Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:12-10-2015 Uruchomiony przez Misiek (administrator) MISIEK (19-08-2016 23:56:51) Uruchomiony z C:\Users\Misiek\Desktop\Nowy folder Załadowane profile: Misiek (Dostępne profile: Misiek) Platform: Windows 10 Home (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Hola Networks Ltd.) C:\Program Files\Hola\app\hola_svc.exe (Hola Networks Ltd.) C:\Program Files\Hola\app\hola_updater.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe Brak dostępu do procesu -> Memory Compression (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [iTunesHelper] => D:\Programy\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3350760 2015-08-07] (ELAN Microelectronics Corp.) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-10-30] (Adobe Systems Incorporated) HKLM\...\Run: [Cm108Sound] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cm108.dll,CMICtrlWnd HKLM\...\Run: [hola] => C:\Program Files\Hola\app\hola.exe [2162864 2016-08-10] (Hola Networks Ltd.) HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443640 2014-10-31] (BlackBerry Limited) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2304688 2015-12-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23892200 2016-08-16] (Dropbox, Inc.) HKU\S-1-5-21-689077054-4267889677-1268134294-1001\...\Run: [Steam] => D:\Programy\Steam\steam.exe [2857248 2016-08-16] (Valve Corporation) HKU\S-1-5-21-689077054-4267889677-1268134294-1001\...\Run: [Spotify Web Helper] => C:\Users\Misiek\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2355312 2016-02-04] (Spotify Ltd) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] () ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{76f26ce9-932b-42fa-b116-d547627f0c69}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{a04468a3-cb16-46a0-b541-19b646771385}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKU\S-1-5-21-689077054-4267889677-1268134294-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB HKU\S-1-5-21-689077054-4267889677-1268134294-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB BHO: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab) BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-08-02] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-02] (Microsoft Corporation) BHO-x32: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Programy\java\bin\ssv.dll [2015-10-01] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Programy\java\bin\jp2ssv.dll [2015-10-01] (Oracle Corporation) Toolbar: HKLM - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation) Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2016-07-16] (Microsoft Corporation) Handler-x32: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2016-07-16] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Misiek\AppData\Roaming\Mozilla\Firefox\Profiles\173x9ccj.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-07] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> D:\Programy\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-12-11] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-07] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-01-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> D:\Programy\java\bin\dtplugin\npDeployJava1.dll [2015-10-01] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> D:\Programy\java\bin\plugin2\npjp2.dll [2015-10-01] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-02] (Microsoft Corporation) FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2015-05-22] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-12-11] (Adobe Systems) FF Extension: Sport.pl autoplay remove - C:\Users\Misiek\AppData\Roaming\Mozilla\Firefox\Profiles\173x9ccj.default\Extensions\jid0-vQ0CrL15HjbA7bzTgJdBnVw5tiA@jetpack.xpi [2016-02-06] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_ACF0E80077C511E59DED005056C00008@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\FFExt\light_plugin_firefox\addon.xpi FF Extension: Brak nazwy - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\FFExt\light_plugin_firefox\addon.xpi [2016-05-05] FF Extension: Brak nazwy - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com [nie znaleziono] FF Extension: Brak nazwy - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [nie znaleziono] FF Extension: Brak nazwy - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com [nie znaleziono] StartMenuInternet: FIREFOX.EXE - D:\Programy\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: Default -> hxxp://www.google.pl/ CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdmadapter.dll => Brak pliku CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll () CHR Profile: C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-28] CHR Extension: (Dokumenty Google) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-28] CHR Extension: (Dysk Google) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-28] CHR Extension: (YouTube) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-28] CHR Extension: (Adblock Plus) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-17] CHR Extension: (Google Search) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-28] CHR Extension: (Disable HTML5 Autoplay) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efdhoaajjjgckpbkoglidkeendpkolai [2016-03-10] CHR Extension: (Eliminator Slajdów) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2015-06-28] CHR Extension: (Arkusze