Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:14-09-2015
Uruchomiony przez Konrad (administrator)  MORDOR (14-09-2015 19:46:34)
Uruchomiony z F:\Pobieranie
Załadowane profile: Konrad (Dostępne profile: Konrad)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\ShrewSoft\VPN Client\dtpd.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
() C:\Program Files\ShrewSoft\VPN Client\iked.exe
() C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
() C:\Windows\system\GfsMgr64.exe
() C:\Windows\SysWOW64\GfsMgr.exe
() C:\Windows\SysWOW64\ExMgr.exe
() C:\Program Files\HD Audio PCI-e Audio Device\CPL\FaceLift_x64.exe
(Spotify Ltd) C:\Users\Konrad\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Microsoft Corporation) C:\Windows\regedit.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2015-01-25] (Intel Corporation)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-06] (COMODO)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2015-01-27] (Realtek Semiconductor)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [282288 2015-05-21] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [GFS64] => C:\Windows\system\GfsMgr64.exe [286720 2015-08-06] ()
HKLM\...\Run: [GFS] => C:\Windows\syswow64\GfsMgr.exe [204800 2015-08-06] ()
HKLM\...\Run: [SC808HDEX] => C:\Windows\syswow64\ExMgr.exe [204800 2015-08-06] ()
HKLM\...\Run: [SC808HDSound] => C:\Program Files\HD Audio PCI-e Audio Device\CPL\FaceLift_x64.exe [2325504 2015-08-06] ()
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1014736 2015-01-21] (MSI)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [764472 2015-01-21] ()
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2015-01-21] ()
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [407904 2015-03-14] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153952 2015-03-14] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2015-08-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-09-01] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1783125985-2266738585-356277231-1000\...\Run: [Spotify Web Helper] => C:\Users\Konrad\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-15] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Login Connect.lnk [2015-08-13]
ShortcutTarget: VPN Login Connect.lnk -> C:\Program Files\ShrewSoft\VPN Client\ipsecc.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26275E89-4D6F-4C7F-8C16-9A71951C7EFB}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4BF3EEDF-A18A-450D-AB60-84D4A8FDCBC0}: [NameServer] 172.23.0.230
Tcpip\..\Interfaces\{9C891799-87CD-4392-9AEC-5010D795193A}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1783125985-2266738585-356277231-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Microsoft Project\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-21] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-21] (Oracle Corporation)
DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Microsoft Project\Office15\MSOSB.DLL [2015-08-12] (Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-11-27] (Citrix Systems, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\7wipln9i.default
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Bing 
FF Homepage: hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pl-pl
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @Citrix.com/npagee64,version=10.5.55.8 -> C:\Program Files\Citrix\Secure Access Client\npagee64.dll [2015-01-25] (Citrix Systems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin-x32: @Citrix.com/npagee,version=10.5.55.8 -> C:\Program Files\Citrix\Secure Access Client\npagee.dll [2015-01-25] (Citrix Systems, Inc.)
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2014-11-27] (Citrix Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-04-28] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-04-28] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-04-28] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-04-28] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Konrad\AppData\Roaming\mozilla\plugins\npagee.dll [2015-01-25] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Konrad\AppData\Roaming\mozilla\plugins\npagee64.dll [2015-01-25] (Citrix Systems, Inc.)
FF Extension: Bing Search - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\7wipln9i.default\Extensions\bingsearch.full@microsoft.com [2015-07-26]
FF Extension: Bitdefender QuickScan - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\7wipln9i.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2015-09-14]
FF Extension: Adblock Plus - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\7wipln9i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-21]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-21]
CHR Extension: (Dokumenty Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-21]
CHR Extension: (Dysk Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-21]
CHR Extension: (YouTube) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-21]
CHR Extension: (Google Search) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-21]
CHR Extension: (Arkusze Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-08]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-21]
CHR Extension: (Gmail) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-21]
CHR HKU\S-1-5-21-1783125985-2266738585-356277231-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ATLOISAService; C:\Windows\system\ATLOISAService.exe [489472 2015-08-06] (Cmedia Electronics Inc.) [Brak podpisu cyfrowego]
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-09-07] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-06] (COMODO)
R2 dtpd; C:\Program Files\ShrewSoft\VPN Client\dtpd.exe [57176 2013-07-01] ()
S4 ECOSERVICE; C:\Program Files (x86)\MSI\ECO Center\ECO_Service.exe [2240680 2015-01-21] (Micro-Star International Co., Ltd.)
