Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 31-08-2016
Uruchomiony przez Maku (administrator)  LENOVO (11-09-2016 13:47:43)
Uruchomiony z C:\Users\Maku\Downloads
Załadowane profile: Maku (Dostępne profile: Maku)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Safe Mode (minimal)
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Maku\Downloads\abda.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13353064 2011-11-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2010-12-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2012-04-02] (Lenovo)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2012-04-02] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9769888 2012-04-02] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2012-04-02] (Lenovo(beijing) Limited)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1841088 2016-09-02] (NVIDIA Corporation)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1610936 2016-07-10] (COMODO)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-05] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-05] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-04-02] (Lenovo)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [716224 2016-03-23] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [Napisy24.pl] => C:\Program Files (x86)\Napisy24\Napisy24.exe [5588936 2016-01-15] (Napisy24.pl)
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Maku\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [Spotify Web Helper] => C:\Users\Maku\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-29] (Spotify Ltd)
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [TIDAL] => [X]
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Run: [GarenaPlus] => "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Policies\Explorer: [] 
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\MountPoints2: {0cb4d617-e2af-11e5-8719-f0def1de4971} - E:\setup.exe
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\MountPoints2: {c8a70c5a-e443-11e5-9439-f0def1de4971} - H:\SETUP.EXE
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [181488 2016-08-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [159352 2016-08-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll [2012-04-02] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2012-04-02]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{69169219-E704-4332-829A-86BA5D197792}: [NameServer] 37.8.214.2,31.11.202.254
Tcpip\..\Interfaces\{FE2DADAD-35C3-4E9F-8582-D0B02D3CB846}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-16756925-1013035860-3979449593-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-16756925-1013035860-3979449593-1002 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
SearchScopes: HKU\S-1-5-21-16756925-1013035860-3979449593-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-16756925-1013035860-3979449593-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO: Partner BHO Class -> {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} -> C:\ProgramData\Partner\Partner64.dll [2012-04-02] (Google Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-04-02] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Partner BHO Class -> {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} -> C:\ProgramData\Partner\Partner.dll [2012-04-02] (Google Inc.)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-04-02] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-04-02] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-04-02] (Google Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-16756925-1013035860-3979449593-1002: @acestream.net/acestreamplugin,version=3.1.6 -> C:\Users\Maku\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies)
FF HKU\S-1-5-21-16756925-1013035860-3979449593-1002\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Maku\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: (Ace Stream Web Extension) - C:\Users\Maku\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2015-12-18]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.onet.pl/
CHR StartupUrls: Default -> "hxxp://www.onet.pl/"
CHR Profile: C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-09]
CHR Extension: (BetterTTV) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2016-06-03]
CHR Extension: (Dokumenty Google) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-09]
CHR Extension: (Dysk Google) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-09]
CHR Extension: (YouTube) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-09]
CHR Extension: (Google Search) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-09]
CHR Extension: (Arkusze Google) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-24]
CHR Extension: (Ace Stream Web Extension) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2016-08-05]
CHR Extension: (Plants vs Zombies) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina [2016-02-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Jadisco.pl) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\onoloilfmbomfgdalcbbpnlnhibneofa [2016-09-07]
CHR Extension: (Gmail) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-09]
CHR Extension: (Chrome Media Router) - C:\Users\Maku\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-25]
CHR HKU\S-1-5-21-16756925-1013035860-3979449593-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1231376 2016-03-23] (Autodesk Inc.)
