Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:17-10-2015
Uruchomiony przez DigiBen (administrator)  PIECYK (17-10-2015 20:48:10)
Uruchomiony z C:\Users\DigiBen\Desktop
Załadowane profile: DigiBen (Dostępne profile: DigiBen & Stachu)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Windows\DAODx.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
() C:\Program Files (x86)\screenSHU\screenSHU.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\GOG.com\Galaxy\redists\overlay\GalaxyOverlay.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1603544 2015-10-01] (Bitdefender)
HKU\S-1-5-21-1271271425-2080827528-1651923955-1000\...\Run: [screenSHU] => C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-1271271425-2080827528-1651923955-1000\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-06-18] (Bitdefender)
HKU\S-1-5-21-1271271425-2080827528-1651923955-1000\...\Run: [GalaxyClient] => [X]

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{20E9B46B-0BB5-4D14-AF64-B12BE4C87239}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1271271425-2080827528-1651923955-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1271271425-2080827528-1651923955-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-10-02] (Bitdefender)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-10-02] (Bitdefender)
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-10-02] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-10-02] (Bitdefender)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-28] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-28] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff [2015-08-08] [Brak cyfrowego]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-08-08] [Brak cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/","hxxp://www.istartsurf.com/?type=hp&ts=1425237692&from=squadm&uid=ST1000DM003-1ER162_W4Y0QFYWXXXXW4Y0QFYW"
CHR Profile: C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-03]
CHR Extension: (Dokumenty Google) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-03]
CHR Extension: (Dysk Google) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-03]
CHR Extension: (YouTube) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-03]
CHR Extension: (Google Search) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-03]
CHR Extension: (Bitdefender Wallet) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-08-09]
CHR Extension: (Arkusze Google) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (agar.io server browser) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\hongpdkjnjhijmdnogoicadboadgllhi [2015-05-24]
CHR Extension: (Agario Extended – Enhance Agar.io Gameplay) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mflicjopopjcpojfoefhbpdncmjbcbin [2015-05-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-03]
CHR Extension: (Agario) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\opdiopijpijeidpfdflpnjiobiocjldd [2015-05-24]
CHR Extension: (Gmail) - C:\Users\DigiBen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2015-07-24] (Bitdefender)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Brak podpisu cyfrowego]
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1616440 2015-10-16] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6952504 2015-10-15] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-16] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-04-28] ()
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [838224 2015-10-14] (Valve Corporation) [Brak podpisu cyfrowego]
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2015-04-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1537648 2015-10-01] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1369288 2015-05-28] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [271272 2015-05-29] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [747120 2015-05-28] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160032 2015-10-01] (BitDefender LLC)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [52736 2010-11-23] (Realtek Semiconductor Corporation                           )
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-10-01] (BitDefender S.R.L.)
R3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
R3 ALSysIO; \??\C:\Users\DigiBen\AppData\Local\Temp\ALSysIO64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
U3 ffldapog; \??\C:\Users\DigiBen\AppData\Local\Temp\ffldapog.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-17 20:48 - 2015-10-17 20:48 - 00015357 _____ C:\Users\DigiBen\Desktop\FRST.txt
2015-10-17 20:42 - 2015-10-17 20:42 - 00282583 _____ C:\Users\DigiBen\Desktop\gmer_log.log
2015-10-17 19:35 - 2015-10-17 19:35 - 00000000 ____D C:\Users\DigiBen\Desktop\gmer
2015-10-17 19:26 - 2015-10-17 20:48 - 00000000 ____D C:\FRST
2015-10-17 19:20 - 2015-10-17 19:20 - 00006999 _____ C:\Users\DigiBen\Desktop\hijackthis.log
2015-10-17 19:15 - 2015-10-17 19:15 - 00370943 _____ C:\Users\DigiBen\Desktop\gmer.zip
2015-10-17 18:27 - 2015-10-17 18:27 - 02196992 _____ (Farbar) C:\Users\DigiBen\Desktop\FRST64.exe
2015-10-17 18:26 - 2015-10-17 18:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\DigiBen\Desktop\HijackThis_2.0.4.exe
2015-10-14 22:26 - 2015-10-15 19:30 - 00000000 ____D C:\Users\Stachu\AppData\Roaming\TS3Client
2015-10-14 22:26 - 2015-10-14 22:26 - 00000935 _____ C:\Users\Stachu\Desktop\TeamSpeak 3 Client.lnk
2015-10-14 16:21 - 2015-10-14 16:21 - 00000000 ____D C:\Users\Stachu\AppData\Roaming\OpenOffice
2015-10-14 12:42 - 2015-10-14 12:42 - 00000202 _____ C:\Users\Stachu\Desktop\Counter-Strike.url
2015-10-12 18:23 - 2015-10-12 18:23 - 00000000 ____D C:\Users\Stachu\AppData\Roaming\NVIDIA
2015-10-12 18:22 - 2015-10-12 18:22 - 00000000 ____D C:\Users\Stachu\AppData\Local\Steam
2015-10-12 18:22 - 2015-10-12 18:22 - 00000000 ____D C:\Users\Stachu\AppData\Local\CEF
2015-10-12 18:20 - 2015-10-12 18:20 - 00066168 _____ C:\Users\Stachu\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-12 18:02 - 2015-10-12 18:02 - 00000363 _____ C:\Users\Stachu\Desktop\Komputer — skrót.lnk
