppData\Local\Temp\npp.7.5.6.Installer.exe 2018-05-31 18:22 - 2018-02-23 21:29 - 000879840 _____ (NVIDIA Corporation) C:\Users\Piotr\AppData\Local\Temp\nvSCPAPI64.dll 2018-07-02 13:12 - 2018-02-23 21:28 - 000372568 _____ (NVIDIA Corporation) C:\Users\Piotr\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2018-06-28 20:01 ==================== Koniec FRST.txt ============================