Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 07-12-2016
Uruchomiony przez Paweł (administrator)  PAWEŁ-KOMPUTER (15-12-2016 22:20:37)
Uruchomiony z C:\Users\Paweł\Downloads
Załadowane profile: Paweł (Dostępne profile: Paweł)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgemca.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Mr. John aka japamd) D:\Program Files (x86)\RadeonProo\RadeonProSupport.exe
(Zemana Ltd.) D:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Zemana Ltd.) D:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Spotify Ltd) C:\Users\Paweł\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) D:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(IObit) D:\Program Files (x86)\IObit\Driver Booster\4.1.0\Scheduler.exe
() C:\Users\Paweł\Downloads\adwcleaner_6.041.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ZAM] => d:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14011120 2016-12-09] (Zemana Ltd.)
HKLM-x32\...\Run: [AvgUi] => d:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => d:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-844956796-4294606565-3297058277-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9105112 2016-11-15] (Piriform Ltd)
HKU\S-1-5-21-844956796-4294606565-3297058277-1000\...\Run: [Spotify Web Helper] => C:\Users\Paweł\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-09] (Spotify Ltd)
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} =>  Brak pliku
GroupPolicy: Ograniczenia - Chrome <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.5.1 8.8.8.8
Tcpip\..\Interfaces\{32EFE0FB-15D6-4C49-8CCE-62DF3F2FD880}: [DhcpNameServer] 192.168.5.1 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-844956796-4294606565-3297058277-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-844956796-4294606565-3297058277-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-11-28] (Oracle Corporation)
BHO: Brak nazwy -> {95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} -> Brak pliku
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-28] (Oracle Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-28] (Oracle Corporation)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-14] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> mysearch.avg.com/?rvt=1
CHR StartupUrls: Profile 1 -> "hxxps://www.google.pl/"
CHR DefaultSearchURL: Profile 1 -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> https://mysearch.avg.com
CHR DefaultSuggestURL: Profile 1 -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-12-15] <==== UWAGA
CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default [2016-12-15]
CHR Extension: (Prezentacje Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-14]
CHR Extension: (Dokumenty Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-14]
CHR Extension: (Dysk Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-14]
CHR Extension: (YouTube) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-14]
CHR Extension: (Adblocker for Youtube™) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\eojeoeddgeaeahpmfabdfpfialkoplcb [2016-12-15]
CHR Extension: (Arkusze Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-14]
CHR Extension: (Brak nazwy) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-15]
CHR Extension: (Google Hangouts) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2016-12-06]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-14]
CHR Extension: (Gmail) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-14]
CHR Extension: (Chrome Media Router) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-14]
CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-15]
CHR Extension: (Prezentacje Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-15]
CHR Extension: (Dokumenty Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-15]
CHR Extension: (Dysk Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-15]
CHR Extension: (YouTube) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-15]
CHR Extension: (AVG Secure Search) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-12-15]
CHR Extension: (Arkusze Google) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-15]
CHR Extension: (AdBlock) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-15]
CHR Extension: (Google Hangouts) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\knipolnnllmklapflnccelgolnpehhpl [2016-12-15]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-15]
CHR Extension: (Gmail) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-15]
CHR Extension: (Chrome Media Router) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
S3 AvgAMPS; D:\Program Files (x86)\AVG\Av\avgamps.exe [647864 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; D:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337696 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; d:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; D:\Program Files (x86)\AVG\Av\avgwdsvca.exe [727512 2016-11-02] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1457160 2016-10-06] ()
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-10] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-11-23] ()
R2 RadeonPro Support Service; d:\Program Files (x86)\RadeonProo\RadeonProSupport.exe [20608 2013-11-04] (Mr. John aka japamd) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-01-12] (Microsoft Corporation)
R2 ZAMSvc; d:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14011120 2016-12-09] (Zemana Ltd.)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R2 AODDriver4.3.0; D:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-10-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [267520 2016-10-19] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [129152 2016-11-14] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2016-11-14] (REALiX(tm))
S3 RTCore64; D:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2016-10-24] ()
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2016-12-15] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2016-12-15] (Zemana Ltd.)
S3 7ByteIo; \??\d:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [X]
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 GPU-Z; \??\C:\Users\PAWE~1\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVCx32: HpSvc -> Brak ścieżki do pliku.

