Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-08-2016 01
Uruchomiony przez Dawid (administrator)  DAWID-KOMPUTER (17-08-2016 12:33:11)
Uruchomiony z C:\Users\Dawid\Downloads
Załadowane profile: Dawid (Dostępne profile: Dawid)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8530176 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [VCVS01EN] => "C:\Program Files\ACD Systems\ACDSee Video Studio\acdIDInTouch2.exe"
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2852128 2016-08-03] (Valve Corporation)
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\Run: [SetMyHomePage] => C:\Users\Dawid\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4295360 2016-06-08] (Disc Soft Ltd)
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\Run: [DriverAgent Plus] => C:\ProgramData\DriverAgentPlus\DriverAgentPlus.exe -auto
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: F - 0
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: {06d693cd-3523-11e6-89b9-d975ba9d6276} - 0
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: {06d693cf-3523-11e6-89b9-d975ba9d6276} - G:\setup.exe
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: {35e2fba1-36d0-11e6-bc71-d1e92d0ed4f9} - H:\AutoRun.exe
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: {6dbe1f35-3847-11e6-8351-ea92dbd75972} - I:\setup.exe
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\...\MountPoints2: {6dbe1f39-3847-11e6-8351-ea92dbd75972} - 0
AppInit_DLLs: C:\ProgramData\Quotenamron\Vilastock.dll => C:\ProgramData\Quotenamron\Vilastock.dll [358912 2016-08-07] ()
AppInit_DLLs-x32: C:\ProgramData\Quotenamron\Movezuntouch.dll => C:\ProgramData\Quotenamron\Movezuntouch.dll [248320 2016-08-07] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-07-15]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{08974CD7-E37F-4F13-BF15-95CB18E0CEA6}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{0FEF5067-1D24-4830-A383-D64DC4348F2A}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{1B142132-C433-4482-B00A-0DB6E1FA72A5}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{2437C95E-BEEF-4BC3-B615-500AF0940CCC}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{4607DF03-24EE-4F41-8CE5-7497C475D23E}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{E55A9ECE-617D-4E8A-BC7C-FFD72CF846EC}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{E99245E9-B39A-4F69-9B7B-A7B49772A00F}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4vPw53HsjyFYknJeaCqnPDh5btNY6rCIZixf3S91MRKSsbH5Ll0DNhVSTLCiC2IsorHKBgfJ3yB6F7ef4SM66WHOZ6Bd6H
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
HKU\S-1-5-21-3041235599-1036277319-2674353842-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3041235599-1036277319-2674353842-1000 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3041235599-1036277319-2674353842-1000 -> {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = hxxp://terra.im/search?sid=101&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3041235599-1036277319-2674353842-1000 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dODdHFIm2ifuJ_ciguxumug6RlSy2q-3CPYKjhEQTy3HKGBMtZYx-7WTY09vRaQXO4jF8TcAkfZ9RhnTQUfQlyiRIDyf-VdB_7Q7FpCF4BiuaqJA6pYSQcPqLS9V1qgAQNq5kqTkSQYF7XACKG0JIyKsEEG9U-t&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/
CHR StartupUrls: Default -> "hxxp://www.interia.pl/"
CHR Profile: C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-05]
CHR Extension: (Dokumenty Google) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-05]
CHR Extension: (Dysk Google) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-05]
CHR Extension: (YouTube) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-05]
CHR Extension: (Arkusze Google) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-05]
CHR Extension: (Bazz Search) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pinhfkamckbogjgmbmdkdebbbpnmlaef [2016-08-17]
CHR Extension: (Gmail) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-05]
