Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-09-2016
Uruchomiony przez Marta (administrator)  MARTA-KOMPUTER (27-09-2016 20:07:10)
Uruchomiony z C:\Users\Marta\Downloads
Załadowane profile: Marta (Dostępne profile: Marta)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6718224 2016-08-26] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4028863833-833355763-2055583715-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-4028863833-833355763-2055583715-1000\...\MountPoints2: {395f1c5f-211d-11e4-a7f8-b870f4a3f4eb} - G:\setup.exe
HKU\S-1-5-21-4028863833-833355763-2055583715-1000\...\MountPoints2: {59bc2f1a-32c0-11e4-b83f-d6af7830a75f} - F:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [181488 2016-08-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [159352 2016-08-26] (NVIDIA Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{EB066336-A3A0-4B1E-BBFC-E5054E29A4C3}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-4028863833-833355763-2055583715-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKU\S-1-5-21-4028863833-833355763-2055583715-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-20] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\r0nhh661.default-1422106769010
FF Session Restore: -> [funkcja włączona]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4028863833-833355763-2055583715-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Marta\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-02-18] (Unity Technologies ApS)
FF Extension: (20-20 3D Viewer - IKEA) - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\r0nhh661.default-1422106769010\extensions\2020Player_IKEA@2020Technologies.com [2016-09-03]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => nie znaleziono