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-15 22:20 - 2016-12-15 22:22 - 00014391 _____ C:\Users\Paweł\Downloads\FRST.txt
2016-12-15 22:20 - 2016-12-15 22:20 - 00000000 ____D C:\FRST
2016-12-15 22:19 - 2016-12-15 22:19 - 02420224 _____ (Farbar) C:\Users\Paweł\Downloads\FRST64.exe
2016-12-15 21:45 - 2016-12-15 21:45 - 03977168 _____ C:\Users\Paweł\Downloads\adwcleaner_6.041.exe
2016-12-15 21:27 - 2016-12-15 21:27 - 00000000 ____D C:\Program Files\Common Files\AV
2016-12-15 21:26 - 2016-12-15 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-12-15 21:25 - 2016-12-15 21:25 - 00000000 ___HD C:\$AVG
2016-12-15 21:15 - 2016-12-15 21:15 - 00000753 _____ C:\Users\Public\Desktop\AVG.lnk
2016-12-15 21:15 - 2016-12-15 21:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-12-15 21:13 - 2016-12-15 22:21 - 00109106 _____ C:\Windows\ZAM.krnl.trace
2016-12-15 21:13 - 2016-12-15 22:21 - 00017807 _____ C:\Windows\ZAM_Guard.krnl.trace
2016-12-15 21:13 - 2016-12-15 21:13 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2016-12-15 21:13 - 2016-12-15 21:13 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2016-12-15 21:13 - 2016-12-15 21:13 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2016-12-15 21:13 - 2016-12-15 21:13 - 00000853 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2016-12-15 21:13 - 2016-12-15 21:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2016-12-15 21:12 - 2016-12-15 21:12 - 00000000 ____D C:\Users\Paweł\AppData\Local\Zemana
2016-12-15 21:11 - 2016-12-15 21:11 - 05453544 _____ ( ) C:\Users\Paweł\Downloads\Zemana.AntiMalware.Setup.exe
2016-12-15 21:10 - 2016-12-15 21:10 - 03312904 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Paweł\Downloads\AVG_Protection_Free_1597 (1).exe
2016-12-15 20:58 - 2016-12-15 20:58 - 00000266 __RSH C:\Users\Paweł\ntuser.pol
2016-12-15 20:49 - 2016-12-15 20:49 - 00000000 ____D C:\ProgramData\{ACD55E9A-8DEB-4960-B13E-D1F04B5CAC62}.tmp
2016-12-15 20:48 - 2016-12-15 20:48 - 00000000 ____D C:\ProgramData\{96828DA6-2D1D-4c4d-9322-644879DCF2CB}.tmp
2016-12-15 20:45 - 2016-12-15 21:43 - 00000000 __SHD C:\Users\Paweł\AppData\Local\svchost
2016-12-15 20:44 - 2016-12-15 22:17 - 00000000 ____D C:\AdwCleaner
2016-12-15 20:44 - 2016-12-15 20:44 - 00000000 ____D C:\ProgramData\Avira
2016-12-15 20:44 - 2016-12-15 20:44 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-15 20:44 - 2016-12-15 20:44 - 00000000 _____ C:\TOSTACK
2016-12-15 20:43 - 2016-12-15 20:43 - 00006070 _____ C:\Windows\System32\Tasks\Terrymewuse Adapter
2016-12-15 20:42 - 2016-12-15 21:22 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Cerkusy
2016-12-15 20:42 - 2016-12-15 20:43 - 00000000 ____D C:\Users\Paweﾳ\AppData\Local\Clraent
2016-12-15 20:42 - 2016-12-15 20:42 - 00000266 __RSH C:\ProgramData\ntuser.pol
2016-12-15 20:42 - 2016-12-15 20:42 - 00000000 ____D C:\Users\Paweﾳ
2016-12-15 20:42 - 2016-12-15 20:42 - 00000000 ____D C:\Users\Paweł\AppData\Local\Clraent
2016-12-15 20:38 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Windows Loader
2016-12-13 21:18 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-13 21:16 - 2016-12-13 21:16 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\AVG
2016-12-13 21:15 - 2016-12-13 21:15 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\TuneUp Software
2016-12-13 21:14 - 2016-12-15 22:14 - 00000000 ____D C:\ProgramData\MFAData
2016-12-13 21:14 - 2016-12-13 21:14 - 00000000 ____D C:\Users\Paweł\AppData\Local\MFAData
