Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-11-2016
Uruchomiony przez Pywył (administrator)  PYWYŁ-KOMPUTER (13-11-2016 16:27:42)
Uruchomiony z C:\Users\Pywył\Desktop
Załadowane profile: Pywył (Dostępne profile: Pywył)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
() D:\Program Files\EslWire\service\WireHelperSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Pywył\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Pywył\AppData\Roaming\Spotify\Spotify.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Spotify Ltd) C:\Users\Pywył\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Pywył\AppData\Roaming\Spotify\Spotify.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2016-11-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-1337811352-70182668-1157411616-1000\...\Run: [Spotify Web Helper] => C:\Users\Pywył\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-11-11] (Spotify Ltd)
HKU\S-1-5-21-1337811352-70182668-1157411616-1000\...\Run: [Spotify] => C:\Users\Pywył\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-11-11] (Spotify Ltd)
HKU\S-1-5-21-1337811352-70182668-1157411616-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-1337811352-70182668-1157411616-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
BootExecute: autocheck autochk * D:\PROGRA~1\PARAGO~1\HARDDI~1\bluescrn\bluescrn.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.5.1 8.8.8.8
Tcpip\..\Interfaces\{9E2E5BC6-A369-438E-B460-C09963DDF8C0}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9E2E5BC6-A369-438E-B460-C09963DDF8C0}: [DhcpNameServer] 192.168.5.1 8.8.8.8
Tcpip\..\Interfaces\{E9B69486-4AF9-4EA8-86BC-7D2815A80E01}: [NameServer] 8.8.8.4

Internet Explorer:
==================
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23] (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: rz0uw2h2.default
FF ProfilePath: C:\Users\Pywył\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\rz0uw2h2.default\Profiles\rz0uw2h2.default [nie znaleziono]
FF ProfilePath: C:\Users\Pywył\AppData\Roaming\Mozilla\Firefox\Profiles\rz0uw2h2.default [2016-11-13]
FF user.js: detected! => C:\Users\Pywył\AppData\Roaming\Mozilla\Firefox\Profiles\rz0uw2h2.default\user.js [2016-11-05]
FF NetworkProxy: Mozilla\Firefox\Profiles\rz0uw2h2.default -> type", 0
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-29] ()
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> mysearch.avg.com/?rvt=1
CHR StartupUrls: Profile 1 -> "hxxps://www.google.pl/"
CHR DefaultSearchURL: Profile 1 -> hxxp://www.mystartsearch.com/web/?type=ds&ts=1425297463&from=wpc&uid=HitachiXHTS545050B9A300_110216PBN403M7F927WEX&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> mystartsearch
CHR Profile: C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-11-13] <==== UWAGA
CHR Extension: (Dokumenty Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-05]
CHR Extension: (Dysk Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-05]
CHR Extension: (YouTube) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-05]
CHR Extension: (Gmail) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-05]
CHR Extension: (Chrome Media Router) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-05]
CHR Profile: C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default [2016-11-13]
CHR Extension: (Prezentacje Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-18]
CHR Extension: (Dokumenty Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-18]
CHR Extension: (Dysk Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-18]
CHR Extension: (YouTube) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-18]
CHR Extension: (Steam Inventory Helper) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-11-03]
CHR Extension: (Google Search) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-18]
CHR Extension: (Adblocker for Youtube™) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkgcomhcmhlbdokplmbpkejkojkmjglg [2016-11-05]
CHR Extension: (Arkusze Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-18]
CHR Extension: (Stylish) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-09-30]
CHR Extension: (LoungeDestroyer) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2016-10-20]
CHR Extension: (AdBlock) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-21]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Oddshot) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnoeeagkgpkplnhmnnlgodjnjgckhja [2016-10-09]
CHR Extension: (Gmail) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-18]
CHR Extension: (Chrome Media Router) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR Profile: C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-11-13]
CHR Extension: (Prezentacje Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-13]
CHR Extension: (Dokumenty Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-13]
CHR Extension: (Dysk Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-13]