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
S2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5817256 2016-07-10] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2271928 2016-07-10] (COMODO)
S3 EasyAntiCheat; C:\windows\SysWOW64\EasyAntiCheat.exe [249104 2016-07-08] (EasyAntiCheat Ltd)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
S2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457152 2016-09-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457152 2016-09-11] (NVIDIA Corporation)
S2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-09-11] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2130440 2016-09-09] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2195984 2016-09-09] (Electronic Arts)
S2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2016-08-08] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2014-12-25] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [31648 2016-07-10] (COMODO)
S1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [829600 2016-07-10] (COMODO)
S1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [56472 2016-07-10] (COMODO)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-02-08] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-02-08] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S1 HWiNFO32; C:\windows\system32\drivers\HWiNFO64A.SYS [27552 2016-04-19] (REALiX(tm))
S1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [116248 2016-07-10] (COMODO)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-09-11] (NVIDIA Corporation)
S3 SPUVCbv; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation)
S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [42760 2016-02-21] (Microsoft Corporation)
U0 aswVmm; Brak ImagePath
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
U2 DriverService; Brak ImagePath
S3 gkernel; \??\C:\Users\Maku\AppData\Local\Temp\gkernel.sys [X]
U2 IAStorDataMgrSvc; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerServic; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U2 Stereo Service; Brak ImagePath
S3 xhunter1; \??\C:\windows\xhunter1.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-11 13:47 - 2016-09-11 13:48 - 00020786 _____ C:\Users\Maku\Downloads\FRST.txt
2016-09-11 13:46 - 2016-09-11 13:47 - 00000000 ____D C:\FRST
2016-09-11 13:45 - 2016-09-11 13:46 - 00246476 _____ C:\windows\ntbtlog.txt
2016-09-11 13:41 - 2016-09-11 13:41 - 00593952 _____ (Duplex Secure Ltd) C:\Users\Maku\Downloads\SPTDinst-v189-x64.exe
2016-09-11 13:38 - 2016-09-11 13:38 - 00380928 _____ C:\Users\Maku\Downloads\by22x6k1.exe
2016-09-11 13:33 - 2016-09-11 13:33 - 02397696 _____ (Farbar) C:\Users\Maku\Downloads\abda.exe
2016-09-11 13:27 - 2016-09-11 13:27 - 00000000 ___HD C:\VTRoot
2016-09-11 13:19 - 2016-09-11 13:19 - 00000000 ____D C:\ProgramData\Comodo Downloader
2016-09-11 13:18 - 2016-09-11 13:18 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk
2016-09-11 13:18 - 2016-09-11 13:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2016-09-11 13:07 - 2016-09-11 13:07 - 68616400 _____ (COMODO) C:\Users\Maku\Downloads\cispremium_only_installer.exe
2016-09-11 12:23 - 2016-09-11 13:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-09-11 12:23 - 2016-09-11 12:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-11 12:22 - 2016-09-11 12:22 - 22851472 _____ (Malwarebytes ) C:\Users\Maku\Downloads\mbam-setup-2.2.1.1043.exe
2016-09-11 12:04 - 2016-09-11 13:44 - 00059092 _____ C:\windows\system32\Drivers\fvstore.dat
2016-09-11 12:00 - 2016-09-11 12:00 - 01378550 _____ (Igor Pavlov) C:\Users\Maku\Downloads\7z1602-x64.exe
2016-09-11 11:44 - 2016-09-11 11:44 - 00003826 _____ C:\windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-11 11:44 - 2016-09-11 11:44 - 00003776 _____ C:\windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-11 11:44 - 2016-09-11 11:44 - 00003764 _____ C:\windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-11 11:44 - 2016-09-11 11:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-11 11:44 - 2016-09-11 11:42 - 00001951 _____ C:\windows\NvContainerRecovery.bat
