Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:06-05-2016 01
Uruchomiony przez Admin (administrator)  ADMIN-PC (05-05-2016 21:22:14)
Uruchomiony z C:\Users\Admin\Downloads
Załadowane profile: Admin (Dostępne profile: Admin)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(IObit) C:\Program Files\IObit\Advanced SystemCare\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Language Engineering Corporation, LLC) C:\Program Files\Power Translator 15\LogoMedia TranslateDotNet Server.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(NVIDIA) C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(sms-express.com) C:\Program Files\Gadu-Gadu\gg.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe
(ZTE) C:\Program Files\T-Mobile\InternetManager_Z\Bin\mcserver.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(IObit) C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
() C:\Program Files\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe
() C:\Program Files\T-Mobile\InternetManager_Z\Bin\db_daemon.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Admin\Downloads\FRST (1).exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2016-01-29] (NVIDIA Corporation)
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\Run: [NVIDIA nTune] => C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [81920 2007-09-04] (NVIDIA)
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\Run: [Gadu-Gadu] => C:\Program Files\Gadu-Gadu\gg.exe [765952 2004-06-30] (sms-express.com)
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\Run: [Advanced SystemCare 9] => C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe [2019616 2016-01-11] (IObit)
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\Run: [uTorrent] => C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe [2152448 2016-05-03] (BitTorrent Inc.)
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: E - E:\Startup.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: G - G:\autorun.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: L - L:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {0bd4726a-5949-11e5-b551-0060b31db7cb} - G:\installer.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {0bd47271-5949-11e5-b551-0060b31db7cb} - L:\setup.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {54c469f1-2daa-11e3-88ce-0060b31db7cb} - L:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {616a4fa3-2f96-11e5-978e-0019dba33127} - E:\setup.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {616a4fa9-2f96-11e5-978e-0019dba33127} - F:\autorun.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {8443827f-d100-11e3-a9ab-0019dba33127} - G:\autorun.exe
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\MountPoints2: {874787eb-33cc-11e5-9bac-0019dba33127} - G:\windows\Install\Install.exe
HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk [2015-11-07]
ShortcutTarget: mcserver.lnk -> C:\Program Files\T-Mobile\InternetManager_Z\Bin\mcserver.exe (ZTE)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{07153E41-3155-4C1C-AE31-9C604AE8CCC3}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0D12E5D6-9986-4C53-9B69-5F49EC751F92}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8D1EE7CA-4CD8-4781-9C4C-E8793E7AB0F6}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-67387184-1052191638-1261562388-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=182&d=20151126
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-67387184-1052191638-1261562388-1000 -> {ED89C9EF-5489-4F1D-852C-837F5E65E7F1} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-04] (Oracle Corporation)
BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2013-10-25] (FreeDownloadManager.ORG)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-04] (Oracle Corporation)
Toolbar: HKLM - LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Program Files\Power Translator 15\Applications\LEC IE Translation Extension.dll [2011-07-05] (Language Engineering Corporation, LLC)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\38p26zub.default-1462209846423