CHR Extension: (Spotiload (former Spotify Vk Downloader)) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\baggnalhgbpeanbhedjlbndhjgmimmhl [2016-11-13]
CHR Extension: (YouTube) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-13]
CHR Extension: (AVG Secure Search) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-11-13]
CHR Extension: (Arkusze Google) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-13]
CHR Extension: (AdBlock) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-13]
CHR Extension: (Google Hangouts) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\knipolnnllmklapflnccelgolnpehhpl [2016-11-13]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-13]
CHR Extension: (Gmail) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-13]
CHR Extension: (Chrome Media Router) - C:\Users\Pywył\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-13]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1457160 2016-10-06] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [227104 2016-10-12] (EasyAntiCheat Ltd)
R2 EslWireHelper; D:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2016-04-12] ()
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6506048 2016-08-12] (GOG.com)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-10-01] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-11-01] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187824 2016-07-20] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-01-12] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [105096 2016-11-12] (<Turtle Entertainment>)
U5 ET5Drv; C:\Windows\ET5Drv.sys [36416 2007-10-16] (Windows (R) Codename Longhorn DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2016-07-02] ()
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [37392 2010-01-15] (Paragon Software Group)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-11-07] (REALiX(tm))
S3 RTCore64; D:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2016-10-24] ()
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-05-06] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-04-17] (Razer, Inc.)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [158736 2010-01-15] (Paragon)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-13 16:27 - 2016-11-13 16:29 - 00015988 _____ C:\Users\Pywył\Desktop\FRST.txt
2016-11-13 16:24 - 2016-11-13 16:25 - 00023275 _____ C:\Users\Pywył\Desktop\Fixlog.txt
2016-11-13 16:18 - 2016-11-13 16:20 - 00185578 _____ C:\Windows\ntbtlog.txt
2016-11-13 16:16 - 2016-11-13 16:16 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2016-11-13 14:31 - 2016-11-13 14:31 - 00000769 _____ C:\Users\Pywył\Desktop\MSI Afterburner.lnk
2016-11-13 14:31 - 2016-11-13 14:31 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2016-11-13 14:25 - 2016-11-13 14:26 - 48612767 _____ C:\Users\Pywył\Downloads\H1Z1 KOTK FPS PACK - PANJNO.rar
2016-11-13 13:51 - 2016-11-13 13:51 - 00052373 _____ C:\Users\Pywył\Downloads\FRST (1).txt
2016-11-13 13:51 - 2016-11-13 13:51 - 00050393 _____ C:\Users\Pywył\Downloads\Shortcut (1).txt
2016-11-13 13:47 - 2016-11-13 13:47 - 00052373 _____ C:\Users\Pywył\Downloads\FRST.txt
2016-11-13 13:47 - 2016-11-13 13:47 - 00033010 _____ C:\Users\Pywył\Downloads\Addition.txt
2016-11-13 13:46 - 2016-11-13 13:46 - 00050393 _____ C:\Users\Pywył\Downloads\Shortcut.txt
2016-11-13 02:23 - 2016-11-13 02:23 - 02411520 _____ (Farbar) C:\Users\Pywył\Desktop\FRST64.exe
2016-11-13 01:34 - 2016-11-13 01:35 - 03910208 _____ C:\Users\Pywył\Downloads\adwcleaner_6.030.exe
2016-11-12 20:53 - 2016-11-12 20:53 - 00001597 _____ C:\Users\Pywył\Downloads\autoexec.cfg
2016-11-12 20:51 - 2016-11-12 03:54 - 00004050 _____ C:\Users\Pywył\Desktop\autoexec.cfg
2016-11-12 20:29 - 2016-11-12 20:28 - 00105096 _____ (<Turtle Entertainment>) C:\Windows\system32\Drivers\ESLWireACD.sys
2016-11-12 20:27 - 2016-11-12 21:37 - 00000000 ____D C:\Users\Pywył\AppData\Local\ESL Wire Game Client
2016-11-12 20:27 - 2016-11-12 20:27 - 00000663 _____ C:\Users\Public\Desktop\ESL Wire.lnk
2016-11-12 20:27 - 2016-11-12 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESL Wire
2016-11-12 20:27 - 2016-11-12 20:27 - 00000000 ____D C:\ProgramData\ESL Wire
2016-11-12 20:26 - 2016-11-12 20:26 - 00934744 _____ (Turtle Entertainment GmbH) C:\Users\Pywył\Downloads\ESLWireSetup-1.19.0.8229.exe
2016-11-12 03:46 - 2016-11-12 03:46 - 00000000 ____D C:\Program Files (x86)\59ja8fsx
2016-11-11 18:40 - 2016-11-11 18:40 - 00000220 _____ C:\Users\Pywył\Desktop\Medieval II Total War.url
2016-11-11 18:19 - 2016-11-11 18:19 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Pywył\Downloads\autodetectutility.exe
2016-11-11 14:35 - 2016-11-11 14:35 - 00000222 _____ C:\Users\Pywył\Desktop\Total War ATTILA.url
2016-11-07 15:39 - 2016-11-07 20:44 - 00002900 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Pywył)
2016-11-07 15:31 - 2016-11-07 15:31 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-11-07 15:30 - 2016-11-07 15:30 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-11-07 15:30 - 2016-11-07 15:30 - 00000000 ____D C:\Windows\system32\DAX2