2016-09-11 11:44 - 2016-09-02 13:13 - 01841088 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll
2016-09-11 11:44 - 2016-09-02 13:13 - 01755072 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll
2016-09-11 11:44 - 2016-09-02 13:13 - 01448384 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll
2016-09-11 11:44 - 2016-09-02 13:13 - 01317312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll
2016-09-11 11:44 - 2016-09-02 13:13 - 00120256 _____ C:\windows\system32\NvRtmpStreamer64.dll
2016-09-11 11:43 - 2016-09-11 11:43 - 00104384 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll
2016-09-11 11:43 - 2016-09-11 11:43 - 00094144 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll
2016-09-11 11:43 - 2016-09-11 11:43 - 00046016 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys
2016-09-11 11:43 - 2016-09-11 11:43 - 00003826 _____ C:\windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-11 11:43 - 2016-09-11 11:43 - 00003528 _____ C:\windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-11 11:41 - 2016-09-11 11:41 - 68506480 _____ (NVIDIA Corporation) C:\Users\Maku\Downloads\GeForce_Experience_v3.0.5.22.exe
2016-09-11 09:46 - 2016-09-11 09:46 - 08227032 _____ (Piriform Ltd) C:\Users\Maku\Downloads\ccsetup521.exe
2016-09-11 09:18 - 2016-09-11 13:44 - 01474832 _____ C:\windows\system32\Drivers\sfi.dat
2016-09-11 09:18 - 2016-09-11 09:19 - 00000000 ____D C:\windows\System32\Tasks\COMODO
2016-09-11 09:16 - 2016-09-11 09:17 - 00000000 ____D C:\Program Files\COMODO
2016-09-11 09:16 - 2016-09-11 09:16 - 00000000 ____D C:\ProgramData\Shared Space
2016-09-11 09:16 - 2016-09-11 09:16 - 00000000 ____D C:\ProgramData\Comodo
2016-09-11 09:14 - 2016-09-11 09:15 - 173597920 _____ (COMODO) C:\Users\Maku\Downloads\cispremium_installer_6100_08.exe
2016-09-10 22:52 - 2016-09-10 22:52 - 00000000 ____D C:\Users\Maku\Downloads\SafeZone Installer
2016-09-10 22:48 - 2016-09-10 22:48 - 00044952 _____ () C:\windows\system32\Drivers\staport.sys
2016-09-09 21:49 - 2016-09-10 22:53 - 00000000 ____D C:\Program Files (x86)\ipla
2016-09-09 21:49 - 2016-09-09 21:49 - 00000000 ____D C:\Users\Maku\AppData\Roaming\ipla
2016-09-09 21:49 - 2016-09-09 21:49 - 00000000 ____D C:\ProgramData\RDRM
2016-09-09 21:48 - 2016-09-09 21:48 - 01700352 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdiplus.dll
2016-09-09 21:45 - 2016-09-09 21:47 - 41672008 _____ C:\Users\Maku\Downloads\iplasetup.exe
2016-09-09 13:21 - 2016-09-10 22:43 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth
2016-09-08 19:03 - 2016-09-08 19:03 - 00000000 ____D C:\Users\Maku\.QtWebEngineProcess
2016-09-08 19:03 - 2016-09-08 19:03 - 00000000 ____D C:\Users\Maku\.Origin
2016-09-05 14:27 - 2016-09-05 14:27 - 00000000 ____D C:\Users\Maku\AppData\Local\FO3
2016-09-05 14:25 - 2016-09-05 14:25 - 00000000 ____D C:\Users\Maku\Documents\FIFA ONLINE3
2016-09-05 14:24 - 2016-09-05 14:24 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Garena
2016-09-05 14:24 - 2016-09-05 14:24 - 00000000 ____D C:\ProgramData\Garena
2016-09-05 14:12 - 2016-09-06 12:16 - 00000000 ____D C:\Program Files (x86)\Garena Plus
2016-09-05 14:12 - 2016-09-06 12:15 - 00000000 ____D C:\Program Files (x86)\GarenaFO3
2016-09-05 14:11 - 2016-09-05 14:11 - 00277640 _____ C:\Users\Maku\Downloads\Garena_FO3_Full_Installer_20160728.exe
2016-09-05 14:05 - 2016-09-05 14:11 - 1792967024 _____ C:\Users\Maku\Downloads\Garena_FO3_Full_Installer_20160728.2.dat
2016-09-05 13:58 - 2016-09-05 14:11 - 2097152000 _____ C:\Users\Maku\Downloads\Garena_FO3_Full_Installer_20160728.1.dat
2016-09-05 13:58 - 2016-09-05 13:58 - 05194192 _____ C:\Users\Maku\Downloads\fo3Installer.exe
2016-09-05 13:58 - 2016-09-05 13:58 - 00000000 ____D C:\Users\Maku\AppData\Local\Garena
2016-08-31 23:08 - 2016-08-31 23:08 - 00000000 ____D C:\SWTOOLS
2016-08-31 23:06 - 2016-08-31 23:07 - 271339448 _____ (Lenovo Group Limited ) C:\Users\Maku\Downloads\c2blt01us17.exe