FF DefaultSearchEngine: Google
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-04] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-67387184-1052191638-1261562388-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-05-11] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\38p26zub.default-1462209846423\user.js [2016-05-05]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-12-11] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon [2010-04-01] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-67387184-1052191638-1261562388-1000\...\Firefox\Extensions: [{9764bb84-7272-11dd-8eb6-20d155d89557}] - C:\Users\Admin\AppData\Roaming\hideip_firefox_plugin
FF Extension: Hide IP Firefox Add-on - C:\Users\Admin\AppData\Roaming\hideip_firefox_plugin [2014-03-15] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Disable Youtube™ HTML5 Player) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\enmofgaijnbjpblfljopnpdogpldapoc [2015-09-18]
CHR Extension: (KanColle Command Center 改) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkgmldnainaglpjngpajnnjfhpdjkohh [2016-05-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-05]

Opera: 
=======
OPR Extension: (Disable Youtube™ HTML5 Player) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\aejcgigcjcdcbdkdbeiclbpekcjddapp [2015-09-18]
OPR Extension: (Ghostery) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2016-02-25]
OPR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2016-05-04]
OPR Extension: (F.B. Purity for Facebook) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\ppldhdmhmdcedddamaddkbbakkfhgeeo [2016-05-05]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files\ABBYY FineReader 12\NetworkLicenseServer.exe [925904 2014-01-23] (ABBYY Production LLC) [Brak podpisu cyfrowego]
R2 AdvancedSystemCareService9; C:\Program Files\IObit\Advanced SystemCare\ASCService.exe [446240 2016-01-05] (IObit)
S3 GalaxyService; C:\Program Files\GalaxyClient\GalaxyService.exe [2191648 2014-09-18] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2016-01-29] (NVIDIA Corporation)
R2 LEC TranslateDotNet Server; C:\Program Files\Power Translator 15\LogoMedia TranslateDotNet Server.exe [1955520 2011-07-05] (Language Engineering Corporation, LLC)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
R2 nTuneService; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [131072 2007-09-04] (NVIDIA) [Brak podpisu cyfrowego]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2016-01-29] (NVIDIA Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2014-01-01] ()
R1 CSN5PDTS82; C:\Windows\System32\Drivers\CSN5PDTS82.sys [28184 2012-10-24] (Colasoft Co., Ltd.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-07-15] (Disc Soft Ltd)
S3 eapihdrv; C:\Users\Admin\AppData\Local\Temp\ehdrv.sys [135760 2016-05-03] (ESET)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2014-01-01] ()
R3 NVR0Dev; C:\Windows\nvoclock.sys [29696 2007-09-04] (NVidia Corp.) [Brak podpisu cyfrowego]
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL32.sys [23456 2013-10-21] (Resplendence Software Projects Sp.)
S3 SG762_XP; C:\Windows\System32\DRIVERS\WlanBZXP.sys [402432 2006-01-19] (ZyDAS Technology Corporation)
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [24192 2009-12-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S3 WinRing0_1_2_0; C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [14416 2010-11-01] (OpenLibSys.org)
S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [67968 2011-08-10] (ZTE)
S3 zte_cpo; C:\Windows\System32\DRIVERS\zte_cpo.sys [9984 2011-08-10] (ZTE)
S0 BMLoad; system32\drivers\BMLoad.sys [X]
S1 CapsaDrv0; System32\Drivers\CapsaDrv0.sys [X]
S1 CSN5PDTS82x64; System32\Drivers\CSN5PDTS82x64.sys [X]
S1 CsNdisLWF; System32\Drivers\CsNdisLWF.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-05 21:20 - 2016-05-05 21:20 - 00496160 _____ (Duplex Secure Ltd) C:\Users\Admin\Downloads\SPTDinst-v189-x86.exe