2016-11-07 15:30 - 2016-11-07 15:30 - 00000000 ____D C:\Program Files\Realtek
2016-11-07 15:29 - 2016-11-07 15:29 - 72203792 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-11-07 15:29 - 2016-11-07 15:29 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 13120760 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 12986520 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 10521552 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 06264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-11-07 15:29 - 2016-11-07 15:29 - 05782384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 05338936 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 05289944 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 04877580 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-11-07 15:29 - 2016-11-07 15:29 - 04735744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-11-07 15:29 - 2016-11-07 15:29 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 03282024 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 03195648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 03152591 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-11-07 15:29 - 2016-11-07 15:29 - 03059608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02894968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-11-07 15:29 - 2016-11-07 15:29 - 02823280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02697448 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02437136 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 02034296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01943616 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01601944 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01421104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01356504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01330072 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01211832 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01186160 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01164336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01022872 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00998032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00952984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00933640 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00888472 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00873464 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00716104 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00678184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00618184 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00596120 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-11-07 15:29 - 2016-11-07 15:29 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00471336 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00467160 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00448584 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00447720 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00415488 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00370736 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00369304 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00362400 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00330560 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00258504 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00224256 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaemaxapo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00190424 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00172584 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00134200 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00088328 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00065792 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-11-07 15:29 - 2016-11-07 15:29 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-11-07 15:24 - 2016-11-07 15:24 - 00458960 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys
2016-11-07 15:24 - 2016-11-07 15:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2016-11-07 15:23 - 2016-11-07 15:23 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoinstaller01009.dll
2016-11-07 15:23 - 2016-11-07 15:23 - 01109296 _____ (AuthenTec, Inc.) C:\Windows\system32\Drivers\ATSwpWDF.sys
2016-11-07 15:23 - 2016-11-07 15:23 - 00000000 ____D C:\Program Files\AuthenTec
2016-11-07 15:22 - 2016-11-07 15:22 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2016-11-07 15:22 - 2016-11-07 15:22 - 00096256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2016-11-07 15:16 - 2016-11-07 15:40 - 00000000 ____D C:\ProgramData\ProductData
2016-11-07 15:16 - 2016-11-07 15:17 - 00000000 ____D C:\Users\Pywył\AppData\LocalLow\IObit
2016-11-07 15:16 - 2016-11-07 15:16 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-11-07 15:16 - 2016-11-07 15:16 - 00000000 ____D C:\Windows\IObit