Google) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-28] CHR Extension: (Dokumenty Google offline) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03] CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2016-08-08] CHR Extension: (Auto Refresh) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifooldnmmcmlbdennkpdnlnbgbmfalko [2015-11-26] CHR Extension: (BB10 / PlayBook App Manager) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmbaalodpmjjhpobkgljnelbpblnikkp [2015-06-28] CHR Extension: (Kaspersky Protection) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpeeaghdjmhlakojjcgfdhgcejdaefmi [2016-08-16] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-28] CHR Extension: (Lokaj USOS) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnnckahndcieonmmijnhgkecfcekfafp [2016-02-13] CHR Extension: (Gmail) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-28] CHR Extension: (Chrome Media Router) - C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-02] CHR Profile: C:\Users\Misiek\AppData\Local\Google\Chrome\User Data\Profile 1 CHR HKLM\...\Chrome\Extension: [lpeeaghdjmhlakojjcgfdhgcejdaefmi] - hxxps://chrome.google.com/webstore/detail/lpeeaghdjmhlakojjcgfdhgcejdaefmi CHR HKLM-x32\...\Chrome\Extension: [lpeeaghdjmhlakojjcgfdhgcejdaefmi] - hxxps://chrome.google.com/webstore/detail/lpeeaghdjmhlakojjcgfdhgcejdaefmi ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [683696 2015-11-16] (Adobe Systems Incorporated) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated) S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) S4 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Brak podpisu cyfrowego] R2 AVP16.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avp.exe [236928 2015-12-22] (AO Kaspersky Lab) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.) S4 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited) S2 CDPUserSvc; C:\Windows\System32\CDPUserSvc.dll [337408 2016-07-16] (Microsoft Corporation) R2 CDPUserSvc_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) R2 CDPUserSvc_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950856 2016-07-25] (Microsoft Corporation) S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-28] (Dropbox, Inc.) S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-28] (Dropbox, Inc.) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [229152 2016-07-01] (EasyAntiCheat Ltd) S4 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation) S4 ETDService; C:\Program Files\Elantech\ETDService.exe [147688 2015-08-07] (ELAN Microelectronics Corp.) S3 FrameServer; C:\Windows\system32\FrameServer.dll [803840 2016-07-16] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation) R2 hola_svc; C:\Program Files\Hola\app\hola_svc.exe [5618864 2016-08-10] (Hola Networks Ltd.) R2 hola_updater; C:\Program Files\Hola\app\hola_updater.exe [5615792 2016-07-20] (Hola Networks Ltd.) S4 Huawei E3372; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2014-03-07] () S3 HvHost; C:\Windows\System32\hvhostsvc.dll [67584 2016-07-16] (Microsoft Corporation) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [374360 2016-05-27] (Intel Corporation) S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation) S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-06] (Intel Corporation) S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\vssbridge64.exe [152488 2015-12-22] (AO Kaspersky Lab) S3 MessagingService; C:\Windows\System32\MessagingService.dll [52224 2016-07-16] (Microsoft Corporation) S3 MessagingService_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) S3 MessagingService_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) S4 nTuneService; D:\Programy\NVIDIA Corporation\nTune\nTuneService.exe [278336 2011-09-19] (NVIDIA) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) R2 OneSyncSvc_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) R2 OneSyncSvc_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) S4 Origin Client Service; D:\Programy\Origin\OriginClientService.exe [2122248 2016-06-12] (Electronic Arts) S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-07-23] (Microsoft Corporation) [Brak podpisu cyfrowego] S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-08-14] (Overwolf LTD) R3 PimIndexMaintenanceSvc_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) R3 PimIndexMaintenanceSvc_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) S4 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [396024 2015-03-19] (Apple Inc.) S4 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1355000 2015-05-26] (BlackBerry Limited) S3 RmSvc; C:\Windows\System32\RMapi.dll [141312 2016-07-16] (Microsoft Corporation) S4 shpamsvc; C:\Windows\system32\Windows.SharedPC.AccountManager.dll [161792 2016-07-16] (Microsoft Corporation) S4 TeamViewer; D:\Programy\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH) S3 TieringEngineService; C:\Windows\system32\TieringEngineService.exe [287744 2016-07-16] (Microsoft Corporation) R3 TimeBrokerSvc; C:\Windows\System32\TimeBrokerServer.dll [177664 2016-07-16] (Microsoft Corporation) S4 tzautoupdate; C:\Windows\system32\tzautoupdate.dll [95232 2016-07-16] (Microsoft Corporation) R3 UnistoreSvc_46381; C:\WINDOWS\System32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) R3 UnistoreSvc_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) R3 UserDataSvc_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) R3 