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-08-04] (Foxit Software Inc.)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2014-12-10] (Futuremark)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [23504 2015-01-21] (Micro-Star Int'l Co., Ltd.)
R2 iked; C:\Program Files\ShrewSoft\VPN Client\iked.exe [1127736 2013-07-01] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2015-01-22] (Intel(R) Corporation)
R2 ipsecd; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [810808 2013-07-01] ()
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2015-01-25] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-22] (Intel Corporation)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2015-09-07] () [Brak podpisu cyfrowego]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-09-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-09-14] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2015-01-21] (MSI) [Brak podpisu cyfrowego]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2015-01-21] (MSI) [Brak podpisu cyfrowego]
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2117632 2015-01-21] () [Brak podpisu cyfrowego]
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2015-01-21] () [Brak podpisu cyfrowego]
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2015-01-21] () [Brak podpisu cyfrowego]
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2015-01-21] () [Brak podpisu cyfrowego]
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2015-01-21] () [Brak podpisu cyfrowego]
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [575488 2015-01-21] () [Brak podpisu cyfrowego]
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2015-01-21] (MSI)
S4 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [1732048 2015-01-21] (Micro-Star International)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2015-01-21] (MSI)
S4 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2015-01-27] (Qualcomm Atheros) [Brak podpisu cyfrowego]
R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28848 2015-05-21] (Samsung Electronics Co., Ltd.)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2015-01-21] (Micro-Star International)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2015-01-21] (Intel(R) Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2015-01-21] (Intel Corporation)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2015-05-16] (Advanced Micro Devices, Inc.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [82096 2015-01-27] (Qualcomm Atheros, Inc.)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21184 2015-08-05] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [806032 2015-08-05] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45856 2015-08-05] (COMODO)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2015-09-08] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2015-09-08] ()
R3 FMHdAudAddService; C:\Windows\System32\DRIVERS\SC808HDV64.sys [68096 2015-08-06] (C-Media Electronics Inc.)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2015-01-25] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2015-01-25] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [23936 2014-02-03] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105096 2015-08-05] (COMODO)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-18] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2015-01-25] ()
S3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [129200 2014-03-27] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-09-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-09-14] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2015-01-22] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2015-01-21] (MSI)
S3 NTIOLib_ECO; C:\Program Files (x86)\MSI\ECO Center\NTIOLib_X64.sys [13808 2015-01-21] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MB; C:\Program Files (x86)\MSI\MSI Gaming APP\Lib\NTIOLib_X64.sys [13808 2015-01-21] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2015-01-21] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2015-01-21] (MSI)
R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [271024 2015-05-21] (Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2015-05-21] (Samsung Electronics Co., Ltd.)