2016-05-05 21:11 - 2016-05-05 21:11 - 00371282 _____ C:\Users\Admin\Downloads\gmer.zip
2016-05-05 21:10 - 2016-05-05 21:10 - 01730560 _____ (Farbar) C:\Users\Admin\Downloads\FRST (1).exe
2016-05-05 21:06 - 2016-05-05 21:06 - 00050477 _____ C:\Users\Admin\Downloads\Defogger (1).exe
2016-05-05 20:48 - 2016-05-05 20:48 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2016-05-05 20:48 - 2016-05-05 20:48 - 00000000 _____ C:\Users\Admin\defogger_reenable
2016-05-05 20:14 - 2016-05-05 20:19 - 95511976 _____ (Kaspersky Lab ZAO) C:\Users\Admin\Downloads\KVRT.exe
2016-05-05 20:13 - 2016-05-05 20:13 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2016-05-05 20:02 - 2016-05-05 21:13 - 00000000 ____D C:\Users\Admin\AppData\Local\FSDART
2016-05-05 20:02 - 2016-05-05 20:11 - 00000000 ____D C:\ProgramData\F-Secure
2016-05-05 20:02 - 2016-05-05 20:02 - 00524248 _____ (F-Secure Corporation) C:\Users\Admin\Downloads\F-SecureOnlineScanner.exe
2016-05-05 20:02 - 2016-05-05 20:02 - 00000000 ____D C:\Users\Admin\AppData\Local\F-Secure
2016-05-05 19:54 - 2016-05-05 19:54 - 00013440 _____ C:\Users\Admin\Downloads\Helvetica.zip
2016-05-05 19:54 - 2015-10-02 15:03 - 00016500 _____ C:\Users\Admin\Downloads\Helvetica.otf
2016-05-05 19:38 - 2016-05-05 19:39 - 03615296 _____ C:\Users\Admin\Downloads\adwcleaner.pl 5.115.exe
2016-05-05 01:44 - 2016-05-05 01:44 - 00010921 _____ C:\Users\Admin\Downloads\da (4)
2016-05-05 01:37 - 2016-05-05 01:37 - 00010914 _____ C:\Users\Admin\Downloads\da (3)
2016-05-05 01:14 - 2016-05-05 01:14 - 00010944 _____ C:\Users\Admin\Downloads\dada
2016-05-05 00:51 - 2016-05-05 00:51 - 00010903 _____ C:\Users\Admin\Downloads\Da (2)
2016-05-05 00:26 - 2016-05-05 00:26 - 00010741 _____ C:\Users\Admin\Downloads\da (1)
2016-05-04 23:22 - 2016-05-04 23:22 - 00010599 _____ C:\Users\Admin\Downloads\d
2016-05-04 20:51 - 2016-05-04 21:01 - 00004806 _____ C:\Users\Admin\Downloads\Da
2016-05-04 19:40 - 2016-05-04 19:41 - 08453940 _____ C:\Users\Admin\Downloads\CoC_1.0.2.swf
2016-05-04 13:52 - 2016-05-04 13:52 - 00725440 _____ (Opera Software) C:\Users\Admin\Downloads\OperaSetup.exe
2016-05-04 13:45 - 2016-05-04 13:45 - 00000000 ____D C:\Users\Admin\AppData\Local\NVIDIA
2016-05-04 13:40 - 2016-01-29 14:04 - 24207296 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 16128768 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 15302712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 11272240 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 11209192 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 10718264 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-04 13:40 - 2016-01-29 14:04 - 03994560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 01060400 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234195.dll
2016-05-04 13:40 - 2016-01-29 14:04 - 00912248 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234195.dll
2016-05-04 13:38 - 2016-05-04 13:38 - 00000000 ____D C:\NVIDIA
2016-05-04 13:32 - 2016-05-04 13:35 - 227389736 _____ (NVIDIA Corporation) C:\Users\Admin\Downloads\341.95-desktop-win8-win7-winvista-32bit-international.exe
2016-05-04 13:30 - 2016-05-04 13:30 - 00000000 ____D C:\Program Files\Common Files\Java
2016-05-04 13:26 - 2016-05-04 13:26 - 50874432 _____ (Oracle Corporation) C:\Users\Admin\Downloads\jre-8u91-windows-i586.exe
2016-05-04 01:42 - 2016-05-04 01:45 - 3195519154 _____ C:\Users\Admin\Downloads\[Personality Add-on] [Yandere].rar
2016-05-04 00:55 - 2016-05-04 00:55 - 00001709 _____ C:\Users\Admin\Desktop\Custom Maid 3D 2.lnk
2016-05-04 00:40 - 2016-05-04 00:40 - 42965992 _____ ( ) C:\Users\Admin\Downloads\CM3D2 HF-Patch - v125.0.exe
2016-05-04 00:20 - 2016-05-04 00:27 - 460382461 _____ C:\Users\Admin\Downloads\cm3d2_up130_x86_sub.zip
2016-05-04 00:05 - 2016-05-04 00:23 - 1028112299 _____ C:\Users\Admin\Downloads\cm3d2_up_for_1_00-1_12.zip
2016-05-03 23:47 - 2016-05-03 23:47 - 00000651 _____ C:\Users\Admin\Desktop\カスタムメイド3D2.lnk
2016-05-03 23:47 - 2016-05-03 23:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KISS