UserDataSvc_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) S3 vmicrdv; C:\Windows\System32\icsvcext.dll [349696 2016-07-16] (Microsoft Corporation) S3 vmicvss; C:\Windows\System32\icsvcext.dll [349696 2016-07-16] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) S3 wisvc; C:\Windows\system32\flightsettings.dll [614912 2016-07-16] (Microsoft Corporation) S3 WpnUserService; C:\Windows\System32\WpnUserService.dll [74240 2016-07-16] (Microsoft Corporation) S3 WpnUserService_46381; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) S3 WpnUserService_46381; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AcpiDev; C:\Windows\System32\drivers\AcpiDev.sys [18432 2016-07-16] (Microsoft Corporation) S3 applockerfltr; C:\Windows\System32\drivers\applockerfltr.sys [15360 2016-07-16] (Microsoft Corporation) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [101368 2015-12-14] (ASUS Corporation) S0 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [533856 2016-07-16] (QLogic Corporation) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.) R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7546544 2015-03-12] (Broadcom Corporation) S3 bcmfn; C:\Windows\System32\drivers\bcmfn.sys [9728 2016-07-16] (Windows (R) Win 7 DDK provider) S3 blackberryncm; C:\Windows\System32\drivers\blackberryncm6_AMD64.sys [36360 2016-04-06] (BlackBerry) S3 cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [346976 2016-07-16] (Chelsio Communications) S3 cht4vbd; C:\Windows\System32\drivers\cht4vx64.sys [2104160 2016-07-16] (Chelsio Communications) R2 clreg; C:\Windows\System32\drivers\registry.sys [70144 2016-07-16] (Microsoft Corporation) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation) R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation) S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-07-03] (Disc Soft Ltd) R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation) R3 glavcam; C:\Windows\system32\DRIVERS\glavcam.sys [3475456 2015-08-07] (Windows (R) Codename Longhorn DDK provider) S3 hvservice; C:\Windows\System32\drivers\hvservice.sys [73568 2016-07-16] (Microsoft Corporation) S3 iagpio; C:\Windows\System32\drivers\iagpio.sys [33280 2016-07-16] (Intel(R) Corporation) S3 iai2c; C:\Windows\System32\drivers\iai2c.sys [81408 2016-07-16] (Intel(R) Corporation) S3 iaLPSS2i_GPIO2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [64512 2016-07-16] (Intel Corporation) S3 iaLPSS2i_I2C; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [176384 2016-07-16] (Intel Corporation) S3 IndirectKmd; C:\Windows\System32\drivers\IndirectKmd.sys [35840 2016-07-16] (Microsoft Corporation) R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation) R0 iorate; C:\Windows\System32\drivers\iorate.sys [45920 2016-07-16] (Microsoft Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( ) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-09-11] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [79752 2015-12-01] (AO Kaspersky Lab) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78200 2015-12-02] (AO Kaspersky Lab) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [182664 2015-12-11] (AO Kaspersky Lab) R1 klhk; C:\Windows\System32\drivers\klhk.sys [237400 2016-08-16] (AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP16.0.1\Bases\klids.sys [182360 2016-08-18] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [992600 2016-08-16] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [51288 2016-05-05] (AO Kaspersky Lab) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [52608 2015-11-11] (AO Kaspersky Lab) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45960 2015-12-07] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-08-16] (AO Kaspersky Lab) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [110424 2016-08-16] (AO Kaspersky Lab) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [194440 2015-12-03] (AO Kaspersky Lab) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-01-06] (Intel Corporation) S3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [483240 2015-03-26] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [100720 2015-03-26] (McAfee, Inc.) S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_dac0245a363caab4\nvlddmkm.sys [14199360 2016-08-13] (NVIDIA Corporation) R3 nvoclk64; C:\Windows\system32\DRIVERS\nvoclk64.sys [42088 2009-09-15] (NVIDIA Corp.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58720 2016-07-16] (Avago Technologies) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2014-05-06] (BlackBerry Limited) R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [18432 2015-03-19] (BlackBerry Limited) R3 RimVSerPort; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-07-07] (Realtek ) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410880 2015-07-01] (Realsil Semiconductor Corporation) S0 scmbus; C:\Windows\System32\drivers\scmbus.sys [88416 2016-07-16] (Microsoft Corporation) S3 scmdisk0101; C:\Windows\System32\drivers\scmdisk0101.sys [123904 2016-07-16] (Microsoft Corporation) S3 UcmTcpciCx0101; C:\Windows\System32\Drivers\UcmTcpciCx.sys [108544 2016-07-16] (Microsoft Corporation) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [45568 2016-07-16] (Microsoft Corporation) S3 vmgid; C:\Windows\System32\drivers\vmgid.sys [10240 2016-07-16] (Microsoft Corporation) R0 volume; C:\Windows\System32\drivers\volume.sys [16224 2016-07-16] (Microsoft