2016-11-07 15:16 - 2016-11-07 15:16 - 00000000 ____D C:\ProgramData\IObit
2016-11-07 15:16 - 2016-11-07 15:16 - 00000000 ____D C:\Program Files (x86)\IObit
2016-11-07 15:15 - 2016-11-07 15:15 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\IObit
2016-11-06 16:11 - 2016-11-08 14:09 - 00000000 ____D C:\Users\Administrator\AppData\LocalLow\Youtube AdBlock
2016-11-06 13:57 - 2016-11-06 13:57 - 00000222 _____ C:\Users\Pywył\Desktop\Rust.url
2016-11-06 13:57 - 2016-11-06 13:57 - 00000222 _____ C:\Users\Pywył\Desktop\H1Z1 King of the Kill.url
2016-11-06 01:33 - 2016-11-06 01:33 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-06 01:33 - 2016-11-06 01:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-05 21:16 - 2016-11-12 20:10 - 00000219 _____ C:\Users\Pywył\Desktop\Counter-Strike Global Offensive.url
2016-11-05 20:23 - 2016-11-05 20:24 - 00000684 _____ C:\Users\Public\Desktop\Steam.lnk
2016-11-05 20:20 - 2016-11-13 04:07 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\TS3Client
2016-11-05 20:20 - 2016-11-05 20:20 - 00001059 _____ C:\Users\Pywył\Desktop\TeamSpeak 3 Client.lnk
2016-11-05 20:20 - 2016-11-05 20:20 - 00001009 _____ C:\Users\Pywył\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2016-11-05 19:03 - 2016-11-05 19:43 - 00021504 _____ C:\Windows\system32\umstartup.etl
2016-11-05 19:00 - 2016-11-05 19:00 - 00000000 ____D C:\ProgramData\ftw
2016-11-05 19:00 - 2016-11-05 19:00 - 00000000 ____D C:\archive_db
2016-11-05 18:59 - 2016-11-05 18:59 - 00000000 ____D C:\ProgramData\formatpart
2016-11-05 18:55 - 2016-11-05 18:55 - 00000000 ____D C:\ProgramData\launcher
2016-11-05 18:55 - 2016-11-05 18:55 - 00000000 ____D C:\ProgramData\explauncher
2016-11-05 18:55 - 2016-11-05 18:55 - 00000000 ____D C:\ProgramData\backup
2016-11-05 18:50 - 2016-11-05 18:50 - 00002158 _____ C:\Users\Public\Desktop\Paragon Hard Disk Manager™ 2010 Professional Trial.lnk
2016-11-05 18:50 - 2016-11-05 18:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Hard Disk Manager™ 2010 Professional Trial
2016-11-05 18:50 - 2010-01-15 12:54 - 00037392 _____ (Paragon Software Group) C:\Windows\system32\Drivers\hotcore3.sys
2016-11-05 16:46 - 2016-11-13 03:57 - 00000000 ____D C:\AdwCleaner
2016-11-05 16:21 - 2016-11-13 16:27 - 00000008 __RSH C:\Users\Pywył\ntuser.pol
2016-11-05 16:11 - 2016-11-05 16:11 - 00000000 ____D C:\Users\Pywyﾳ
2016-11-05 16:07 - 2016-11-13 16:27 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-11-05 16:06 - 2016-11-05 16:07 - 00001932 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-11-03 20:56 - 2016-11-03 20:57 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2016-11-03 20:56 - 2016-11-03 20:57 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2016-11-01 11:54 - 2014-05-09 23:20 - 00820224 _____ C:\Users\Pywył\Desktop\pbsetup.exe
2016-11-01 11:53 - 2016-11-02 14:23 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-11-01 11:53 - 2016-11-01 11:55 - 00076152 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-11-01 11:53 - 2016-11-01 11:53 - 00912744 _____ C:\Windows\SysWOW64\pbsvc.exe
2016-10-30 11:54 - 2016-10-30 11:54 - 01402920 _____ C:\Users\Pywył\Downloads\battlelog-web-plugins_2.5.1_149 (2).exe
2016-10-30 11:24 - 2016-11-05 16:11 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-10-29 19:48 - 2016-10-29 19:48 - 01402920 _____ C:\Users\Pywył\Downloads\battlelog-web-plugins_2.5.1_149 (1).exe
2016-10-28 13:42 - 2016-10-28 13:42 - 00022200 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2016-10-23 12:42 - 2016-10-23 12:42 - 00000000 ____D C:\Users\Pywył\AppData\Local\AVG Netherlands BV
2016-10-23 12:40 - 2016-10-28 13:55 - 00003860 _____ C:\Windows\System32\Tasks\Spotify
2016-10-15 17:34 - 2016-10-15 17:36 - 00000000 ____D C:\Users\Pywył\Documents\GTA San Andreas User Files
2016-10-15 17:34 - 2016-10-15 17:34 - 00000040 _____ C:\Users\Pywy
2016-10-15 17:34 - 2016-10-15 17:34 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-10-15 13:28 - 2016-10-15 13:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-10-15 13:26 - 2016-10-15 17:34 - 00000000 ____D C:\ProgramData\MTA San Andreas All

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-13 16:28 - 2016-02-19 18:24 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Spotify
2016-11-13 16:27 - 2016-06-06 16:05 - 00000000 ____D C:\FRST
2016-11-13 16:27 - 2016-02-19 18:24 - 00000000 ____D C:\Users\Pywył\AppData\Local\Spotify
2016-11-13 16:27 - 2016-02-18 18:34 - 00000000 ____D C:\Users\Pywył
2016-11-13 16:26 - 2016-05-28 22:49 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-13 16:26 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-13 16:25 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-13 16:25 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-13 16:24 - 2016-06-06 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHU
2016-11-13 16:24 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-13 16:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2016-11-13 16:09 - 2016-05-28 22:49 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-13 13:57 - 2016-02-18 22:33 - 00000000 ____D C:\ProgramData\Avg
2016-11-13 13:57 - 2016-02-18 22:33 - 00000000 ____D C:\Program Files (x86)\AVG
2016-11-13 13:57 - 2016-02-18 22:32 - 00000000 ____D C:\Users\Pywył\AppData\Local\AvgSetupLog
2016-11-13 13:53 - 2016-02-18 22:35 - 00000000 ____D C:\ProgramData\MFAData
2016-11-13 13:53 - 2016-02-18 22:32 - 00000000 ____D C:\Users\Pywył\AppData\Local\Avg
2016-11-13 13:42 - 2016-02-18 22:38 - 00000000 ___HD C:\$AVG
2016-11-13 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-13 13:34 - 2016-05-23 20:54 - 00000000 ____D C:\Users\Pywył\AppData\LocalLow\Temp
2016-11-13 01:36 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-11-12 20:57 - 2016-09-10 19:11 - 00000000 ____D C:\Users\Pywył\Documents\ESL Match Media
2016-11-12 20:26 - 2016-04-30 14:09 - 00000000 ____D C:\Program Files\EslWire
2016-11-12 20:10 - 2016-04-11 15:18 - 00001926 _____ C:\Users\Pywył\Desktop\STEAM TOKEN.txt
2016-11-07 15:23 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-11-05 21:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-05 16:15 - 2016-02-26 22:48 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Skype
2016-11-05 16:13 - 2016-06-11 17:48 - 00000000 ____D C:\Program Files (x86)\Razer
2016-11-05 16:13 - 2016-02-18 23:03 - 00000000 ____D C:\Program Files (x86)\AMD APP
2016-11-05 16:11 - 2016-10-01 11:22 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-11-05 16:11 - 2016-08-07 22:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-11-05 16:11 - 2016-06-06 15:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-05 16:11 - 2016-06-06 15:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-05 16:11 - 2016-04-09 22:22 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-05 16:11 - 2016-03-16 21:13 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2016-11-05 16:11 - 2016-03-16 21:11 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-11-05 16:11 - 2016-03-16 21:02 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-11-05 16:11 - 2016-03-16 21:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-11-05 16:11 - 2016-02-26 22:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-05 16:11 - 2016-02-18 23:22 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-11-05 16:11 - 2016-02-18 23:03 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2016-11-05 16:11 - 2016-02-18 23:01 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-11-05 16:11 - 2016-02-18 22:36 - 00000000 ____D C:\Program Files (x86)\Driver Identifier
2016-11-05 16:11 - 2016-02-18 22:28 - 00000000 ____D C:\Program Files (x86)\Java
2016-11-05 16:11 - 2016-02-18 22:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-11-05 16:11 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-11-05 16:11 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-11-02 14:48 - 2016-02-27 21:23 - 00000000 ____D C:\ProgramData\Origin
2016-11-02 14:23 - 2016-05-25 19:37 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2016-11-01 22:22 - 2016-05-25 16:49 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-11-01 22:00 - 2016-02-27 21:25 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\Origin
2016-11-01 11:44 - 2015-01-15 14:14 - 01641016 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-11-01 11:44 - 2011-04-12 14:21 - 00739932 _____ C:\Windows\system32\perfh015.dat
2016-11-01 11:44 - 2011-04-12 14:21 - 00155474 _____ C:\Windows\system32\perfc015.dat
2016-11-01 11:44 - 2009-07-14 06:13 - 01641016 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-29 22:31 - 2016-08-30 00:14 - 00000163 _____ C:\Users\Pywył\Documents\ClownfishForTeamspeak.ini
2016-10-29 10:29 - 2016-02-19 18:34 - 00000000 ____D C:\Users\Pywył\AppData\Local\Battle.net
2016-10-28 19:52 - 2016-03-29 10:18 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-10-28 18:08 - 2016-02-18 22:22 - 00000000 ____D C:\Users\Pywył\AppData\Local\Google
2016-10-28 13:35 - 2016-07-02 11:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-10-26 13:27 - 2016-05-28 22:49 - 00004054 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-26 13:27 - 2016-05-28 22:49 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-23 12:40 - 2016-04-10 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish
2016-10-23 10:59 - 2016-02-18 22:28 - 00000000 ____D C:\ProgramData\Oracle
2016-10-23 10:59 - 2016-02-18 22:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-23 10:57 - 2016-02-18 22:29 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-10-19 12:52 - 2016-02-19 18:54 - 00000000 ____D C:\Users\Pywył\AppData\Roaming\uTorrent

==================== Pliki w katalogu głównym wybranych folderów =======

2016-09-21 20:48 - 2016-09-21 20:48 - 0007606 _____ () C:\Users\Pywył\AppData\Local\Resmon.ResmonCfg
2016-11-07 15:31 - 2016-11-07 15:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-11-04 15:23

==================== Koniec  FRST.txt ============================