2016-12-13 21:10 - 2016-12-13 21:10 - 03312896 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Paweł\Downloads\AVG_Protection_Free_1606.exe
2016-12-13 14:49 - 2016-12-13 14:49 - 160497952 _____ (Advanced Micro Devices, Inc.) C:\Users\Paweł\Downloads\13-9-legacy_vista_win7_64_dd_ccc_whql.exe
2016-12-13 14:44 - 2016-12-13 14:44 - 58713744 _____ (AMD Inc.) C:\Users\Paweł\Downloads\radeon-crimson-relive-16.12.1-minimalsetup-161208_web (1).exe
2016-12-13 00:10 - 2016-12-13 00:10 - 00000000 ____D C:\Users\Paweł\AppData\Local\Chromium
2016-12-13 00:09 - 2016-12-13 00:09 - 00000000 ____D C:\Users\Paweł\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
2016-12-12 23:57 - 2016-12-12 23:57 - 58713744 _____ (AMD Inc.) C:\Users\Paweł\Downloads\radeon-crimson-relive-16.12.1-minimalsetup-161208_web.exe
2016-12-12 23:57 - 2016-12-12 23:57 - 00000000 ____D C:\Program Files\AMD
2016-12-12 23:50 - 2016-12-12 23:50 - 04121824 _____ (Husdawg, LLC) C:\Users\Paweł\Downloads\Detection (1).exe
2016-12-12 23:45 - 2016-12-13 14:45 - 00003266 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-12-12 23:45 - 2016-12-12 23:56 - 00001161 _____ C:\Users\Public\Desktop\Driver Booster 4.lnk
2016-12-12 23:45 - 2016-12-12 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 4
2016-12-12 23:43 - 2016-12-12 23:43 - 17146184 _____ (IObit ) C:\Users\Paweł\Downloads\driver_booster_setup (1).exe
2016-12-12 23:33 - 2016-12-12 23:33 - 00001044 _____ C:\Users\Paweł\Desktop\Video Card Stability Test.lnk
2016-12-12 23:33 - 2016-12-12 23:33 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\FreeStone Group
2016-12-12 23:32 - 2016-12-12 23:32 - 03372453 _____ C:\Users\Paweł\Downloads\VideoCardStabilityTestSetup.exe
2016-12-12 23:30 - 2016-12-13 14:37 - 00000000 ____D C:\Users\Paweł\Documents\OCCT
2016-12-12 23:29 - 2016-12-12 23:29 - 00000688 _____ C:\Users\Paweł\Desktop\OCCT.lnk
2016-12-12 23:29 - 2016-12-12 23:29 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OCCT
2016-12-12 23:29 - 2016-12-12 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OCCT
2016-12-12 23:28 - 2016-12-12 23:28 - 06938939 _____ C:\Users\Paweł\Downloads\OCCTPT4.4.2.exe
2016-12-12 23:23 - 2016-12-12 23:23 - 00000941 _____ C:\Users\Paweł\Desktop\Hot CPU Tester Pro.lnk
2016-12-12 23:23 - 2016-12-12 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hot CPU Tester Pro 4 LE
2016-12-12 23:23 - 2007-03-05 11:51 - 00360580 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll
2016-12-12 23:22 - 2016-12-12 23:22 - 01734994 _____ (7Byte Computers ) C:\Users\Paweł\Downloads\hotcpu.exe
2016-12-11 13:05 - 2016-12-11 13:05 - 01189840 _____ ( ) C:\Users\Paweł\Downloads\hwmonitor_1.30 (1).exe
2016-12-09 21:57 - 2016-12-09 21:57 - 00000000 ____D C:\Users\Paweł\AppData\Local\Apple Computer
2016-12-09 21:54 - 2016-12-09 21:54 - 00000000 ____D C:\Users\Paweł\AppData\Local\Apple
2016-12-09 21:54 - 2016-12-09 21:54 - 00000000 ____D C:\ProgramData\Apple
2016-12-09 21:53 - 2016-12-09 21:53 - 00000000 ____D C:\Users\Paweł\AppData\LocalLow\Apple Computer
2016-12-09 21:52 - 2016-12-09 21:52 - 41896256 _____ (Apple Inc.) C:\Users\Paweł\Downloads\QuickTimeInstaller.exe
2016-12-06 21:12 - 2016-12-06 21:12 - 00000219 _____ C:\Users\Paweł\Desktop\Counter-Strike Global Offensive.url
2016-12-05 16:14 - 2016-12-12 14:29 - 00003412 _____ C:\Windows\System32\Tasks\steamwebhelper_killer