Corporation) R2 wcifs; C:\Windows\system32\drivers\wcifs.sys [119648 2016-07-16] (Microsoft Corporation) R2 wcnfs; C:\Windows\system32\drivers\wcnfs.sys [66560 2016-07-16] (Microsoft Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) NETSVC: shpamsvc -> C:\Windows\system32\Windows.SharedPC.AccountManager.dll (Microsoft Corporation) NETSVC: wisvc -> C:\Windows\system32\flightsettings.dll (Microsoft Corporation) NETSVC: WpnService -> C:\Windows\system32\WpnService.dll (Microsoft Corporation) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-08-19 23:57 - 2016-08-19 23:57 - 00001004 _____ C:\Users\Misiek\Desktop\error.txt 2016-08-19 20:25 - 2016-08-19 20:25 - 00000000 ___HD C:\$SysReset 2016-08-19 18:15 - 2016-08-19 21:17 - 00055533 _____ C:\WINDOWS\DirectX.log 2016-08-18 22:37 - 2016-08-18 22:17 - 00000000 ___DC C:\WINDOWS\Panther 2016-08-18 22:37 - 2016-08-18 21:45 - 00000000 __SHD C:\Recovery 2016-08-18 22:33 - 2016-08-18 22:33 - 00000000 ____D C:\Windows.old 2016-08-18 22:32 - 2016-08-18 22:32 - 23682048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 22572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 09125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 07623168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2016-08-18 22:32 - 2016-08-18 22:32 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2016-08-18 22:32 - 2016-08-18 22:32 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 05511168 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 03617280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-08-18 22:32 - 2016-08-18 22:32 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-08-18 22:32 - 2016-08-18 22:32 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 02251440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 01785856 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01265424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01260384 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00843104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00151232 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2016-08-18 22:32 - 2016-08-18 22:32 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2016-08-18 22:32 - 2016-08-18 22:32 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-08-18 22:32 - 2016-08-18 22:32 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-08-18 22:31 - 2016-08-18 22:31 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-08-18 22:26 - 2016-08-18 22:26 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2016-08-18 22:26 - 2016-08-18 22:26 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-08-18 22:26 - 2016-08-18 22:26 - 00000000 ____D C:\Program Files\MSBuild 2016-08-18 22:26 - 2016-08-18 22:26 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-08-18 22:26 - 2016-08-18 22:26 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-08-18 22:26 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2016-08-18 22:26 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2016-08-18 22:26 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2016-08-18 22:26 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2016-08-18 22:26 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-08-18 22:26 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2016-08-18 22:21 - 2016-08-18 22:21 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2016-08-18 22:19 - 2016-08-18 22:19 - 00000000 ____D C:\ProgramData\USOShared 2016-08-18 22:18 - 2016-08-19 18:35 - 00000000 ____D C:\Users\Misiek\AppData\Local\ConnectedDevicesPlatform 2016-08-18 22:18 - 2016-08-18 22:18 - 00000020 ___SH C:\Users\Misiek\ntuser.ini 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Szablony 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Moje dokumenty 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Menu Start 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\Dane aplikacji 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia 2016-08-18 22:17 - 2016-08-18 22:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji 2016-08-18 22:15 - 2016-08-18 22:16 - 00007623 _____ C:\WINDOWS\diagwrn.xml 2016-08-18 22:15 - 2016-08-18 22:16 - 00007623 _____ C:\WINDOWS\diagerr.xml 2016-08-18 22:05 - 2016-08-19 23:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-18 22:05 - 2016-08-19 12:00 - 00003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2016-08-18 22:05 - 2016-08-19 12:00 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2016-08-18 22:05 - 2016-08-18 22:05 - 00003702 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2016-08-18 22:05 - 2016-08-18 22:05 - 00003582 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-08-18 22:05 - 2016-08-18 22:05 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-08-18 22:05 - 2016-08-18 22:05 - 00003474 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2016-08-18 22:05 - 2016-08-18 22:05 - 00003448 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2016-08-18 22:05 - 2016-08-18 22:05 - 00003358 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-08-18 22:05 - 2016-08-18 22:05 - 00003350 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0FAB3DD0-EEEF-472A-9BFD-CCA27FAC2D9D} 2016-08-18 22:05 - 2016-08-18 22:05 - 00002968 _____ C:\WINDOWS\System32\Tasks\Update Checker 2016-08-18 22:05 - 2016-08-18 22:05 - 00002950 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3 2016-08-18 22:05 - 2016-08-18 22:05 - 00002938 