2016-05-03 22:53 - 2016-05-03 23:35 - 00000000 ____D C:\KISS
2016-05-03 22:01 - 2016-05-03 22:01 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ProductData
2016-05-03 22:00 - 2016-05-05 20:16 - 00000000 ____D C:\ProgramData\ProductData
2016-05-03 22:00 - 2016-05-03 22:13 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\IObit
2016-05-03 22:00 - 2016-05-03 22:05 - 00001904 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2016-05-03 22:00 - 2016-05-03 22:00 - 00001901 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2016-05-03 22:00 - 2016-05-03 22:00 - 00001889 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2016-05-03 22:00 - 2016-05-03 22:00 - 00000000 ____D C:\Program Files\Common Files\IObit
2016-05-03 21:59 - 2016-05-03 22:00 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IObit
2016-05-03 21:52 - 2016-05-03 21:57 - 42849104 _____ (IObit ) C:\Users\Admin\Downloads\asc9-setup-aff.exe
2016-05-03 21:47 - 2016-05-03 21:47 - 00000954 _____ C:\Users\Admin\Desktop\SFCFix.txt
2016-05-03 21:47 - 2016-05-03 21:47 - 00000000 ____D C:\SFCFix
2016-05-03 21:39 - 2016-05-03 21:47 - 00000000 ____D C:\Users\Admin\AppData\Local\niemiro
2016-05-03 21:31 - 2016-05-03 21:32 - 02884096 _____ (niemiro) C:\Users\Admin\Downloads\SFCFix.exe
2016-05-03 20:52 - 2016-05-03 20:52 - 01988928 _____ (Kaspersky Lab) C:\Users\Admin\Downloads\kss15.0.0.737en_ru_de_fr_es_it_zh-hans_pl_tr_nl_cs_7726.exe
2016-05-03 20:30 - 2016-05-03 20:31 - 02870984 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_plk.exe
2016-05-02 16:55 - 2016-05-02 16:55 - 09443232 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Admin\Downloads\ashampoo_internet_accelerator_3_3.30_sm.exe
2016-05-02 16:55 - 2016-05-02 16:55 - 00001028 _____ C:\Users\Public\Desktop\Ashampoo Internet Accelerator 3.lnk
2016-05-02 16:55 - 2016-05-02 16:55 - 00000213 _____ C:\Users\Public\Desktop\Your Software Deals.url
2016-05-02 05:26 - 2016-05-02 05:26 - 00053248 _____ C:\Windows\system32\config\SAM.gu
2016-05-02 04:55 - 2016-05-02 04:55 - 15796528 _____ C:\Users\Admin\Downloads\gu5setup (1).exe
2016-05-01 19:50 - 2016-05-01 19:53 - 22862354 _____ C:\Users\Admin\Downloads\hdqzpn_DistortionMagicbyIndex
2016-05-01 00:48 - 2016-05-01 00:48 - 00049746 _____ C:\Users\Admin\Downloads\[150724] [KISS] カスタムメイド3D 2 + Dancer Set + Manual + Update 1.01 (3).torrent
2016-05-01 00:47 - 2016-05-01 00:47 - 00037277 _____ C:\Users\Admin\Downloads\[160129] [KISS] カスタムメイド3D2＋ + Update 1.23 (2).torrent
2016-05-01 00:23 - 2016-05-01 00:23 - 19924672 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2016-04-30 23:35 - 2016-04-30 23:44 - 189891776 _____ C:\Users\Admin\Downloads\lepqqupq.exe
2016-04-30 15:32 - 2016-04-30 15:33 - 10455792 _____ (SurfRight B.V.) C:\Users\Admin\Downloads\hitmanpro (1).exe
2016-04-30 15:24 - 2016-04-30 15:25 - 03581504 _____ C:\Users\Admin\Downloads\adwcleaner_5.114.exe
2016-04-30 03:23 - 2016-04-30 03:24 - 11102448 _____ (LWD Technology, Inc. ) C:\Users\Admin\Downloads\hl76_win_install.exe
2016-04-30 03:21 - 2016-04-30 03:22 - 00178832 _____ C:\TDSSKiller.3.1.0.9_30.04.2016_03.21.31_log.txt
2016-04-30 03:20 - 2016-04-30 03:21 - 04633146 _____ C:\Users\Admin\Downloads\tdsskiller(1).zip
2016-04-30 03:20 - 2016-04-30 03:20 - 00000364 _____ C:\TDSSKiller.3.1.0.5_30.04.2016_03.20.11_log.txt
2016-04-29 23:03 - 2016-04-29 23:03 - 05867115 _____ C:\Users\Admin\Downloads\Adeptus Evangelion Beta Draft 005.rar
2016-04-29 14:26 - 2016-04-29 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strategy First
2016-04-29 14:26 - 2016-04-29 14:26 - 00000000 ____D C:\Program Files\Strategy First
2016-04-28 17:02 - 2016-04-28 17:02 - 00014870 _____ C:\Users\Admin\Downloads\Disciples 2_ Bunt Elfów [PL] [ iso].torrent
2016-04-28 03:07 - 2016-04-28 03:07 - 00476378 _____ C:\Users\Admin\Downloads\Yuuki_Mikan.rar
2016-04-28 02:59 - 2016-04-28 02:59 - 00017533 _____ C:\Users\Admin\Downloads\[151023] [KISS] カスタムメイド3D2 ビジュアルパック.torrent
2016-04-24 20:33 - 2016-04-24 20:33 - 00000000 ____D C:\Users\Admin\Downloads\campingtrip