2016-08-31 23:01 - 2016-08-31 23:01 - 61933731 _____ C:\Users\Maku\Desktop\fifa mob.apk
2016-08-31 19:10 - 2016-08-31 19:10 - 00000000 ____D C:\windows\SysWOW64\NV
2016-08-31 19:10 - 2016-08-31 19:10 - 00000000 ____D C:\windows\system32\NV
2016-08-31 19:08 - 2016-08-26 01:28 - 40070200 _____ C:\windows\system32\nvcompiler.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 35182648 _____ C:\windows\SysWOW64\nvcompiler.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 19848080 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 17463088 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 17263792 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys
2016-08-31 19:08 - 2016-08-26 01:28 - 10865704 _____ C:\windows\system32\nvptxJitCompiler.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 08875408 _____ C:\windows\SysWOW64\nvptxJitCompiler.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6437270.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6437270.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 01019960 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00686896 _____ C:\windows\system32\nvfatbinaryLoader.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00575984 _____ C:\windows\SysWOW64\nvfatbinaryLoader.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll
2016-08-31 19:08 - 2016-08-26 01:28 - 00039992 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvpciflt.sys
2016-08-31 12:50 - 2016-08-31 12:50 - 00000000 ____D C:\Users\Maku\Documents\Battlefield 1 Open Beta
2016-08-30 20:04 - 2016-08-30 21:01 - 00000000 ____D C:\Users\Maku\Downloads\F1.2016-FULL.UNLOCKED
2016-08-29 23:14 - 2016-08-29 23:14 - 02213939 _____ (GON ) C:\Users\Maku\Downloads\setup_GonVisor_2_44_01_viewer.exe
2016-08-29 23:14 - 2016-08-29 23:14 - 00000000 ____D C:\Users\Maku\AppData\Roaming\GonVisor
2016-08-29 23:11 - 2016-08-29 23:11 - 00000000 ____D C:\Users\Maku\AppData\Local\Windows Live
2016-08-29 23:11 - 2016-08-29 23:11 - 00000000 ____D C:\Users\Maku\AppData\Local\{B34A72E6-A14D-4C40-98AB-143FCB7E79A7}
2016-08-29 23:11 - 2016-08-29 23:11 - 00000000 ____D C:\Users\Maku\AppData\Local\{A8ED8D67-135A-4489-904D-AA2524A3892F}
2016-08-29 22:19 - 2016-08-29 22:28 - 00000000 ____D C:\Users\Maku\Desktop\tytani
2016-08-27 22:48 - 2016-08-27 22:52 - 00000000 ____D C:\Users\Maku\Desktop\dragon ball
2016-08-27 11:54 - 2016-08-27 11:54 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Steam
2016-08-26 12:19 - 2016-08-29 11:09 - 00000000 ____D C:\Users\Maku\AppData\Roaming\PortForward.com
2016-08-26 12:19 - 2016-08-26 12:19 - 05841520 _____ (Portforward, LLC) C:\Users\Maku\Downloads\setup-network-utilities.exe
2016-08-26 12:19 - 2016-08-26 12:19 - 00000000 ____D C:\Users\Maku\AppData\Local\Downloaded Installations
2016-08-22 18:35 - 2016-08-22 18:35 - 00000000 ____D C:\Users\Maku\.swt
2016-08-22 18:27 - 2016-08-22 18:27 - 00013532 _____ C:\Users\Maku\AppData\Localtransition_695d023943ae953cd599497f44e981eb.ini
2016-08-22 18:27 - 2016-08-22 18:27 - 00000000 ____D C:\Users\Maku\AppData\Local\Ankama
2016-08-17 09:38 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2016-08-17 09:38 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2016-08-16 11:04 - 2016-08-11 16:31 - 01922616 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6437254.dll
2016-08-16 11:04 - 2016-08-11 16:31 - 01586744 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6437254.dll
2016-08-16 11:04 - 2016-08-11 16:31 - 00000669 _____ C:\windows\SysWOW64\nv-vk32.json
2016-08-16 11:04 - 2016-08-11 16:31 - 00000669 _____ C:\windows\system32\nv-vk64.json

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-11 13:46 - 2012-04-02 19:53 - 00164525 _____ C:\windows\system32\fastboot.set
2016-09-11 13:44 - 2016-02-18 22:17 - 00000000 ____D C:\ProgramData\Napisy24
2016-09-11 13:39 - 2016-02-09 11:55 - 00000000 ____D C:\Users\Maku\AppData\Local\CrashDumps