S3 ALSysIO; \??\C:\Users\Konrad\AppData\Local\Temp\ALSysIO64.sys [X]
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [X]
S3 cpuz138; \??\C:\Users\Konrad\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-14 19:35 - 2015-09-14 19:46 - 00000000 ____D C:\FRST
2015-09-14 19:32 - 2015-09-14 19:32 - 00002742 _____ C:\Users\Konrad\Desktop\fixit.txt
2015-09-14 18:43 - 2015-09-14 18:43 - 00000000 ____D C:\TDSSKiller_Quarantine
2015-09-14 18:42 - 2015-09-14 18:45 - 00001880 _____ C:\Users\Konrad\Desktop\sc-cleaner.txt
2015-09-14 18:38 - 2015-09-14 18:38 - 00000000 ____D C:\Users\Konrad\Doctor Web
2015-09-14 18:36 - 2015-09-14 18:45 - 00002040 _____ C:\Users\Konrad\Desktop\Rkill.txt
2015-09-14 18:33 - 2015-09-14 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2015-09-14 18:33 - 2015-09-14 18:33 - 00000000 ____D C:\Program Files\HitmanPro
2015-09-14 18:26 - 2015-09-14 18:26 - 00000762 _____ C:\Windows\system32\.crusader
2015-09-14 18:20 - 2015-09-14 18:31 - 00000000 ____D C:\ProgramData\HitmanPro
2015-09-14 18:01 - 2015-09-14 18:46 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-09-14 17:56 - 2015-09-14 18:31 - 00000000 ____D C:\KVRT_Data
2015-09-14 17:54 - 2015-09-14 17:54 - 00000000 ____D C:\ProgramData\Doctor Web
2015-09-14 17:27 - 2015-09-14 17:56 - 00000000 ____D C:\Users\Konrad\AppData\Roaming\QuickScan
2015-09-14 17:18 - 2015-09-14 19:44 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-14 17:18 - 2015-09-14 18:39 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-14 17:18 - 2015-09-14 17:18 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-09-14 17:18 - 2015-09-14 17:18 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-09-14 17:18 - 2015-09-14 17:18 - 00001112 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-14 17:18 - 2015-09-14 17:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-14 17:18 - 2015-09-14 17:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-14 17:18 - 2015-09-14 17:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-14 10:19 - 2015-09-14 19:09 - 00005700 _____ C:\Windows\PFRO.log
2015-09-13 23:12 - 2015-09-13 23:12 - 00012429 _____ C:\Users\Konrad\Desktop\obliczenia.xlsx
2015-09-13 17:41 - 2015-09-14 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-09-10 20:14 - 2015-09-10 20:14 - 00000204 _____ C:\Users\Konrad\Desktop\BioShock Infinite.url
2015-09-09 18:39 - 2015-09-09 18:40 - 00000000 ____D C:\Windows\rescache
2015-09-09 17:16 - 2015-09-13 17:41 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-09-09 09:06 - 2015-09-09 09:06 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 09:06 - 2015-09-09 09:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 09:06 - 2015-09-09 09:06 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-09 09:06 - 2015-09-09 09:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-09 09:06 - 2015-09-09 09:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-09 09:06 - 2015-09-09 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 09:06 - 2015-09-09 09:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-09 09:06 - 2015-09-09 09:06 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-09 09:06 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-09 09:06 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-09 09:06 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-09 09:06 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-09 09:05 - 2015-09-09 09:05 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 09:05 - 2015-09-09 09:05 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 09:05 - 2015-09-09 09:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 09:05 - 2015-09-09 09:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 09:05 - 2015-09-09 09:05 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-09 09:05 - 2015-09-09 09:05 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-09 08:50 - 2015-09-14 19:43 - 00014352 _____ C:\Windows\setupact.log
2015-09-09 08:50 - 2015-09-14 10:19 - 00435392 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-09 08:50 - 2015-09-14 10:19 - 00111720 _____ C:\Users\Konrad\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-09 08:50 - 2015-09-09 08:50 - 00000000 _____ C:\Windows\setuperr.log
2015-09-08 17:50 - 2015-09-08 17:50 - 00001460 ____H C:\Windows\EPMBatch.ept
2015-09-08 17:42 - 2015-09-08 17:42 - 03428488 _____ C:\Windows\system32\BootMan.exe