2016-12-05 16:13 - 2016-12-05 16:13 - 00002812 _____ C:\Users\Paweł\Desktop\start_steamwebhelper_killer_10m.bat
2016-12-05 16:13 - 2016-12-05 16:13 - 00000396 _____ C:\Users\Paweł\Desktop\ss.txt
2016-12-05 16:10 - 2016-12-05 16:11 - 00002812 _____ C:\Users\Paweł\Desktop\start_steamwebhelper_killer_10m.txt
2016-12-05 14:47 - 2016-12-05 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RadeonPro
2016-12-05 14:46 - 2016-12-05 14:47 - 03624936 _____ (John Mautari ) C:\Users\Paweł\Downloads\RadeonPro_Preview_R (1).exe
2016-12-04 02:14 - 2016-12-04 02:14 - 00000017 _____ C:\Users\Paweł\AppData\Local\resmon.resmoncfg
2016-12-04 02:10 - 2016-12-04 02:10 - 00000000 ____D C:\Windows\pss
2016-12-01 21:31 - 2016-12-01 21:31 - 00000638 _____ C:\Users\Paweł\Downloads\XXXPORNXXX.txt
2016-12-01 21:03 - 2016-12-01 21:30 - 00000638 _____ C:\Users\Paweł\Desktop\Email.txt
2016-11-28 23:23 - 2016-12-12 23:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-11-28 23:22 - 2016-11-28 23:22 - 00000769 _____ C:\Users\Paweł\Desktop\MSI Afterburner.lnk
2016-11-28 23:22 - 2016-11-28 23:22 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2016-11-28 17:42 - 2016-12-05 19:22 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\.minecraft
2016-11-28 17:42 - 2016-11-28 17:42 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Sun
2016-11-28 17:42 - 2016-11-28 17:42 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\java
2016-11-28 17:42 - 2016-11-28 17:42 - 00000000 ____D C:\Users\Paweł\AppData\LocalLow\Sun
2016-11-28 17:42 - 2016-10-21 14:30 - 01680054 _____ (Titan Launcher) C:\Users\Paweł\Desktop\Minecraft Launcher.exe
2016-11-28 17:41 - 2016-11-28 17:41 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-11-28 17:41 - 2016-11-28 17:41 - 00000000 ____D C:\ProgramData\Oracle
2016-11-28 17:41 - 2016-11-28 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-11-28 17:41 - 2016-11-28 17:41 - 00000000 ____D C:\Program Files\Java
2016-11-28 17:39 - 2016-11-28 17:40 - 63235648 _____ (Oracle Corporation) C:\Users\Paweł\Downloads\jre-8u111-windows-x64.exe
2016-11-28 17:39 - 2016-11-28 17:39 - 01478267 _____ C:\Users\Paweł\Downloads\Minecraft-Launcher.rar
2016-11-28 17:35 - 2016-11-28 17:35 - 07613452 _____ C:\Users\Paweł\Downloads\Resilience.rar
2016-11-28 16:45 - 2016-12-13 00:00 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-11-28 16:45 - 2016-11-28 16:45 - 08576448 _____ (Piriform Ltd) C:\Users\Paweł\Downloads\ccsetup524.exe
2016-11-28 16:45 - 2016-11-28 16:45 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-11-28 16:45 - 2016-11-28 16:45 - 00000000 ____D C:\Program Files\CCleaner
2016-11-28 15:45 - 2016-11-28 15:46 - 02045070 _____ C:\Users\Paweł\Downloads\wsusoffline108.zip
2016-11-28 14:32 - 2016-11-28 14:32 - 01497400 _____ (Microsoft Corporation) C:\Users\Paweł\Downloads\NDP46-KB3045560-Web.exe
2016-11-28 14:30 - 2016-11-28 14:30 - 00000000 ____D C:\Windows\dupablada
2016-11-27 11:12 - 2016-11-27 11:12 - 00000000 ____D C:\Users\Paweł\Documents\RadeonPro Benchmarks
2016-11-27 11:11 - 2016-11-27 14:49 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\RadeonPro
2016-11-27 11:11 - 2016-11-27 11:11 - 00000000 ____D C:\Users\Paweł\Documents\RadeonPro Logs
2016-11-27 11:10 - 2016-11-27 11:10 - 03624936 _____ (John Mautari ) C:\Users\Paweł\Downloads\RadeonPro_Preview_R.exe
2016-11-26 23:02 - 2016-12-15 21:27 - 00000000 ____D C:\Users\Paweł\AppData\Local\Avg
2016-11-26 23:02 - 2016-12-15 21:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\AvgSetupLog