2016-04-24 03:17 - 2016-04-24 03:18 - 00000000 ____D C:\ProgramData\Stardock
2016-04-24 01:30 - 2016-04-24 04:04 - 00000000 ____D C:\Program Files\Fallen Enchantress Legendary Heroes
2016-04-22 19:20 - 2016-04-22 19:20 - 00019657 _____ C:\Users\Admin\Downloads\[kat.cr]fallen.enchantress.legendary.heroes.reloaded.torrent
2016-04-22 19:12 - 2016-04-22 19:12 - 00175404 _____ C:\Users\Admin\Downloads\RomancingGuide.zip
2016-04-22 17:31 - 2016-04-22 17:31 - 00000000 ____D C:\Users\Admin\Documents\Larian Studios
2016-04-22 04:00 - 2016-04-22 04:00 - 00049201 _____ C:\Users\Admin\Downloads\[kat.cr]divinity.original.sin.enhanced.edition.gog.torrent
2016-04-21 23:01 - 2016-03-04 18:52 - 01253376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-21 23:00 - 2016-03-18 19:10 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-21 23:00 - 2016-03-18 19:10 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-21 23:00 - 2016-03-18 19:10 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-21 23:00 - 2016-03-18 19:10 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-21 23:00 - 2016-03-18 19:09 - 01259520 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-21 22:59 - 2016-03-18 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-21 22:52 - 2016-03-29 22:30 - 02070016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-21 22:52 - 2016-03-22 00:57 - 01208568 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-21 22:52 - 2016-03-18 19:10 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-21 22:52 - 2016-03-18 19:09 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-18 18:24 - 2016-04-18 18:24 - 00061796 _____ C:\Users\Admin\Downloads\[kat.cr]wwe.2k16.multi6.all.dlcs.fitgirl.repack.selective.download.from.13.7.gb (1).torrent
2016-04-18 04:35 - 2016-03-24 22:40 - 01815552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-18 04:35 - 2016-03-24 22:38 - 12841472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-18 04:35 - 2016-03-24 22:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-18 04:35 - 2016-03-24 22:35 - 09753600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-18 04:35 - 2016-03-24 22:35 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-18 04:35 - 2016-03-24 22:34 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-18 04:35 - 2016-03-24 22:33 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-18 04:35 - 2016-03-24 22:33 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-18 04:35 - 2016-03-24 22:33 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-18 04:35 - 2016-03-24 22:33 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-18 04:35 - 2016-03-24 22:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-04-18 04:35 - 2016-03-24 22:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-18 04:35 - 2016-03-24 22:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-18 04:35 - 2016-03-24 22:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00354304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-04-18 04:35 - 2016-03-24 22:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-04-18 04:35 - 2016-03-24 22:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-04-18 04:12 - 2016-04-18 04:12 - 00002295 _____ C:\Users\Admin\Downloads\[kat.cr]thea.the.awakening.gog.torrent
2016-04-18 01:19 - 2016-04-29 14:25 - 00000000 ____D C:\Program Files\UnRealWorld
2016-04-18 01:19 - 2016-04-18 01:19 - 00001680 _____ C:\Users\Public\Desktop\UnReal World.lnk
2016-04-18 01:19 - 2016-04-18 01:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnReal World 3.30 (patch 1)
2016-04-18 01:17 - 2016-04-18 01:18 - 34375313 _____ C:\Users\Admin\Downloads\urw-3.30p1.exe
2016-04-18 00:03 - 2016-04-18 00:03 - 00003764 _____ C:\Users\Admin\Downloads\a.sav
2016-04-17 23:47 - 2016-04-17 23:47 - 00399709 _____ C:\Users\Admin\Downloads\campingtrip.zip