Chrome: 
=======
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default [2016-09-27]
CHR Extension: (Prezentacje Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-28]
CHR Extension: (Dokumenty Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-30]
CHR Extension: (Dysk Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-28]
CHR Extension: (YouTube) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-28]
CHR Extension: (Adblock Plus) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-09-01]
CHR Extension: (Google Search) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-28]
CHR Extension: (Arkusze Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-24]
CHR Extension: (Tiësto) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2015-12-28]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-09]
CHR Extension: (Gmail) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-28]
CHR Extension: (Chrome Media Router) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-26]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-08-26] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5285344 2016-08-26] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1149712 2016-09-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-08-26] (AVG Technologies CZ, s.r.o.)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [310016 2016-08-23] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272640 2016-07-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [262400 2016-08-02] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-11] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-26 17:07 - 2016-09-26 17:07 - 04462584 _____ (Ghisler Software GmbH) C:\Users\Marta\Downloads\tcmd852ax64.exe
2016-09-26 17:07 - 2016-09-26 17:07 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2016-09-26 17:07 - 2016-09-26 17:07 - 00000000 ____D C:\Users\Marta\AppData\Roaming\GHISLER
2016-09-26 17:07 - 2016-09-26 17:07 - 00000000 ____D C:\totalcmd
2016-09-25 09:21 - 2016-09-25 20:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-21 17:02 - 2016-09-21 17:02 - 00001228 _____ C:\Users\Marta\Desktop\adwcleaner_6.020 — skrót.lnk
2016-09-21 16:58 - 2016-09-21 17:00 - 03861056 _____ C:\Users\Marta\Downloads\adwcleaner_6.020.exe
2016-09-21 15:29 - 2016-09-21 15:29 - 00000000 ____D C:\Windows\SysWOW64\NV
2016-09-21 15:29 - 2016-09-21 15:29 - 00000000 ____D C:\Windows\system32\NV
2016-09-21 15:29 - 2016-09-21 15:29 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-20 22:41 - 2016-09-20 22:41 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-09-20 22:41 - 2016-08-25 23:10 - 02475064 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-09-20 22:41 - 2016-08-25 23:10 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-09-20 22:41 - 2016-08-25 23:10 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-09-20 22:41 - 2016-08-25 23:10 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-09-20 22:41 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-09-20 22:41 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-09-20 22:41 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-09-20 22:41 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-09-20 22:40 - 2016-09-20 22:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-20 22:40 - 2016-08-25 23:10 - 06385720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-09-20 22:40 - 2016-08-25 23:10 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-09-20 22:40 - 2016-08-25 23:10 - 01362368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-09-20 22:40 - 2016-08-25 23:10 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-09-20 22:40 - 2016-08-22 17:18 - 07320235 _____ C:\Windows\system32\nvcoproc.bin
2016-09-20 22:38 - 2016-08-26 01:28 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 19848080 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 17463088 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 17263792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 14352816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-20 22:38 - 2016-08-26 01:28 - 10865704 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 08875408 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 03917512 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 03456888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 01019960 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00686896 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00575984 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00408784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-20 22:38 - 2016-08-26 01:28 - 00039992 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2016-09-20 22:38 - 2016-08-26 01:28 - 00039731 _____ C:\Windows\system32\nvinfo.pb
2016-09-20 22:38 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-20 22:38 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-20 22:18 - 2016-09-20 22:21 - 363556792 _____ (NVIDIA Corporation) C:\Users\Marta\Downloads\372.70-notebook-win8-win7-64bit-international-whql.exe
2016-09-20 21:11 - 2016-09-27 20:06 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2016-09-20 20:51 - 2016-09-20 20:51 - 00000624 _____ C:\Users\Marta\Desktop\ModPack by DjVirusPL 0.9.15.2 v9.lnk
2016-09-20 20:51 - 2016-09-20 20:51 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ModPack by DjVirusPL 0.9.15.2 v9
2016-09-19 21:26 - 2016-09-19 21:26 - 13857693 _____ C:\Users\Marta\Downloads\km_polaczenia_spawane__di__2014.pdf
2016-09-18 11:29 - 2016-09-18 11:29 - 01224080 _____ ( ) C:\Users\Marta\Downloads\hwmonitor_1.29.exe
2016-09-18 11:29 - 2016-09-18 11:29 - 00000930 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2016-09-18 11:29 - 2016-09-18 11:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-09-18 11:29 - 2016-09-18 11:29 - 00000000 ____D C:\Program Files\CPUID
2016-09-18 11:28 - 2016-09-18 11:28 - 00981832 _____ ( ) C:\Users\Marta\Downloads\HWMonitor-33495-dp.exe