2015-09-08 17:42 - 2015-09-08 17:42 - 02536072 _____ C:\Windows\SysWOW64\BootMan.exe
2015-09-08 17:42 - 2015-09-08 17:42 - 00101984 _____ C:\Windows\system32\setupempdrvx64.exe
2015-09-08 17:42 - 2015-09-08 17:42 - 00088160 _____ C:\Windows\SysWOW64\setupempdrv03.exe
2015-09-08 17:42 - 2015-09-08 17:42 - 00021088 _____ C:\Windows\SysWOW64\EuEpmGdi.dll
2015-09-08 17:42 - 2015-09-08 17:42 - 00017504 _____ C:\Windows\system32\EuEpmGdi.dll
2015-09-08 17:42 - 2015-09-08 17:42 - 00014944 _____ C:\Windows\SysWOW64\epmntdrv.sys
2015-09-08 17:42 - 2015-09-08 17:42 - 00010208 _____ C:\Windows\SysWOW64\EuGdiDrv.sys
2015-09-08 17:42 - 2015-09-08 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.5
2015-09-08 17:42 - 2014-11-18 14:39 - 00018528 _____ C:\Windows\system32\epmntdrv.sys
2015-09-08 17:42 - 2014-11-18 14:39 - 00010848 _____ C:\Windows\system32\EuGdiDrv.sys
2015-09-08 17:41 - 2015-09-08 17:41 - 00001240 _____ C:\Users\Konrad\Desktop\Continue EASEUS Partition Master installation.lnk
2015-09-07 20:07 - 2015-09-07 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-09-07 20:07 - 2015-09-07 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-09-07 20:06 - 2015-09-13 17:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 __RHD C:\MSOCache
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Windows\PCHEALTH
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Program Files\Microsoft Office
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-09-07 20:06 - 2015-09-07 20:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-09-06 19:17 - 2015-09-06 19:17 - 00000000 ____D C:\Users\Konrad\AppData\Local\AMD
2015-09-01 21:13 - 2015-09-01 21:13 - 00000000 ____D C:\ProgramData\ATI
2015-09-01 21:11 - 2015-09-01 21:11 - 00053443 _____ C:\Windows\SysWOW64\CCCInstall_201509012111035932.log
2015-09-01 21:10 - 2015-09-01 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-08-28 10:56 - 2015-08-28 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-22 21:21 - 2015-08-22 21:21 - 00000000 ____D C:\Users\Konrad\Documents\WB Games
2015-08-22 15:26 - 2015-08-22 15:26 - 00000847 _____ C:\Users\Konrad\Desktop\World of Baldur's Gate.lnk
2015-08-22 04:42 - 2015-09-01 21:09 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00107784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00100568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-08-22 04:42 - 2015-09-01 21:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-08-22 04:39 - 2015-09-01 21:09 - 00297672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-08-22 04:36 - 2015-09-01 21:09 - 21640192 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-08-22 04:32 - 2015-09-01 21:08 - 00235008 _____ C:\Windows\system32\clinfo.exe
2015-08-22 04:32 - 2015-08-22 04:32 - 47785472 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-08-22 04:31 - 2015-09-01 21:09 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-08-22 04:30 - 2015-09-01 21:09 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-22 04:30 - 2015-09-01 21:09 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-08-22 04:29 - 2015-09-01 21:09 - 27535872 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-08-22 04:29 - 2015-09-01 21:09 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-08-22 04:05 - 2015-09-01 21:09 - 06677504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-08-22 04:05 - 2015-09-01 21:09 - 00622592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2015-08-22 04:05 - 2015-09-01 21:09 - 00515584 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2015-08-22 04:05 - 2015-09-01 21:09 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-08-22 04:05 - 2015-09-01 21:09 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-08-22 04:00 - 2015-09-01 21:09 - 05207552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-08-22 03:57 - 2015-09-01 21:09 - 30767616 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-08-22 03:57 - 2015-09-01 21:09 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-08-22 03:57 - 2015-09-01 21:09 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-08-22 03:56 - 2015-09-01 21:09 - 00094720 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-08-22 03:56 - 2015-09-01 21:09 - 00088064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-08-22 03:55 - 2015-08-22 03:55 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-08-22 03:53 - 2015-09-01 21:09 - 15716864 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-08-22 03:53 - 2015-09-01 21:09 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-08-22 03:53 - 2015-09-01 21:09 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-08-22 03:53 - 2015-09-01 21:09 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-08-22 03:53 - 2015-09-01 21:09 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-08-22 03:53 - 2015-08-22 03:53 - 00662392 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-08-22 03:53 - 2015-08-22 03:53 - 00662392 _____ C:\Windows\system32\atiapfxx.blb