2016-04-17 20:56 - 2016-02-06 04:17 - 03609024 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-04-17 20:56 - 2016-02-06 04:17 - 03556800 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-17 20:56 - 2016-02-06 04:12 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-17 20:56 - 2016-02-06 04:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-04-17 20:56 - 2016-02-06 04:11 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-17 20:56 - 2016-02-06 04:11 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-17 20:56 - 2016-02-06 02:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-17 20:55 - 2016-02-06 04:11 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-04-17 20:55 - 2016-02-06 02:33 - 00297472 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-04-17 20:55 - 2016-02-02 17:30 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-04-17 20:54 - 2016-02-03 19:06 - 00564736 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-04-17 20:54 - 2016-02-03 19:06 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-04-17 20:54 - 2016-02-03 19:05 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-04-17 20:21 - 2016-04-17 20:22 - 00180072 _____ C:\TDSSKiller.3.1.0.9_17.04.2016_20.21.19_log.txt
2016-04-17 20:19 - 2016-04-17 20:20 - 04633146 _____ C:\Users\Admin\Downloads\tdsskiller.zip
2016-04-17 20:19 - 2016-04-17 20:19 - 00000364 _____ C:\TDSSKiller.3.1.0.5_17.04.2016_20.19.03_log.txt
2016-04-16 23:35 - 2016-04-16 23:35 - 00000000 _____ C:\Users\Admin\Desktop\Nowy dokument tekstowy (5).txt
2016-04-16 22:30 - 2016-04-16 22:31 - 68537309 _____ C:\Users\Admin\Downloads\Book of Erotic Fantasy.pdf
2016-04-16 21:12 - 2016-04-16 21:13 - 05484676 _____ C:\Users\Admin\Downloads\Encyklopedia Football Managera 2016.pdf
2016-04-15 14:56 - 2016-04-15 14:56 - 00000490 _____ C:\TDSSKiller.3.1.0.5_15.04.2016_14.56.09_log.txt
2016-04-15 14:48 - 2016-05-01 00:27 - 00092530 _____ C:\net-log.txt
2016-04-15 05:03 - 2016-04-15 05:03 - 00123809 _____ C:\Users\Admin\Downloads\All in One 1.27.0.52 (1).torrent
2016-04-15 03:31 - 2016-04-15 03:31 - 00000216 _____ C:\Users\Admin\Desktop\Football Manager 2016 Demo.url
2016-04-15 03:19 - 2016-04-15 03:19 - 00061819 _____ C:\Users\Admin\Downloads\[kat.cr]wwe.2k16.multi6.all.dlcs.fitgirl.repack.selective.download.from.13.7.gb.torrent
2016-04-14 23:30 - 2016-04-15 15:01 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-04-08 03:43 - 2016-04-08 03:44 - 04557509 _____ C:\Users\Admin\Downloads\Fate_of_the_Norns_Ragnarok_--_Fafnirs_Treasure.pdf
2016-04-08 01:44 - 2016-04-08 01:44 - 00400744 _____ C:\Users\Admin\Downloads\gg-install.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-05 21:22 - 2015-07-26 21:14 - 00016553 _____ C:\Users\Admin\Downloads\FRST.txt
2016-05-05 21:22 - 2015-07-26 21:14 - 00000000 ____D C:\FRST
2016-05-05 21:19 - 2013-08-08 16:21 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-05 21:18 - 2013-08-13 03:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\uTorrent
2016-05-05 21:14 - 2015-07-31 12:52 - 00266544 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-05 21:14 - 2013-08-08 16:21 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-05 21:13 - 2006-11-02 15:01 - 00032626 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-05-05 21:13 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-05 21:13 - 2006-11-02 14:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-05 21:13 - 2006-11-02 14:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-05 20:52 - 2016-03-04 23:49 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-05 20:48 - 2013-08-08 15:37 - 00000000 ____D C:\Users\Admin
2016-05-05 20:16 - 2015-07-31 12:54 - 00057168 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2016-05-05 19:42 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\inf
2016-05-05 01:08 - 2015-05-29 20:44 - 00000000 ____D C:\Users\Admin\Desktop\CoC
2016-05-04 19:36 - 2013-08-08 16:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2016-05-04 13:54 - 2014-01-29 17:21 - 00000000 ____D C:\Program Files\Opera