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-689077054-4267889677-1268134294-1001 2016-08-18 22:05 - 2016-08-18 22:05 - 00002876 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-689077054-4267889677-1268134294-500 2016-08-18 22:05 - 2016-08-18 22:05 - 00002862 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher 2016-08-18 22:05 - 2016-08-18 22:05 - 00002802 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-malizator@gmail.com 2016-08-18 22:05 - 2016-08-18 22:05 - 00002668 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task 2016-08-18 22:05 - 2016-08-18 22:05 - 00002362 _____ C:\WINDOWS\System32\Tasks\DriverToolkit Autorun 2016-08-18 22:05 - 2016-08-18 22:05 - 00002258 _____ C:\WINDOWS\System32\Tasks\{634AE29A-63FC-4E5D-977C-360863C19FFE} 2016-08-18 22:05 - 2016-08-18 22:05 - 00002250 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON 2016-08-18 22:05 - 2016-08-18 22:05 - 00002188 _____ C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus 2016-08-18 22:05 - 2016-08-18 22:05 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2016-08-18 22:05 - 2016-08-18 22:05 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee 2016-08-18 22:05 - 2016-08-18 22:05 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2016-08-18 22:02 - 2016-08-18 22:14 - 00007153 _____ C:\WINDOWS\comsetup.log 2016-08-18 21:59 - 2016-08-19 18:19 - 00003182 _____ C:\WINDOWS\PFRO.log 2016-08-18 21:56 - 2016-08-18 21:56 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-08-18 21:49 - 2016-08-18 21:58 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-08-18 21:46 - 2016-08-19 23:09 - 00000000 ____D C:\Users\Misiek 2016-08-18 21:46 - 2016-08-18 22:18 - 00000000 ___RD C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Ustawienia lokalne 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Szablony 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Moje dokumenty 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Menu Start 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Documents\Moje wideo 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Documents\Moje obrazy 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Documents\Moja muzyka 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\Dane aplikacji 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\AppData\Local\Historia 2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 _SHDL C:\Users\Misiek\AppData\Local\Dane aplikacji 2016-08-18 21:46 - 2016-07-16 13:48 - 00000000 ___RD C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2016-08-18 21:46 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2016-08-18 21:46 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2016-08-18 21:46 - 2016-07-16 13:47 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2016-08-18 21:42 - 2016-08-19 23:23 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-08-18 21:42 - 2016-08-18 21:42 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\Program Files\Realtek 2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2016-08-18 21:42 - 2016-05-27 15:50 - 00104584 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2016-08-18 21:42 - 2016-05-27 15:50 - 00100488 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2016-08-18 21:41 - 2016-08-18 21:58 - 00000000 ____D C:\ProgramData\NVIDIA 2016-08-18 21:41 - 2016-08-18 21:50 - 00000000 ____D C:\Program Files\Intel 2016-08-18 21:41 - 2016-08-18 21:41 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2016-08-18 21:41 - 2016-08-18 21:41 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_RimSerial_AMD64_01007.Wdf 2016-08-18 21:41 - 2016-08-11 14:27 - 06386048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 02468288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-08-18 21:41 - 2016-08-11 14:27 - 00548920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-08-18 21:41 - 2016-08-11 14:27 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-08-18 21:41 - 2016-08-09 18:06 - 07255045 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-08-18 21:41 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-08-18 21:40 - 2016-08-18 21:50 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-08-18 21:40 - 2016-08-18 21:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-08-18 21:39 - 2016-08-19 20:38 - 00016583 _____ C:\WINDOWS\setupact.log 2016-08-18 21:39 - 2016-08-18 21:42 - 00000164 _____ C:\WINDOWS\setuperr.log 2016-08-18 21:38 - 2016-08-19 23:22 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-08-18 21:38 - 2016-08-19 21:37 - 00407808 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-08-18 21:38 - 2016-08-18 21:38 - 00051235 _____ C:\WINDOWS\system32\NetSetupMig.log 2016-08-18 12:00 - 2016-08-18 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-08-17 23:08 - 2016-08-19 23:24 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2016-08-16 21:26 - 2016-05-04 04:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2016-08-16 21:26 - 2016-05-04 04:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1.dll 2016-08-16 21:26 - 2016-05-04 04:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo.exe 2016-08-16 21:26 - 2016-05-04 04:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2016-08-16 21:22 - 2016-08-11 16:33 - 40070200 _____ C:\WINDOWS\system32\nvcompiler.