2016-09-11 13:32 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-11 13:32 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-11 13:30 - 2012-04-03 03:01 - 00818424 _____ C:\windows\system32\perfh015.dat
2016-09-11 13:30 - 2012-04-03 03:01 - 00212878 _____ C:\windows\system32\perfc015.dat
2016-09-11 13:30 - 2009-07-14 07:13 - 01806950 _____ C:\windows\system32\PerfStringBackup.INI
2016-09-11 13:30 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf
2016-09-11 13:24 - 2012-04-02 20:01 - 00001048 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-11 13:24 - 2012-04-02 19:23 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-11 13:23 - 2012-04-02 20:01 - 00001044 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-11 13:23 - 2012-04-02 19:51 - 00000000 ____D C:\ProgramData\VeriFace
2016-09-11 13:23 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-09-11 13:05 - 2016-05-17 10:21 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-09-11 13:03 - 2016-03-11 16:47 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-09-11 12:52 - 2016-03-07 20:05 - 00000000 ____D C:\Program Files\KMSpico
2016-09-11 12:11 - 2016-02-09 11:54 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Origin
2016-09-11 12:11 - 2016-02-08 17:28 - 00000000 ____D C:\ProgramData\Origin
2016-09-11 12:06 - 2016-02-15 17:52 - 00000000 ____D C:\Users\Maku\AppData\Local\Nvidia Corporation
2016-09-11 12:06 - 2016-02-08 16:44 - 00000000 ____D C:\Program Files\7-Zip
2016-09-11 12:01 - 2016-02-08 16:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-09-11 11:52 - 2016-02-09 11:50 - 00000000 ____D C:\Users\Maku\AppData\Local\NVIDIA
2016-09-11 11:44 - 2012-04-02 19:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-11 11:44 - 2012-04-02 19:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-11 11:44 - 2012-04-02 19:22 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-10 22:52 - 2016-02-08 11:51 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-10 22:44 - 2016-02-09 11:49 - 00000000 ____D C:\Users\Maku
2016-09-10 22:43 - 2016-03-07 15:01 - 00000000 ____D C:\ProgramData\Autodesk
2016-09-10 22:43 - 2016-03-07 14:57 - 00000000 ____D C:\Users\Maku\AppData\Local\Akamai
2016-09-10 22:43 - 2016-03-05 20:47 - 00000000 ____D C:\windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-09-10 22:43 - 2016-02-09 11:49 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2016-09-10 22:43 - 2016-02-08 12:15 - 00000000 ____D C:\windows\System32\Tasks\AVAST Software
2016-09-10 22:43 - 2016-02-08 12:00 - 00000000 ____D C:\Program Files\AVAST Software
2016-09-10 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\windows\registration
2016-09-09 13:25 - 2016-02-08 17:26 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-09 13:22 - 2016-02-09 11:54 - 00000000 ____D C:\Users\Maku\AppData\Local\Origin
2016-09-08 21:03 - 2016-02-09 21:20 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Skype
2016-09-08 21:02 - 2016-02-08 17:41 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-08 10:52 - 2016-02-18 13:57 - 00000000 ____D C:\Users\Maku\AppData\Local\Ubisoft Game Launcher
2016-08-31 23:11 - 2012-04-02 19:17 - 00000000 ____D C:\Program Files (x86)\Intel
2016-08-31 13:18 - 2016-02-08 17:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-08-31 11:10 - 2016-02-11 20:18 - 00000000 ____D C:\Users\Maku\AppData\Roaming\uTorrent
2016-08-30 00:31 - 2016-02-08 17:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-30 00:30 - 2016-02-08 17:06 - 00000000 ____D C:\ProgramData\Skype
2016-08-29 11:12 - 2016-03-07 15:08 - 00000000 ___RD C:\Users\Maku\Desktop\Magazyn
2016-08-29 11:08 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-27 23:38 - 2016-02-11 20:23 - 00000000 ____D C:\Users\Maku\AppData\Roaming\vlc
2016-08-27 11:54 - 2016-05-28 19:50 - 00000000 ____D C:\Users\Maku\AppData\Roaming\2K Sports
2016-08-26 11:57 - 2016-02-20 21:00 - 00000000 ____D C:\Users\Maku\AppData\Local\ElevatedDiagnostics