CHR Extension: (Chrome Media Router) - C:\Users\Dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-10]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1458368 2016-06-08] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319096 2000-01-01] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2000-01-01] (Intel Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2014-02-15] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-07-20] (Electronic Arts)
S2 Quotenamron; C:\ProgramData\\Quotenamron\\Quotenamron.exe [1106432 2016-06-18] () [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athrusb; C:\Windows\System32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-06-18] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-06-18] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2000-01-01] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-17 12:33 - 2016-08-17 12:33 - 00017463 _____ C:\Users\Dawid\Downloads\FRST.txt
2016-08-17 12:31 - 2016-08-17 12:33 - 00000000 ____D C:\FRST
2016-08-17 12:30 - 2016-08-17 12:30 - 00380928 _____ C:\Users\Dawid\Downloads\dhbdqvl1.exe
2016-08-17 12:29 - 2016-08-17 12:30 - 02394624 _____ (Farbar) C:\Users\Dawid\Downloads\FRST64.exe
2016-08-17 11:33 - 2016-08-17 11:33 - 00031731 _____ C:\Users\Dawid\Downloads\Addition.txt
2016-08-17 11:33 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-08-17 11:33 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-08-17 11:33 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-08-17 11:33 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-08-17 11:33 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-08-17 11:33 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-08-17 11:33 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-08-17 11:33 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-08-17 11:33 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-08-17 11:33 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-08-17 11:33 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-08-17 11:33 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-08-17 11:33 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-08-17 11:33 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-08-17 10:49 - 2016-08-17 10:49 - 00007604 _____ C:\Users\Dawid\AppData\Local\Resmon.ResmonCfg
2016-08-17 10:48 - 2016-08-17 11:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-17 10:48 - 2016-08-17 10:48 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-17 10:42 - 2016-08-17 11:15 - 00000000 ____D C:\Windows\pss
2016-08-17 10:39 - 2016-08-17 10:40 - 00000000 ____D C:\Users\Dawid\AppData\Local\tkdata
2016-08-17 10:38 - 2016-08-17 10:38 - 00000000 ____D C:\ProgramData\TrueKey
2016-08-17 10:32 - 2016-08-17 10:32 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-08-17 10:30 - 2016-08-17 10:30 - 00031722 _____ C:\Users\Dawid\Downloads\faktura_01_08_2016 (2).pdf
2016-08-17 10:27 - 2016-08-17 10:27 - 00031722 _____ C:\Users\Dawid\Downloads\faktura_02_08_2016 (1).pdf
2016-08-17 10:27 - 2016-08-17 10:27 - 00031629 _____ C:\Users\Dawid\Downloads\faktura_02_08_2016.pdf
2016-08-17 10:25 - 2016-08-17 10:25 - 00031714 _____ C:\Users\Dawid\Downloads\faktura_01_08_2016 (1).pdf
2016-08-17 10:20 - 2016-08-17 11:29 - 00000000 ____D C:\Program Files\TrueKey
2016-08-17 10:20 - 2016-08-17 10:32 - 00000000 ____D C:\ProgramData\McAfee
2016-08-17 10:20 - 2016-08-17 10:20 - 00000000 ____D C:\Users\Dawid\AppData\LocalLow\Adobe
2016-08-17 10:19 - 2016-08-17 10:21 - 00000000 ____D C:\ProgramData\Adobe
2016-08-17 10:19 - 2016-08-17 10:19 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-08-17 10:18 - 2016-08-17 10:39 - 00000000 ____D C:\Users\Dawid\AppData\Local\Adobe
2016-08-17 10:15 - 2016-08-17 10:15 - 00016631 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35 (5).pdf
2016-08-17 10:14 - 2016-08-17 10:14 - 00016626 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 36 (3).pdf
2016-08-17 10:14 - 2016-08-17 10:14 - 00016611 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35 (4).pdf
2016-08-16 15:35 - 2016-08-16 15:35 - 00016631 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35 (3).pdf
2016-08-16 15:35 - 2016-08-16 15:35 - 00016626 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 36 (2).pdf
2016-08-16 15:35 - 2016-08-16 15:35 - 00016611 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35 (2).pdf