2015-10-12 17:59 - 2015-10-16 18:07 - 00000000 ____D C:\Users\Stachu\AppData\Local\Google
2015-10-12 17:59 - 2015-10-12 18:04 - 00000000 ____D C:\Users\Stachu\AppData\Roaming\Bitdefender
2015-10-12 17:59 - 2015-10-12 18:01 - 00002265 _____ C:\Users\Stachu\Desktop\Google Chrome.lnk
2015-10-12 17:59 - 2015-10-12 17:59 - 00001455 _____ C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-12 17:59 - 2015-10-12 17:59 - 00001421 _____ C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-10-12 17:59 - 2015-10-12 17:59 - 00000020 ___SH C:\Users\Stachu\ntuser.ini
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Ustawienia lokalne
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Szablony
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Moje dokumenty
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Menu Start
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Documents\Moje wideo
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Documents\Moje obrazy
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Documents\Moja muzyka
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\Dane aplikacji
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\AppData\Local\Historia
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 _SHDL C:\Users\Stachu\AppData\Local\Dane aplikacji
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 ____D C:\Users\Stachu\AppData\Local\VirtualStore
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 ____D C:\Users\Stachu\AppData\Local\NVIDIA Corporation
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 ____D C:\Users\Stachu\AppData\Local\NVIDIA
2015-10-12 17:59 - 2015-10-12 17:59 - 00000000 ____D C:\Users\Stachu
2015-10-12 17:59 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-12 17:59 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-09 18:00 - 2015-10-09 18:00 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\Opera Software
2015-10-09 18:00 - 2015-10-09 18:00 - 00000000 ____D C:\Users\DigiBen\AppData\Local\Opera Software
2015-10-09 17:58 - 2015-10-12 18:00 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-09 17:58 - 2015-10-09 17:58 - 00001165 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk
2015-10-09 17:58 - 2015-10-09 17:58 - 00001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2015-10-09 17:58 - 2015-10-09 17:58 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\OpenCandy
2015-10-09 17:58 - 2015-10-09 17:58 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\Canneverbe Limited
2015-10-09 17:58 - 2015-10-09 17:58 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2015-10-09 17:58 - 2015-10-09 17:58 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2015-10-09 17:57 - 2015-10-09 17:57 - 05650560 _____ (Canneverbe Limited ) C:\Users\DigiBen\Downloads\cdbxp_setup_4.5.6.5844.exe
2015-10-09 17:56 - 2015-10-09 17:56 - 01129293 _____ C:\Users\DigiBen\Downloads\installer.zip
2015-10-06 21:14 - 2015-10-06 21:14 - 00000000 ____D C:\Users\DigiBen\Documents\SniperEliteV2_Benchmark
2015-10-06 20:48 - 2015-10-06 20:48 - 00000000 ____D C:\Users\DigiBen\AppData\Local\SniperV2
2015-10-06 16:59 - 2015-10-06 17:01 - 00000000 ____D C:\Users\DigiBen\Documents\ArcheAge
2015-10-06 16:59 - 2015-10-06 16:59 - 00000000 ____D C:\ArcheAge
2015-10-06 10:33 - 2015-10-06 22:08 - 00000000 ____D C:\Users\DigiBen\AppData\Local\Glyph
2015-10-06 10:33 - 2015-10-06 10:34 - 00000000 ____D C:\ProgramData\Glyph
2015-10-06 10:33 - 2015-10-06 10:33 - 00000616 _____ C:\Users\DigiBen\Desktop\Glyph.lnk
2015-10-06 10:33 - 2015-10-06 10:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph
2015-10-06 10:31 - 2015-10-06 10:32 - 31274360 _____ (Trion Worlds Inc.) C:\Users\DigiBen\Downloads\GlyphInstall-0-120.exe
2015-10-04 10:40 - 2015-10-04 11:12 - 00001048 _____ C:\Users\DigiBen\Desktop\results.txt
2015-10-03 22:41 - 2015-10-04 11:17 - 00000437 _____ C:\Users\DigiBen\Desktop\prime.txt
2015-10-03 20:39 - 2015-10-04 10:33 - 00000148 _____ C:\Users\DigiBen\Desktop\local.txt
2015-10-03 17:14 - 2015-10-03 17:14 - 00000585 _____ C:\Users\Public\Desktop\Guild Wars 2.lnk
2015-10-03 17:14 - 2015-10-03 17:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2
2015-10-03 16:22 - 2015-10-03 16:28 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\Guild Wars 2
2015-10-03 16:19 - 2015-10-03 16:20 - 26068984 _____ (ArenaNet) C:\Users\DigiBen\Downloads\Gw2Setup.exe
2015-09-28 17:26 - 2015-09-28 17:26 - 00000809 _____ C:\Users\DigiBen\Desktop\_Autopatcher-MarinerMT2.exe — skrót.lnk
2015-09-27 14:34 - 2015-09-27 14:35 - 22773111 _____ C:\Users\DigiBen\Downloads\AiSuite_V10546_XpVistaWin7.zip
2015-09-27 14:21 - 2015-10-04 10:33 - 00001087 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-09-27 14:21 - 2015-09-27 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-09-27 14:21 - 2015-09-27 14:21 - 00000000 ____D C:\Program Files\CPUID
2015-09-27 14:20 - 2015-09-27 14:20 - 05380762 _____ C:\Users\DigiBen\Downloads\p95v287.win64.zip
2015-09-27 14:20 - 2015-09-27 14:20 - 01199856 _____ ( ) C:\Users\DigiBen\Downloads\hwmonitor_1.28.exe
2015-09-27 14:20 - 2015-08-10 02:47 - 36370432 _____ C:\Users\DigiBen\Desktop\prime95.exe
2015-09-27 11:56 - 2015-09-27 11:56 - 00000210 _____ C:\Users\DigiBen\Desktop\Rainbow Six Siege - Closed Beta.url
2015-09-23 14:15 - 2015-09-23 14:57 - 1317253117 _____ C:\Users\DigiBen\Downloads\MarinerMT2.pl-17.06.2015.rar
2015-09-22 14:01 - 2015-09-22 14:01 - 00011858 _____ C:\Users\DigiBen\Downloads\Tzar _Ciezar_Korony_[PL][Torrenty.org].torrent
2015-09-20 13:33 - 2015-09-20 13:34 - 00000000 ____D C:\Users\DigiBen\AppData\Local\PAYDAY 2
2015-09-19 18:05 - 2015-09-19 18:05 - 00000206 _____ C:\Users\DigiBen\Desktop\PAYDAY 2.url
2015-09-18 22:23 - 2015-09-18 22:23 - 00000205 _____ C:\Users\DigiBen\Desktop\BRINK.url
2015-09-17 21:05 - 2015-09-17 21:05 - 00000206 _____ C:\Users\DigiBen\Desktop\The Binding of Isaac Rebirth.url