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 35182648 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 34837952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 28236856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 10728856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 10530960 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 10273096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 09086344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 08681720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 08644456 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 03901520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 03443152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 02914752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 02553912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 01922616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437254.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 01585088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437254.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 01023544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00961080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00945088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00897592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00803096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00694952 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00644648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00584712 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00442816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00413256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00393664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00345936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2016-08-16 21:22 - 2016-08-11 16:33 - 00040827 _____ C:\WINDOWS\system32\nvinfo.pb 2016-08-16 21:22 - 2016-08-11 16:33 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2016-08-16 21:22 - 2016-08-11 16:33 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2016-08-16 17:40 - 2016-08-18 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security 2016-08-16 17:16 - 2016-08-16 17:17 - 04117216 _____ (Husdawg, LLC) C:\Users\Misiek\Downloads\Detection (1).exe 2016-08-16 16:53 - 2016-08-16 17:15 - 04113584 _____ (Husdawg, LLC) C:\Users\Misiek\Downloads\Detection.exe 2016-08-08 23:14 - 2016-08-08 23:14 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Misiek\Downloads\Hola-Setup (1).exe 2016-08-08 23:14 - 2016-08-08 23:14 - 00000000 ____D C:\Users\Misiek\AppData\Local\Chromium 2016-08-08 23:12 - 2016-08-08 23:12 - 00001086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hola.lnk 2016-08-08 23:12 - 2016-08-08 23:12 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Hola 2016-08-08 23:12 - 2016-08-08 23:12 - 00000000 ____D C:\Program Files\Hola 2016-08-08 23:10 - 2016-08-08 23:10 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Misiek\Downloads\Hola-Setup.exe 2016-08-02 22:37 - 2016-08-07 23:56 - 00000000 ____D C:\Users\Misiek\Documents\Need For Speed 2016-08-02 22:02 - 2016-08-18 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™ 2016-08-02 22:02 - 2016-08-02 22:02 - 00000931 _____ C:\Users\Public\Desktop\Need for Speed™.lnk 2016-07-30 20:42 - 2016-07-11 04:34 - 01939000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436881.dll 2016-07-30 20:42 - 2016-07-11 04:34 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436881.dll 2016-07-30 20:27 - 2016-07-30 20:38 - 360576160 _____ (NVIDIA Corporation) C:\Users\Misiek\Downloads\368.81-notebook-win10-64bit-international-whql.exe 2016-07-30 10:45 - 2016-07-30 10:45 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\OBS 2016-07-26 23:38 - 2016-07-26 23:38 - 00774825 _____ C:\Users\Misiek\Downloads\steamcmd.zip 2016-07-26 20:47 - 2016-07-26 20:49 - 30191359 _____ C:\Users\Misiek\Downloads\quizwanie.apk 2016-07-25 16:13 - 2016-07-25 16:13 - 00000000 ____D C:\Users\Misiek\Downloads\Rust - optymalne ustawienia graficzne 2016-07-24 22:54 - 2016-07-24 22:54 - 00142683 _____ C:\Users\Misiek\Downloads\Rust - optymalne ustawienia graficzne.zip 2016-07-22 20:57 - 2016-08-18 21:48 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2016-07-22 20:57 - 2016-07-30 10:51 - 00000000 ____D C:\Users\Misiek\AppData\Local\Ubisoft Game Launcher 2016-07-22 20:54 - 2016-07-22 20:56 - 62443600 _____ (Ubisoft) C:\Users\Misiek\Downloads\UplayInstaller.exe 2016-07-22 17:30 - 2016-07-22 17:30 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Aspyr Media ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-08-19 23:56 - 2015-07-05 13:02 - 00000000 ____D C:\FRST 2016-08-19 23:55 - 2015-10-05 10:34 - 00000000 ____D C:\Users\Misiek\Desktop\Nowy folder 2016-08-19 23:29 - 2016-07-17 00:05 - 00502012 _____ C:\WINDOWS\system32\perfh015.dat 2016-08-19 23:29 - 2016-07-17 00:05 - 00087524 _____ C:\WINDOWS\system32\perfc015.dat 2016-08-19 23:29 - 2015-08-07 18:30 - 01510872 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-19 23:24 - 2015-08-07 18:41 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture 2016-08-19 23:24 - 2015-06-28 15:20 - 00000165 _____ C:\Users\Misiek\AppData\Roaming\sp_data.sys 2016-08-19 23:23 - 2015-07-04 00:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2016-08-19 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-19 22:39 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\sru 2016-08-19 21:37 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\th-TH 