2015-08-22 03:53 - 2015-08-22 03:53 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-08-22 03:52 - 2015-09-01 21:09 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-08-22 03:51 - 2015-09-01 21:09 - 25311744 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-08-22 03:50 - 2015-08-22 03:50 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-08-22 03:49 - 2015-09-01 21:09 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-08-22 03:49 - 2015-09-01 21:09 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-08-22 03:49 - 2015-08-22 03:49 - 00160256 _____ C:\Windows\system32\atieah64.exe
2015-08-22 03:49 - 2015-08-22 03:49 - 00143872 _____ C:\Windows\SysWOW64\atieah32.exe
2015-08-22 03:48 - 2015-09-01 21:09 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-08-22 03:48 - 2015-09-01 21:09 - 00029696 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-08-22 03:48 - 2015-08-22 03:48 - 00674816 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-08-22 03:48 - 2015-08-22 03:48 - 00246784 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-08-22 03:46 - 2015-09-01 21:09 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2015-08-22 03:46 - 2015-09-01 21:09 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00156672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-08-22 03:45 - 2015-09-01 21:09 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-08-22 03:45 - 2015-08-22 03:45 - 00665600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-08-22 03:42 - 2015-09-01 21:09 - 00102912 _____ C:\Windows\system32\hsa-thunk64.dll
2015-08-22 03:42 - 2015-09-01 21:09 - 00102400 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-08-18 17:47 - 2015-08-18 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout Fixt
2015-08-18 17:40 - 2015-08-18 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Interplay
2015-08-15 17:17 - 2015-09-08 17:28 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2015-08-15 17:17 - 2015-08-15 17:17 - 00000000 ____D C:\Users\Konrad\AppData\Local\Bluestacks

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-14 19:45 - 2015-01-22 01:04 - 00006469 _____ C:\Windows\SysWOW64\Gms.log
2015-09-14 19:44 - 2015-01-27 15:47 - 00003020 _____ C:\Windows\System32\Tasks\MSIAfterburner
2015-09-14 19:43 - 2015-01-21 22:46 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-14 19:43 - 2015-01-21 22:45 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2015-09-14 19:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-14 19:43 - 2009-07-14 06:45 - 00024528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-14 19:43 - 2009-07-14 06:45 - 00024528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-14 19:41 - 2015-01-28 18:33 - 01078924 _____ C:\Windows\WindowsUpdate.log
2015-09-14 19:13 - 2011-04-12 15:21 - 00819790 _____ C:\Windows\system32\perfh015.dat
2015-09-14 19:13 - 2011-04-12 15:21 - 00203104 _____ C:\Windows\system32\perfc015.dat
2015-09-14 19:13 - 2009-07-14 07:13 - 01755082 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-14 19:08 - 2015-01-21 21:34 - 00000000 ____D C:\Users\Konrad
2015-09-14 19:07 - 2015-01-21 22:46 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-14 18:56 - 2015-02-08 14:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-14 18:43 - 2015-07-01 23:13 - 00000000 ____D C:\AdwCleaner
2015-09-14 12:19 - 2015-03-15 12:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-13 23:11 - 2015-08-12 00:46 - 13841594 _____ C:\Users\Konrad\Desktop\Magisterka.zip
2015-09-13 23:10 - 2015-08-04 13:07 - 00000000 ____D C:\Users\Konrad\Desktop\Magisterka
2015-09-13 17:41 - 2011-04-12 15:32 - 00000000 ____D C:\Windows\ShellNew
2015-09-13 17:41 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-09-13 17:40 - 2015-01-22 01:04 - 00000000 ____D C:\Users\Konrad\AppData\Roaming\DAEMON Tools Lite