2016-05-04 13:44 - 2014-01-01 19:21 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-04 13:44 - 2013-09-05 04:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-04 13:44 - 2013-08-21 04:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-04 13:43 - 2013-12-10 20:49 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-04 13:43 - 2011-11-22 13:09 - 00000000 ____D C:\Temp
2016-05-04 13:30 - 2013-11-12 01:02 - 00000000 ____D C:\ProgramData\Oracle
2016-05-04 13:29 - 2013-09-10 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-04 13:29 - 2013-09-10 22:06 - 00000000 ____D C:\Program Files\Java
2016-05-04 13:28 - 2015-10-08 02:42 - 00000000 ____D C:\Users\Admin\.oracle_jre_usage
2016-05-04 13:28 - 2013-09-10 22:06 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-05-04 00:35 - 2014-05-24 02:42 - 00000000 ____D C:\Users\Admin\Desktop\Talisman
2016-05-03 22:52 - 2013-08-08 16:14 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
2016-05-03 22:46 - 2014-07-02 00:51 - 00000000 ____D C:\illusion
2016-05-03 22:12 - 2014-03-07 11:54 - 00000000 ____D C:\Program Files\IObit
2016-05-03 22:05 - 2013-11-10 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\_inmm.dll
2016-05-03 22:05 - 2013-08-25 00:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Operational Art of War III
2016-05-03 22:04 - 2013-08-08 15:47 - 00000000 ____D C:\Windows\Panther
2016-05-03 22:00 - 2014-03-07 11:54 - 00000000 ____D C:\ProgramData\IObit
2016-05-03 21:52 - 2015-07-11 22:44 - 00000000 ____D C:\ProgramData\GlarySoft
2016-05-03 21:52 - 2015-07-11 22:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\GlarySoft
2016-05-03 21:05 - 2015-12-25 15:18 - 00002489 _____ C:\Users\Public\Desktop\Skype.lnk
2016-05-03 21:05 - 2015-12-25 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-05-03 21:05 - 2013-08-08 16:18 - 00000000 ____D C:\ProgramData\Skype
2016-05-03 20:20 - 2016-02-20 03:20 - 00000000 ____D C:\Program Files\Evil Islands (Add-on)
2016-05-03 20:20 - 2016-02-20 00:13 - 00000000 ____D C:\SAM Simulator
2016-05-03 20:20 - 2014-06-08 21:36 - 00000000 ____D C:\ProgramData\Ashampoo
2016-05-03 20:20 - 2014-05-26 03:13 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Simulator
2016-05-03 20:20 - 2014-04-23 17:28 - 00000000 ____D C:\Program Files\TOAW III Equipment Editor
2016-05-03 20:20 - 2014-04-19 04:01 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-03 20:20 - 2013-10-27 23:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hero Lab
2016-05-03 20:20 - 2013-10-27 23:13 - 00000000 ____D C:\Program Files\Hero Lab
2016-05-03 20:20 - 2013-08-20 16:09 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-05-03 20:20 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2016-05-03 20:20 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc
2016-05-03 20:20 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration
2016-05-03 17:26 - 2015-07-25 13:22 - 00001438 _____ C:\Users\Admin\Desktop\Rkill.txt
2016-05-02 16:55 - 2014-11-24 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-05-02 16:55 - 2014-11-24 23:07 - 00000000 ____D C:\Program Files\Ashampoo
2016-05-02 05:26 - 2006-11-02 12:22 - 45613056 _____ C:\Windows\system32\config\COMPONENTS.gu.bak
2016-05-02 05:26 - 2006-11-02 12:22 - 43253760 _____ C:\Windows\system32\config\SOFTWARE.gu.bak
2016-05-02 05:26 - 2006-11-02 12:22 - 27262976 _____ C:\Windows\system32\config\SYSTEM.gu.bak
2016-05-02 05:26 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\SECURITY.gu.bak
2016-05-02 05:26 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\DEFAULT.gu.bak
2016-05-02 05:20 - 2015-07-24 03:53 - 00000000 ____D C:\Users\Admin\AppData\Local\NPE
2016-05-02 05:02 - 2015-07-26 20:57 - 00000000 ____D C:\AdwCleaner
2016-05-02 05:01 - 2015-08-05 20:46 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2016-05-01 22:46 - 2013-10-27 23:13 - 00000000 ____D C:\ProgramData\Hero Lab
2016-05-01 14:14 - 2015-05-20 15:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\GG
2016-04-30 22:20 - 2013-08-16 21:35 - 00000000 ____D C:\Windows\Minidump
2016-04-30 03:25 - 2014-06-01 20:41 - 00000757 _____ C:\Users\Public\Desktop\Hero Lab.lnk