2016-08-15 17:42 - 2016-08-15 17:42 - 00000000 ____D C:\Users\Dawid\AppData\Local\VideoEditor
2016-08-15 17:42 - 2016-08-15 17:42 - 00000000 ____D C:\Users\Dawid\AppData\Local\Movavi
2016-08-15 17:41 - 2016-08-17 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor 11
2016-08-15 17:40 - 2016-08-15 17:40 - 00004099 _____ C:\ProgramData\rxsmznjf.zcp
2016-08-15 17:40 - 2016-08-15 17:40 - 00000016 _____ C:\ProgramData\mntemp
2016-08-15 17:40 - 2016-08-15 17:40 - 00000000 ____D C:\ProgramData\Movavi Video Editor 11
2016-08-15 17:19 - 2016-08-15 17:20 - 57539984 _____ (Movavi) C:\Users\Dawid\Downloads\MovaviVideoEditorSetupC.exe
2016-08-15 16:30 - 2016-08-15 18:21 - 00000000 ____D C:\Users\Dawid\Documents\ACDSee Video Studio
2016-08-15 16:30 - 2016-08-15 16:33 - 00000000 ____D C:\Users\Dawid\AppData\Local\ACD Systems
2016-08-15 16:30 - 2016-08-15 16:30 - 00001374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-08-15 16:30 - 2016-08-15 16:30 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-08-15 16:30 - 2016-08-15 16:30 - 00000000 ____D C:\Windows\pl
2016-08-15 16:30 - 2016-08-15 16:30 - 00000000 ____D C:\Windows\en
2016-08-15 16:30 - 2016-08-15 16:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2016-08-15 16:29 - 2016-08-17 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2016-08-15 16:29 - 2016-08-15 16:29 - 00000000 ____D C:\Windows\PCHEALTH
2016-08-15 16:29 - 2016-08-15 16:29 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-08-15 16:27 - 2016-08-15 16:28 - 20329488 _____ C:\Users\Dawid\Downloads\acdsee-video-studio.exe
2016-08-15 16:26 - 2016-08-15 16:26 - 00959208 _____ ( ) C:\Users\Dawid\Downloads\installer_NUKE_sciagnij.exe
2016-08-15 16:25 - 2016-08-15 16:44 - 00000000 ____D C:\Users\Dawid\AppData\Local\Windows Live
2016-08-15 16:25 - 2016-08-15 16:25 - 01239752 _____ (Microsoft Corporation) C:\Users\Dawid\Downloads\wlsetup-web.exe
2016-08-15 16:25 - 2016-08-15 16:25 - 01239752 _____ (Microsoft Corporation) C:\Users\Dawid\Downloads\wlsetup-web (1).exe
2016-08-15 15:49 - 2016-08-15 15:49 - 00002039 _____ C:\Users\Public\Desktop\Action!.lnk
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\Users\Dawid\Documents\Action!
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Mirillis
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\Users\Dawid\AppData\Local\Mirillis
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\ProgramData\Mirillis
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2016-08-15 15:49 - 2016-08-15 15:49 - 00000000 ____D C:\Program Files (x86)\Mirillis
2016-08-15 15:47 - 2016-08-15 15:48 - 21724616 _____ (Mirillis Ltd.) C:\Users\Dawid\Downloads\action_1_31_4_setup.exe
2016-08-09 18:36 - 2016-08-09 18:36 - 00000000 ____D C:\Users\Dawid\Desktop\Nowy folder
2016-08-09 09:43 - 2016-08-09 09:43 - 00016626 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 36 (1).pdf
2016-08-09 09:43 - 2016-08-09 09:43 - 00016611 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35 (1).pdf
2016-08-09 09:38 - 2016-08-09 09:38 - 00016626 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 36.pdf
2016-08-09 09:38 - 2016-08-09 09:38 - 00016611 _____ C:\Users\Dawid\Downloads\RAFAŁ RASZEWSKI FV 35.pdf
2016-08-07 20:10 - 2016-08-07 20:10 - 00031011 _____ C:\Users\Dawid\Downloads\faktura_01_08_2016.pdf
2016-08-05 23:12 - 2016-08-05 23:12 - 00003108 _____ C:\Windows\System32\Tasks\{FF9C3804-49C6-4CCC-895C-BE0E5BA27D93}
2016-08-05 20:18 - 2016-08-05 20:18 - 00032267 _____ C:\Users\Dawid\AppData\Local\recently-used.xbel
2016-08-05 10:39 - 2016-08-05 10:39 - 00051896 _____ C:\Users\Dawid\Downloads\counter_strike.ttf
2016-08-05 10:33 - 2016-08-05 10:33 - 00041560 _____ C:\Users\Dawid\Downloads\starcraft.ttf
2016-08-05 10:17 - 2016-08-05 10:17 - 00975904 _____ (Cutelecod ) C:\Users\Dawid\Downloads\Logo-Maker-12346-dp.exe
2016-08-01 12:56 - 2016-08-15 17:42 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\NVIDIA
2016-08-01 12:56 - 2016-08-15 15:43 - 00000000 ____D C:\Users\Dawid\Documents\Bandicam
2016-07-29 08:15 - 2016-07-29 08:15 - 00030011 _____ C:\Users\Dawid\Downloads\faktura_02_07_2016 (1).pdf