2016-08-26 11:57 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2016-08-26 01:28 - 2016-02-08 17:14 - 14352816 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll
2016-08-26 01:28 - 2016-02-08 17:14 - 00493608 _____ (NVIDIA Corporation) C:\windows\system32\nvumdshimx.dll
2016-08-26 01:28 - 2016-02-08 17:14 - 00408784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll
2016-08-26 01:28 - 2012-04-02 19:23 - 03917512 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll
2016-08-26 01:28 - 2012-04-02 19:23 - 03456888 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll
2016-08-26 01:28 - 2012-04-02 19:23 - 00181488 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll
2016-08-26 01:28 - 2012-04-02 19:23 - 00159352 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll
2016-08-26 01:28 - 2012-04-02 19:23 - 00039731 _____ C:\windows\system32\nvinfo.pb
2016-08-25 23:10 - 2012-04-02 19:23 - 06385720 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 02475064 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 01764408 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 01362368 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
2016-08-25 23:10 - 2012-04-02 19:23 - 00548408 _____ (NVIDIA Corporation) C:\windows\system32\nv3dappshext.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 00393784 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 00144832 _____ (NVIDIA Corporation) C:\windows\SysWOW64\oemdspif.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 00081856 _____ (NVIDIA Corporation) C:\windows\system32\nv3dappshextr.dll
2016-08-25 23:10 - 2012-04-02 19:23 - 00071224 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll
2016-08-25 14:32 - 2016-02-15 19:19 - 00000000 ____D C:\Users\Maku\AppData\Roaming\foobar2000
2016-08-23 00:13 - 2016-03-07 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-22 18:35 - 2016-05-17 18:07 - 00000000 ____D C:\Users\Maku\AppData\Roaming\Mozilla
2016-08-22 17:18 - 2012-04-02 19:23 - 07320235 _____ C:\windows\system32\nvcoproc.bin
2016-08-21 15:35 - 2016-02-08 18:25 - 00001147 _____ C:\Users\Public\Desktop\FIFA 16.lnk
2016-08-18 10:06 - 2016-05-09 10:39 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-08-18 10:06 - 2016-05-09 10:36 - 00000000 ____D C:\ProgramData\PDF Architect 4
2016-08-18 00:51 - 2016-06-14 21:59 - 00000000 ____D C:\Users\Maku\AppData\Roaming\.ACEStream
2016-08-18 00:47 - 2016-06-14 22:00 - 00000000 ___HD C:\_acestream_cache_
2016-08-17 12:28 - 2016-02-18 18:50 - 00000000 ____D C:\Users\Maku\Documents\My Games
2016-08-17 11:30 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache

==================== Pliki w katalogu głównym wybranych folderów =======

2016-07-04 20:55 - 2016-07-04 20:55 - 0035301 _____ () C:\Users\Maku\AppData\Local\recently-used.xbel
2016-03-15 19:15 - 2016-03-15 19:15 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2016-03-07 20:22 - 2016-03-07 20:22 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Niektóre pliki w TEMP:
====================
C:\Users\Maku\AppData\Local\Temp\44a5299d-786c-4951-9f9a-bbb7920fbd07.exe
C:\Users\Maku\AppData\Local\Temp\4754be88-b735-46fd-a327-a5aefa3a9c17.exe
C:\Users\Maku\AppData\Local\Temp\745383347bd528430b2f317cfc07a1c2.dll
C:\Users\Maku\AppData\Local\Temp\abba4115-08e6-4c7e-8048-c6b9fbc0a5d7.exe
C:\Users\Maku\AppData\Local\Temp\AcDeltree.exe
C:\Users\Maku\AppData\Local\Temp\c5e33b6d8db822b10eec8b5666f64a1d.dll
C:\Users\Maku\AppData\Local\Temp\DAEMON Tools Lite (1).exe
C:\Users\Maku\AppData\Local\Temp\DAEMON Tools Lite.exe
C:\Users\Maku\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Maku\AppData\Local\Temp\jre-8u101-windows-au.exe
C:\Users\Maku\AppData\Local\Temp\jre-8u91-windows-au.exe
C:\Users\Maku\AppData\Local\Temp\ose00002.exe
C:\Users\Maku\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Maku\AppData\Local\Temp\sonarinst.exe
C:\Users\Maku\AppData\Local\Temp\vlc-2.2.4-win32.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-09-05 22:01

==================== Koniec  FRST.txt ============================