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-17 20:29 - 2015-04-03 18:54 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-17 19:24 - 2015-04-03 18:42 - 00954823 _____ C:\Windows\WindowsUpdate.log
2015-10-17 18:03 - 2015-05-19 20:20 - 00000000 ____D C:\Users\DigiBen\Documents\The Witcher 3
2015-10-17 13:00 - 2009-07-14 06:51 - 00088566 _____ C:\Windows\setupact.log
2015-10-17 12:28 - 2015-04-03 22:50 - 00000000 ____D C:\Users\DigiBen\AppData\Local\screenSHU
2015-10-17 12:28 - 2015-04-03 18:54 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-17 12:26 - 2015-04-03 18:55 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-17 12:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 00:21 - 2015-04-03 19:41 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\TS3Client
2015-10-13 20:44 - 2015-05-19 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-10-12 19:54 - 2015-04-03 19:16 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-10-11 16:10 - 2010-11-21 14:53 - 00738734 _____ C:\Windows\system32\perfh015.dat
2015-10-11 16:10 - 2010-11-21 14:53 - 00154844 _____ C:\Windows\system32\perfc015.dat
2015-10-11 16:10 - 2009-07-14 07:13 - 01665128 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-10 14:39 - 2010-11-21 05:47 - 00169954 _____ C:\Windows\PFRO.log
2015-10-08 22:41 - 2015-04-03 19:17 - 00000000 ____D C:\Users\DigiBen\AppData\Local\Steam
2015-10-06 18:58 - 2015-04-04 17:14 - 00000000 ____D C:\Users\DigiBen\AppData\Roaming\LolClient
2015-10-03 12:49 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-10-01 16:40 - 2015-08-08 17:41 - 00477272 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2015-10-01 16:40 - 2015-08-08 17:41 - 00160032 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2015-09-27 21:28 - 2015-07-06 19:30 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-09-27 14:36 - 2015-04-03 19:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-27 14:36 - 2015-04-03 19:04 - 00001769 _____ C:\Windows\Language_trs.ini
2015-09-27 14:19 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-27 14:19 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-26 21:43 - 2015-04-26 19:30 - 00000000 ____D C:\ProgramData\Origin
2015-09-26 16:56 - 2015-04-26 19:52 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-09-26 16:56 - 2015-04-03 20:27 - 00408207 _____ C:\Windows\DirectX.log
2015-09-26 16:56 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-09-20 18:57 - 2015-06-07 19:15 - 00000000 ____D C:\Program Files (x86)\GalaxyClient

==================== Pliki w katalogu głównym wybranych folderów =======

2015-08-08 17:55 - 2015-08-08 17:55 - 0712725 _____ () C:\ProgramData\1439048496.bdinstall.bin
2015-04-03 19:15 - 2015-04-03 19:15 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => MD5 jest poprawne
C:\Windows\SysWOW64\User32.dll => MD5 jest poprawne
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-10-11 09:30

==================== Koniec  FRST.txt ============================