2016-07-29 08:12 - 2016-07-29 08:12 - 00029771 _____ C:\Users\Dawid\Downloads\faktura_02_07_2016.pdf
2016-07-24 23:54 - 2016-07-24 23:54 - 00000222 _____ C:\Users\Dawid\Desktop\Evolve Stage 2.url
2016-07-22 10:38 - 2012-09-18 15:27 - 00501760 _____ C:\Windows\system32\ZSHP1020.EXE
2016-07-22 10:38 - 2012-09-18 15:27 - 00192512 _____ C:\Windows\system32\ZLhp1020.DLL
2016-07-20 18:45 - 2016-07-22 12:57 - 00000543 _____ C:\Users\Dawid\Desktop\FIFA 15.lnk
2016-07-20 18:45 - 2016-07-20 19:04 - 00000000 ____D C:\Users\Dawid\Documents\FIFA 15
2016-07-20 16:12 - 2016-07-20 16:12 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-07-20 12:53 - 2016-07-20 12:55 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Origin
2016-07-20 12:53 - 2016-07-20 12:55 - 00000000 ____D C:\Users\Dawid\AppData\Local\Origin
2016-07-20 12:50 - 2016-08-17 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-07-20 12:50 - 2016-07-20 18:45 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-07-20 12:50 - 2016-07-20 12:50 - 00000692 _____ C:\Users\Public\Desktop\Origin.lnk
2016-07-20 12:42 - 2016-07-22 13:03 - 00000000 ____D C:\ProgramData\Origin
2016-07-20 12:40 - 2016-08-17 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16 Super Deluxe Edition

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-17 12:21 - 2016-06-07 19:43 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\TS3Client
2016-08-17 12:11 - 2016-06-05 17:23 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-17 12:07 - 2016-06-06 10:50 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Skype
2016-08-17 12:06 - 2016-06-05 17:23 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-17 12:05 - 2016-07-05 16:51 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-17 12:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-17 11:48 - 2009-07-14 06:45 - 00016832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-17 11:48 - 2009-07-14 06:45 - 00016832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-17 11:30 - 2016-06-05 16:53 - 00000000 ____D C:\Users\Dawid
2016-08-17 11:17 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-17 11:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-17 11:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-08-17 11:16 - 2016-07-17 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSupport.com
2016-08-17 11:16 - 2016-07-15 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-08-17 11:16 - 2016-07-14 22:49 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2016-08-17 11:16 - 2016-07-13 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3nity CD DVD Burner
2016-08-17 11:16 - 2016-07-13 20:40 - 00000000 ____D C:\Users\Dawid\Desktop\Pliki
2016-08-17 11:16 - 2016-07-13 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2016-08-17 11:16 - 2016-07-08 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2016-08-17 11:16 - 2016-07-08 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2016-08-17 11:16 - 2016-07-08 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-08-17 11:16 - 2016-06-30 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2016-08-17 11:16 - 2016-06-28 15:53 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\www.gtavicecity.ru
2016-08-17 11:16 - 2016-06-24 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2016-08-17 11:16 - 2016-06-20 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2016-08-17 11:16 - 2016-06-20 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-08-17 11:16 - 2016-06-18 16:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hitman 2 Silent Assassin
2016-08-17 11:16 - 2016-06-18 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-08-17 11:16 - 2016-06-18 16:40 - 00000000 ____D C:\ProgramData\Quotenamron
2016-08-17 11:16 - 2016-06-09 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
2016-08-17 11:16 - 2016-06-06 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-08-17 11:16 - 2016-06-05 20:31 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-17 11:16 - 2016-06-05 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-17 11:16 - 2016-06-05 20:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2016-08-17 11:16 - 2016-06-05 19:54 - 00000000 ___RD C:\Users\Dawid\Desktop\Sterowniki