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\he-IL 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\fr-CA 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-19 21:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2016-08-19 20:59 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-19 18:14 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\restore 2016-08-19 07:44 - 2015-07-21 20:42 - 00000000 ____D C:\Users\Misiek\AppData\Local\Adobe 2016-08-19 07:43 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat 2016-08-18 22:37 - 2015-06-28 15:17 - 00000000 ____D C:\Users\Misiek\AppData\Local\Packages 2016-08-18 22:36 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-08-18 22:26 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2016-08-18 22:26 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI 2016-08-18 22:23 - 2015-08-07 18:45 - 00002450 _____ C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-18 22:23 - 2015-06-28 15:23 - 00000000 ___RD C:\Users\Misiek\OneDrive 2016-08-18 22:19 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate 2016-08-18 22:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache 2016-08-18 22:17 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT 2016-08-18 22:17 - 2016-07-16 08:04 - 00000000 __RHD C:\Users\Default 2016-08-18 22:14 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-08-18 22:14 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration 2016-08-18 22:14 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2016-08-18 22:05 - 2015-08-07 18:34 - 00023140 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-08-18 22:04 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries 2016-08-18 21:58 - 2016-07-16 13:49 - 00004176 _____ C:\WINDOWS\DtcInstall.log 2016-08-18 21:58 - 2016-07-16 08:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM 2016-08-18 21:58 - 2016-07-14 14:09 - 00000000 ____D C:\WINDOWS\SysWOW64\PolicyDefinitions 2016-08-18 21:58 - 2016-07-14 14:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Anti-Beacon 2016-08-18 21:58 - 2016-06-21 23:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-08-18 21:58 - 2016-05-03 21:52 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2016-08-18 21:58 - 2016-04-27 21:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2016-08-18 21:58 - 2016-02-17 16:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II 2016-08-18 21:58 - 2016-02-16 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm 2016-08-18 21:58 - 2016-02-12 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WERSJA DEMO FIFA 16 2016-08-18 21:58 - 2016-02-12 02:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™ Most Wanted 2016-08-18 21:58 - 2016-01-30 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 ツール 2016-08-18 21:58 - 2016-01-28 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III 2016-08-18 21:58 - 2015-12-13 18:51 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2016-08-18 21:58 - 2015-12-13 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Power Data Recovery 7.0 2016-08-18 21:58 - 2015-12-12 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor 2016-08-18 21:58 - 2015-12-12 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VTFEdit 2016-08-18 21:58 - 2015-11-19 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-08-18 21:58 - 2015-11-17 22:50 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Leksykonia 2016-08-18 21:58 - 2015-11-14 16:12 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-08-18 21:58 - 2015-11-06 12:21 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.2 2016-08-18 21:58 - 2015-10-01 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D 2016-08-18 21:58 - 2015-10-01 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-08-18 21:58 - 2015-09-26 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Huawei E3372 2016-08-18 21:58 - 2015-09-16 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry Link 2016-08-18 21:58 - 2015-09-16 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry Blend 2016-08-18 21:58 - 2015-09-07 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-08-18 21:58 - 2015-08-23 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 2016-08-18 21:58 - 2015-08-20 23:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2016-08-18 21:58 - 2015-07-23 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2016-08-18 21:58 - 2015-07-22 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-08-18 21:58 - 2015-07-20 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2016-08-18 21:58 - 2015-07-20 22:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt 2016-08-18 21:58 - 2015-07-10 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FMRTE 2016-08-18 21:58 - 2015-07-05 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune 2016-08-18 21:58 - 2015-06-30 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2016-08-18 21:58 - 2015-06-28 19:45 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-08-18 21:58 - 2015-06-28 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-08-18 21:58 - 2015-06-28 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-08-18 21:58 - 2015-03-12 16:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-08-18 21:58 - 2014-10-21 06:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2016-08-18 21:56 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2016-08-18 21:56 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2016-08-18 21:56 