2016-04-29 23:04 - 2015-08-03 14:19 - 00000000 ____D C:\Users\Admin\Desktop\The Sims 3
2016-04-29 23:04 - 2015-03-20 03:32 - 00000000 ____D C:\Program Files\Steam
2016-04-29 01:17 - 2006-12-05 07:22 - 00730888 _____ C:\Windows\system32\perfh015.dat
2016-04-29 01:17 - 2006-12-05 07:22 - 00159672 _____ C:\Windows\system32\perfc015.dat
2016-04-29 01:17 - 2006-11-02 12:33 - 01661972 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-28 02:47 - 2016-03-26 06:12 - 00000000 ____D C:\Program Files\Guild Wars 2
2016-04-24 03:53 - 2013-08-08 15:37 - 00000680 _____ C:\Users\Admin\AppData\Local\d3d9caps.dat
2016-04-24 03:18 - 2013-09-02 15:38 - 00000000 ____D C:\Users\Admin\Documents\My Games
2016-04-24 00:24 - 2016-02-04 17:36 - 00000000 ____D C:\Users\Admin\Downloads\SD3
2016-04-23 21:35 - 2016-03-04 23:49 - 00000859 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-23 21:35 - 2016-03-04 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-23 21:35 - 2016-03-04 23:49 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-04-22 17:31 - 2013-11-28 03:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-04-22 12:42 - 2015-10-25 00:31 - 00000000 ____D C:\GOG Games
2016-04-21 23:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2016-04-21 22:59 - 2013-12-10 20:43 - 00000000 ____D C:\Windows\system32\MRT
2016-04-21 22:53 - 2006-11-02 12:24 - 132539272 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2016-04-21 22:47 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-04-21 15:05 - 2013-11-22 02:44 - 00374944 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-18 04:49 - 2006-11-02 13:18 - 00000000 ____D C:\Program Files\Common Files\System
2016-04-17 20:28 - 2015-07-24 03:59 - 00000000 ____D C:\NPE
2016-04-16 19:33 - 2013-09-16 15:20 - 00000000 ____D C:\Program Files\Common Files\Steam
2016-04-15 15:01 - 2015-10-08 14:18 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-04-15 03:31 - 2013-09-16 15:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-04-15 03:00 - 2013-08-25 00:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paradox Interactive
2016-04-14 23:23 - 2015-11-20 03:51 - 00001949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-14 23:23 - 2015-11-20 03:51 - 00001937 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-10 23:59 - 2013-12-10 22:19 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2016-04-08 23:14 - 2016-03-26 06:11 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Guild Wars 2
2016-04-08 01:46 - 2015-05-20 15:36 - 00000940 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2016-04-08 01:46 - 2015-05-20 15:36 - 00000932 _____ C:\Users\Admin\Desktop\GG.lnk
2016-04-08 01:46 - 2015-05-20 15:36 - 00000000 ____D C:\Users\Admin\AppData\Local\GG

==================== Pliki w katalogu głównym wybranych folderów =======

2014-11-12 03:47 - 2010-01-15 11:36 - 0075040 _____ () C:\Program Files\Common Files\SpeechUninstall.exe
2015-01-09 19:40 - 2015-01-17 03:23 - 0000099 _____ () C:\Users\Admin\AppData\Roaming\LauncherSettings_live.cfg
2015-01-09 23:56 - 2015-01-09 23:56 - 0000039 _____ () C:\Users\Admin\AppData\Roaming\TheHunterSettings_live.cfg
2013-10-20 04:04 - 2013-10-20 04:04 - 0000552 _____ () C:\Users\Admin\AppData\Local\d3d8caps.dat
2013-08-08 15:37 - 2016-04-24 03:53 - 0000680 _____ () C:\Users\Admin\AppData\Local\d3d9caps.dat
2014-03-07 11:37 - 2014-03-07 11:37 - 0000046 _____ () C:\Users\Admin\AppData\Local\DonationCoder_processtamer_InstallInfo.dat
2013-12-10 20:49 - 2014-01-01 19:02 - 0034895 _____ () C:\ProgramData\nvModes.001
2013-12-10 20:49 - 2014-01-01 19:10 - 0034895 _____ () C:\ProgramData\nvModes.dat
2015-02-01 13:07 - 2015-02-01 13:07 - 0003072 _____ () C:\ProgramData\wtwLicensing.db

Niektóre pliki w TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\installer.exe
C:\Users\Admin\AppData\Local\Temp\libeay32.dll
C:\Users\Admin\AppData\Local\Temp\msvcr120.dll
C:\Users\Admin\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-05-05 21:19

==================== Koniec  FRST.txt ============================