2016-11-26 23:02 - 2016-12-15 21:15 - 00000000 ____D C:\ProgramData\Avg
2016-11-26 23:01 - 2016-11-26 23:01 - 03312896 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Paweł\Downloads\AVG_Protection_Free_1597.exe
2016-11-25 21:08 - 2016-11-25 21:08 - 00000000 ____H C:\Users\Paweł\AppData\Local\BITAA62.tmp
2016-11-25 21:07 - 2016-11-25 21:08 - 00000000 _____ C:\Users\Paweł\AppData\Local\{CF14A992-38DB-455E-922E-B23E834A8005}
2016-11-22 17:33 - 2016-11-22 17:33 - 00000913 _____ C:\Users\Paweł\Downloads\xxxx2 (2).txt
2016-11-22 17:32 - 2016-11-22 17:32 - 00000495 _____ C:\Users\Paweł\Downloads\xxx (1).txt
2016-11-22 17:30 - 2016-11-22 17:30 - 00000913 _____ C:\Users\Paweł\Downloads\xxxx2 (1).txt
2016-11-22 17:27 - 2016-11-22 17:27 - 00000913 _____ C:\Users\Paweł\Downloads\xxxx2.txt
2016-11-22 17:10 - 2016-11-22 17:10 - 00000495 _____ C:\Users\Paweł\Downloads\xxx.txt
2016-11-21 16:24 - 2016-11-23 14:48 - 00348856 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2016-11-21 16:21 - 2016-11-21 16:21 - 00000000 ____D C:\Users\Paweł\AppData\Local\PunkBuster
2016-11-21 16:07 - 2016-11-21 16:07 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-11-21 16:04 - 2016-11-21 16:08 - 00000000 ____D C:\Users\Paweł\Documents\Battlefield 4
2016-11-21 16:04 - 2016-11-21 16:04 - 00000000 ____D C:\Users\Paweł\AppData\Local\Realmware
2016-11-21 16:03 - 2016-11-21 16:03 - 00000978 _____ C:\Users\Public\Desktop\BF4 Settings Editor.lnk
2016-11-21 16:03 - 2016-11-21 16:03 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Realmware
2016-11-21 16:03 - 2016-11-21 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realmware Battlefield Tools
2016-11-21 16:01 - 2016-11-21 16:02 - 04451495 _____ (Realmware) C:\Users\Paweł\Downloads\BF4SE-1.1.exe
2016-11-21 15:57 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-11-21 15:57 - 2016-11-21 15:57 - 00001246 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2016-11-21 15:57 - 2016-11-21 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2016-11-21 15:55 - 2016-11-23 14:48 - 00348856 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-11-21 15:55 - 2016-11-23 14:48 - 00076152 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-11-21 15:55 - 2016-11-23 14:35 - 00291296 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-11-21 15:14 - 2015-11-07 07:49 - 10320160 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS
2016-11-21 15:14 - 2015-11-07 07:49 - 00114048 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2016-11-21 15:14 - 2015-11-07 07:48 - 04418080 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll
2016-11-21 15:14 - 2015-11-07 07:48 - 03685408 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll
2016-11-21 15:01 - 2016-11-21 15:01 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Innovative Solutions
2016-11-21 14:59 - 2016-11-21 14:59 - 00000000 ____D C:\Users\Paweł\AppData\Local\Innovative Solutions
2016-11-21 14:57 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Innovative Solutions
2016-11-21 14:56 - 2016-11-21 14:56 - 03108464 _____ (Innovative Solutions) C:\Users\Paweł\Downloads\Display-Advanced-Micro-Devices-Inc-ATI-Mobility-Radeon-HD-4500-Series.exe
2016-11-21 14:52 - 2016-11-21 14:53 - 02449376 _____ (Megaify Software ) C:\Users\Paweł\Downloads\DriverToolkitInstaller.exe
2016-11-21 14:43 - 2016-11-21 14:44 - 04121824 _____ (Husdawg, LLC) C:\Users\Paweł\Downloads\Detection.exe