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2016-08-18 21:56 - 2016-07-16 13:47 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2016-08-18 21:56 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-08-18 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2016-08-18 21:52 - 2015-07-05 17:02 - 00000000 ____D C:\WINDOWS\SysWOW64\GPBAK 2016-08-18 21:52 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2016-08-18 21:52 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2016-08-18 21:51 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\System 2016-08-18 21:50 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-08-18 21:50 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\InputMethod 2016-08-18 21:50 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-08-18 21:50 - 2016-05-13 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire 2016-08-18 21:50 - 2016-05-13 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2016-08-18 21:50 - 2016-02-24 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team17 2016-08-18 21:50 - 2016-01-16 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-08-18 21:50 - 2015-12-14 23:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911 2016-08-18 21:50 - 2015-03-12 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower 2016-08-18 21:50 - 2014-10-21 06:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-08-18 21:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Recovery 2016-08-18 21:48 - 2015-08-20 23:24 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2016-08-18 21:45 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-08-18 21:42 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-08-18 21:42 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-08-18 21:41 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help 2016-08-18 21:06 - 2016-07-17 00:43 - 00000000 ___HD C:\$WINDOWS.~BT 2016-08-18 20:56 - 2015-06-28 15:45 - 00001166 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-08-18 20:28 - 2015-06-28 15:35 - 00001070 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-18 13:56 - 2015-06-28 15:45 - 00001162 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-08-18 12:00 - 2015-06-28 15:44 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-08-18 01:12 - 2016-04-16 13:16 - 00000352 _____ C:\WINDOWS\Tasks\DriverToolkit Autorun.job 2016-08-18 01:12 - 2015-06-28 15:35 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-18 00:44 - 2015-07-04 11:34 - 00000000 ____D C:\ProgramData\Origin 2016-08-17 17:24 - 2015-08-20 23:24 - 00000000 ____D C:\Program Files (x86)\Overwolf 2016-08-17 11:44 - 2016-06-24 11:40 - 00000002 _____ C:\END 2016-08-17 11:15 - 2015-09-26 12:59 - 00000000 ____D C:\Users\Misiek\AppData\Local\Battle.net 2016-08-16 22:23 - 2015-06-28 15:50 - 00000000 ___RD C:\Users\Misiek\Dropbox 2016-08-16 20:58 - 2015-07-22 14:00 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\TeamViewer 2016-08-16 20:58 - 2015-07-03 10:01 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\DAEMON Tools Lite 2016-08-16 20:58 - 2015-06-30 20:56 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\uTorrent 2016-08-16 20:56 - 2016-02-13 22:06 - 00000000 ____D C:\Users\Misiek\AppData\Local\CrashDumps 2016-08-16 20:23 - 2015-06-28 15:44 - 00000000 ____D C:\Users\Misiek\AppData\Local\Dropbox 2016-08-16 20:01 - 2014-12-13 18:21 - 00992600 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys 2016-08-16 20:01 - 2014-11-22 14:12 - 00110424 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys 2016-08-16 20:01 - 2014-11-20 13:39 - 00087984 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys 2016-08-16 20:00 - 2016-05-05 17:13 - 00237400 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys 2016-08-16 17:40 - 2015-07-04 00:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2016-08-13 20:50 - 2016-06-01 21:17 - 00000992 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-08-10 06:59 - 2015-06-30 19:29 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-10 06:51 - 2015-06-30 19:29 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-09 07:29 - 2015-06-28 15:37 - 00002280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-06 13:24 - 2015-12-13 18:22 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-08-02 11:31 - 2014-10-21 06:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-07-31 11:53 - 2015-12-15 00:03 - 00000000 ____D C:\Users\Misiek\AppData\Local\Skyrim 2016-07-30 17:36 - 2015-12-12 14:37 - 00000000 ____D C:\Users\Misiek\Desktop\css 2016-07-30 10:40 - 2015-09-19 16:15 - 00000000 ____D C:\Users\Misiek\Documents\My Games 2016-07-26 23:00 - 2015-09-16 20:19 - 00000000 ____D C:\Users\Misiek\AppData\Roaming\Skype 2016-07-26 21:07 - 2016-07-01 22:15 - 00373496 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-06-28 15:20 - 2016-08-19 23:24 - 0000165 _____ () C:\Users\Misiek\AppData\Roaming\sp_data.sys 2015-07-05 17:29 - 2016-04-26 20:33 - 0007584 _____ () C:\Users\Misiek\AppData\Local\resmon.resmoncfg 2016-08-18 21:42 - 2016-08-18 21:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-10-21 06:28 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd 2014-10-21 06:28 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe 2014-10-21 06:28 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\SetStretch.VBS ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-08-18 21:38 ==================== Koniec FRST.txt ============================