2016-09-18 09:05 - 2016-09-18 09:05 - 03367392 _____ (Irfan Skiljan) C:\Users\Marta\Downloads\iview442_x64_setup (1).exe
2016-09-17 19:45 - 2016-09-27 20:02 - 00000000 ____D C:\Users\Marta\Downloads\FRST-OlderVersion
2016-09-17 19:45 - 2016-09-17 19:46 - 00001071 _____ C:\Users\Marta\Downloads\Fixlog.txt
2016-09-17 12:50 - 2016-09-17 12:50 - 00000604 _____ C:\Users\Public\Desktop\World of Tanks.lnk
2016-09-17 12:50 - 2016-09-17 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2016-09-17 12:48 - 2016-09-17 12:49 - 04726080 _____ (Wargaming.net ) C:\Users\Marta\Downloads\WoT_internet_install_eu (1).exe
2016-09-16 20:15 - 2016-09-27 20:06 - 00000000 ____D C:\Users\Marta\Desktop\fix
2016-09-16 20:14 - 2016-09-16 20:14 - 00062820 _____ C:\Users\Marta\Downloads\Shortcut.txt
2016-09-16 20:13 - 2016-09-27 20:05 - 00024830 _____ C:\Users\Marta\Downloads\Addition.txt
2016-09-16 20:11 - 2016-09-27 20:07 - 00014066 _____ C:\Users\Marta\Downloads\FRST.txt
2016-09-16 20:10 - 2016-09-27 20:07 - 00000000 ____D C:\FRST
2016-09-16 20:10 - 2016-09-16 20:10 - 00380928 _____ C:\Users\Marta\Downloads\s1qhoygi.exe
2016-09-16 20:09 - 2016-09-27 20:02 - 02403328 _____ (Farbar) C:\Users\Marta\Downloads\FRST64.exe
2016-09-12 20:13 - 2016-09-12 20:14 - 00914978 _____ C:\Users\Marta\Downloads\505337500916_faktura (1).pdf
2016-09-12 20:03 - 2016-09-12 20:03 - 00914978 _____ C:\Users\Marta\Downloads\505337500916_faktura.pdf
2016-09-12 20:02 - 2016-09-12 20:02 - 00015608 _____ C:\Users\Marta\Downloads\505337500916_rs.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-27 20:00 - 2009-07-14 06:45 - 00020432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-27 20:00 - 2009-07-14 06:45 - 00020432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-27 19:52 - 2015-10-31 22:55 - 00000000 ____D C:\ProgramData\MFAData
2016-09-27 19:51 - 2015-05-18 07:41 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0912d53e309d3.job
2016-09-27 19:51 - 2015-02-07 13:35 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d042ca263346f3.job
2016-09-27 19:51 - 2014-07-25 22:17 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-27 19:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-27 19:46 - 2015-02-07 13:35 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d042ca26652d1e.job
2016-09-26 23:23 - 2015-05-18 07:41 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0912d541043f8.job
2016-09-26 23:09 - 2014-08-03 15:52 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-26 22:40 - 2014-07-25 22:17 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-26 22:29 - 2015-08-30 11:18 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e304ce8e61bd.job
2016-09-26 16:59 - 2014-10-23 19:55 - 00932864 ___SH C:\Users\Marta\Desktop\Thumbs.db
2016-09-26 16:57 - 2014-08-11 15:59 - 00000000 ____D C:\Users\Marta\AppData\Roaming\uTorrent
2016-09-26 16:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-26 06:31 - 2014-07-26 19:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-24 12:07 - 2009-07-14 19:55 - 00733644 _____ C:\Windows\system32\perfh015.dat
2016-09-24 12:07 - 2009-07-14 19:55 - 00152284 _____ C:\Windows\system32\perfc015.dat
2016-09-24 12:07 - 2009-07-14 07:13 - 01649468 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-23 18:10 - 2014-09-21 18:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-23 18:10 - 2014-09-21 18:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-09-22 19:48 - 2014-09-21 18:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-21 17:05 - 2015-10-31 15:46 - 00000000 ____D C:\AdwCleaner
2016-09-21 16:56 - 2015-10-31 18:07 - 00007592 _____ C:\Users\Marta\AppData\Local\resmon.resmoncfg
2016-09-20 22:42 - 2015-03-23 20:19 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-20 22:40 - 2014-07-26 22:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-20 22:40 - 2014-07-26 21:01 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-20 22:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-20 20:53 - 2015-05-16 16:45 - 00000000 ____D C:\ProgramData\Oracle
2016-09-20 20:37 - 2015-05-16 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-09-20 20:37 - 2015-05-16 16:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-09-20 20:36 - 2015-10-31 23:18 - 00000000 ____D C:\Users\Marta\.oracle_jre_usage
2016-09-20 20:35 - 2015-05-16 16:46 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-09-17 12:46 - 2014-07-30 15:17 - 00000000 ____D C:\Windows\Minidump
2016-09-17 04:25 - 2016-06-27 20:15 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-17 04:25 - 2014-07-25 22:20 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-16 18:25 - 2014-12-26 20:15 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-09-14 20:14 - 2015-10-31 22:55 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2016-09-14 20:14 - 2015-10-31 22:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-09-14 20:12 - 2015-10-31 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-09-13 20:09 - 2014-08-03 15:52 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 20:09 - 2014-08-03 15:52 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 20:09 - 2014-08-03 15:52 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 20:09 - 2014-08-03 15:52 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 20:09 - 2014-08-03 15:51 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-05 18:52 - 2015-11-12 09:09 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-09-05 18:52 - 2015-11-12 09:09 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp

==================== Pliki w katalogu głównym wybranych folderów =======

2015-10-31 18:07 - 2016-09-21 16:56 - 0007592 _____ () C:\Users\Marta\AppData\Local\resmon.resmoncfg
2014-10-16 02:14 - 2014-10-16 02:14 - 0000000 _____ () C:\Users\Marta\AppData\Local\{1A1459FE-6082-4D96-974A-3BE3A0D730D0}

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-09-26 15:28

==================== Koniec  FRST.txt ============================