2016-08-17 11:16 - 2016-06-05 17:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-08-17 11:16 - 2016-06-05 17:26 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-17 11:16 - 2016-06-05 17:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-17 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2016-08-17 11:15 - 2011-04-12 15:32 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-08-17 11:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-08-17 10:39 - 2016-06-27 15:55 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\Adobe
2016-08-15 16:29 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-08-13 23:32 - 2016-06-18 16:40 - 00002397 _____ C:\Windows\SysWOW64\findit.xml
2016-08-10 18:31 - 2011-04-12 15:21 - 00738280 _____ C:\Windows\system32\perfh015.dat
2016-08-10 18:31 - 2011-04-12 15:21 - 00154466 _____ C:\Windows\system32\perfc015.dat
2016-08-10 18:31 - 2009-07-14 07:13 - 01664654 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-09 01:14 - 2016-06-05 17:24 - 00002259 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-09 01:13 - 2016-06-05 17:24 - 00002247 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-06 16:29 - 2016-06-06 11:02 - 00000000 ____D C:\Users\Dawid\Desktop\Muzyka
2016-08-06 12:18 - 2009-07-14 06:45 - 00276992 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-05 23:12 - 2016-06-06 10:50 - 00000000 ____D C:\ProgramData\Skype
2016-08-05 20:18 - 2016-06-29 17:43 - 00000000 ____D C:\Users\Dawid\AppData\Local\gtk-2.0
2016-08-05 20:18 - 2016-06-29 17:42 - 00000000 ____D C:\Users\Dawid\.gimp-2.8
2016-08-05 10:55 - 2016-06-05 17:23 - 00058744 _____ C:\Users\Dawid\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-04 00:42 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-03 16:43 - 2016-06-23 21:41 - 379158765 _____ C:\Windows\MEMORY.DMP
2016-08-03 16:43 - 2016-06-23 21:41 - 00000000 ____D C:\Windows\Minidump
2016-07-29 08:06 - 2016-06-05 17:23 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-29 08:06 - 2016-06-05 17:23 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-07-26 23:31 - 2016-06-29 21:59 - 00000000 ____D C:\Users\Dawid\Desktop\Zdjęcia
2016-07-26 12:39 - 2016-06-05 19:30 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\uTorrent
2016-07-24 16:37 - 2016-06-20 20:49 - 00000000 ____D C:\Users\Dawid\AppData\Local\Battle.net
2016-07-24 16:37 - 2016-06-20 20:47 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-07-20 21:50 - 2016-06-05 19:33 - 00000000 ___SD C:\Users\Dawid\AppData\LocalLow\Temp
2016-07-20 13:01 - 2016-06-05 17:41 - 00000000 ____D C:\ProgramData\Package Cache

==================== Pliki w katalogu głównym wybranych folderów =======

2016-06-18 16:40 - 2016-06-18 16:40 - 6867968 _____ () C:\Users\Dawid\AppData\Roaming\agent.dat
2016-06-18 16:39 - 2016-06-18 16:39 - 0128512 _____ () C:\Users\Dawid\AppData\Roaming\Installer.dat
2016-06-18 16:40 - 2016-06-18 16:40 - 0018432 _____ () C:\Users\Dawid\AppData\Roaming\Main.dat
2016-06-18 16:40 - 2016-06-18 16:39 - 1106432 _____ () C:\Users\Dawid\AppData\Roaming\Zonlam.exe
2016-08-05 20:18 - 2016-08-05 20:18 - 0032267 _____ () C:\Users\Dawid\AppData\Local\recently-used.xbel
2016-08-17 10:49 - 2016-08-17 10:49 - 0007604 _____ () C:\Users\Dawid\AppData\Local\Resmon.ResmonCfg
2016-06-05 17:41 - 2016-06-05 17:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-15 17:40 - 2016-08-15 17:40 - 0000016 _____ () C:\ProgramData\mntemp
2016-08-15 17:40 - 2016-08-15 17:40 - 0004099 _____ () C:\ProgramData\rxsmznjf.zcp

Niektóre pliki w TEMP:
====================
C:\Users\Dawid\AppData\Local\Temp\bdfilters.dll
C:\Users\Dawid\AppData\Local\Temp\bitool.dll
C:\Users\Dawid\AppData\Local\Temp\ICReinstall_Logo-Maker-12346-dp.exe
C:\Users\Dawid\AppData\Local\Temp\libeay32.dll
C:\Users\Dawid\AppData\Local\Temp\msvcr120.dll
C:\Users\Dawid\AppData\Local\Temp\nvStInst.exe
C:\Users\Dawid\AppData\Local\Temp\sqlite3.dll
C:\Users\Dawid\AppData\Local\Temp\toolbar.exe
C:\Users\Dawid\AppData\Local\Temp\utils.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-16 20:06

==================== Koniec  FRST.txt ============================