2015-09-13 13:19 - 2015-07-01 17:49 - 00000000 ____D C:\Users\Konrad\AppData\Local\Battle.net
2015-09-11 21:57 - 2015-01-25 17:29 - 00000000 ____D C:\Users\Konrad\AppData\Roaming\BitTorrent
2015-09-09 17:44 - 2011-04-12 15:32 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 17:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-09 17:19 - 2015-01-21 22:07 - 00000000 ____D C:\Windows\system32\MRT
2015-09-09 17:15 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-09-08 22:22 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-09-08 18:08 - 2015-04-08 02:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BellumCrucis7
2015-09-08 18:08 - 2015-01-28 19:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Age of Wonders III Golden Realms
2015-09-08 18:08 - 2015-01-21 23:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-09-08 18:00 - 2015-06-11 23:32 - 00000000 ____D C:\Users\Konrad\Documents\The Witcher 3
2015-09-07 20:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-09-07 19:43 - 2015-03-15 13:24 - 00008192 _____ C:\Windows\SysWOW64\srvany.exe
2015-09-06 16:53 - 2015-02-03 22:38 - 00000000 ____D C:\Users\Konrad\AppData\Roaming\Spotify
2015-09-06 16:53 - 2015-02-03 22:38 - 00000000 ____D C:\Users\Konrad\AppData\Local\Spotify
2015-09-03 13:52 - 2014-12-09 01:20 - 00579408 _____ (COMODO) C:\Windows\system32\guard64.dll
2015-09-03 13:52 - 2014-12-09 01:20 - 00445472 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2015-09-01 21:09 - 2015-07-01 23:30 - 00865792 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-09-01 21:09 - 2015-01-21 22:57 - 00000000 ____D C:\Program Files\AMD
2015-09-01 21:09 - 2014-11-21 04:44 - 11974448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 10113728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 01458144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 01204192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 00120144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-09-01 21:09 - 2014-11-21 04:44 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-09-01 21:09 - 2014-11-21 04:43 - 08895768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-09-01 21:09 - 2014-11-21 04:43 - 08779336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-09-01 21:09 - 2014-11-21 04:43 - 07931152 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-09-01 21:09 - 2014-11-21 04:43 - 07408936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-09-01 21:09 - 2014-11-21 04:12 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-09-01 21:09 - 2014-11-21 04:09 - 01247744 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-09-01 21:08 - 2015-01-21 22:56 - 00000000 ____D C:\AMD
2015-08-29 07:51 - 2015-01-21 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-28 11:02 - 2015-01-21 22:46 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-28 11:02 - 2015-01-21 22:46 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-26 18:37 - 2015-01-21 22:07 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-22 21:19 - 2015-01-21 23:08 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-08-22 15:22 - 2015-03-13 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-08-22 15:22 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-22 00:19 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-08-18 17:40 - 2015-01-21 21:45 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-15 11:20 - 2015-01-21 23:25 - 00000000 __SHD C:\Users\Konrad\AppData\Local\EmieUserList
2015-08-15 11:20 - 2015-01-21 23:25 - 00000000 __SHD C:\Users\Konrad\AppData\Local\EmieSiteList
2015-08-15 11:20 - 2015-01-21 23:25 - 00000000 __SHD C:\Users\Konrad\AppData\Local\EmieBrowserModeList

==================== Pliki w katalogu głównym wybranych folderów =======

2015-01-22 02:08 - 2015-07-01 00:48 - 0000089 _____ () C:\Users\Konrad\AppData\Roaming\WB.CFG
2015-01-27 13:07 - 2015-01-27 13:07 - 0000000 _____ () C:\Users\Konrad\AppData\Local\Driver_LOM_8161Present.flag
2015-01-26 12:19 - 2015-01-26 12:19 - 0000017 _____ () C:\Users\Konrad\AppData\Local\resmon.resmoncfg
2015-08-13 05:54 - 2015-08-13 05:54 - 0000036 ___SH () C:\ProgramData\Shrew Soft VPN.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\Shrew Soft VPN.dat


Niektóre pliki w TEMP:
====================
C:\Users\Konrad\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-09-11 13:19

==================== Koniec  FRST.txt ============================