2016-11-21 14:32 - 2016-11-21 14:32 - 26667268 _____ (Advanced Micro Devices, Inc.) C:\Users\Paweł\Downloads\13-1-legacy_vista_win7_win8_32-64_hydravision.exe
2016-11-21 14:08 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-11-21 14:03 - 2016-12-10 02:03 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Origin
2016-11-21 14:01 - 2016-12-15 20:43 - 00000000 ____D C:\Program Files (x86)\Origin
2016-11-21 14:01 - 2016-11-21 14:01 - 00001003 _____ C:\Users\Public\Desktop\Origin.lnk
2016-11-21 14:01 - 2016-11-21 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-11-21 13:59 - 2016-12-10 01:55 - 00000000 ____D C:\ProgramData\Origin
2016-11-21 13:59 - 2016-11-21 14:08 - 00000000 ____D C:\Users\Paweł\AppData\Local\Origin
2016-11-21 13:59 - 2016-11-21 13:59 - 52473360 _____ (Electronic Arts) C:\Users\Paweł\Downloads\OriginThinSetup.exe
2016-11-21 13:59 - 2016-11-21 13:59 - 00000000 ____D C:\Users\Paweł\.QtWebEngineProcess
2016-11-21 13:59 - 2016-11-21 13:59 - 00000000 ____D C:\Users\Paweł\.Origin
2016-11-19 22:39 - 2016-11-19 22:39 - 00546199 _____ C:\Users\Paweł\Downloads\Unpark-CPU-App.zip
2016-11-19 14:54 - 2016-11-19 14:54 - 00000222 _____ C:\Users\Paweł\Desktop\Total War ROME II - Emperor Edition.url
2016-11-18 23:58 - 2016-11-18 23:58 - 00000222 _____ C:\Users\Paweł\Desktop\Terraria.url
2016-11-18 23:58 - 2016-11-18 23:58 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-11-18 22:00 - 2016-11-18 22:00 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Paweł\Downloads\autodetectutility (1).exe
2016-11-17 18:55 - 2016-11-19 21:38 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\The Creative Assembly
2016-11-17 18:40 - 2016-12-15 20:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-17 18:40 - 2016-12-02 23:02 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Skype
2016-11-17 18:40 - 2016-11-17 18:40 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2016-11-17 18:40 - 2016-11-17 18:40 - 00000000 ____D C:\Users\Paweł\Tracing
2016-11-17 18:40 - 2016-11-17 18:40 - 00000000 ____D C:\ProgramData\Skype
2016-11-17 18:40 - 2016-11-17 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-11-17 18:39 - 2016-11-17 18:40 - 43893216 _____ (Skype Technologies S.A.) C:\Users\Paweł\Downloads\SkypeSetupFull.exe
2016-11-17 16:38 - 2016-12-08 13:27 - 00006276 _____ C:\Users\Paweł\Desktop\steam.txt
2016-11-17 16:34 - 2016-11-17 16:34 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Macromedia
2016-11-17 16:32 - 2016-11-17 16:32 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\LolClient
2016-11-16 22:41 - 2016-11-16 22:41 - 00000000 ____D C:\ProgramData\Riot Games
2016-11-16 21:05 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-11-16 21:05 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-11-16 21:05 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-11-16 21:04 - 2016-11-16 21:04 - 00001503 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-11-16 21:04 - 2016-11-16 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-11-16 20:59 - 2016-11-16 21:05 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Riot Games
2016-11-16 20:59 - 2016-11-16 20:59 - 32529256 _____ (Riot Games) C:\Users\Paweł\Downloads\LeagueofLegends_EUNE_Installer_2016_11_10.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-15 22:18 - 2016-11-14 16:33 - 00002898 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Paweł)
2016-12-15 22:15 - 2016-11-14 15:47 - 00000000 ____D C:\Users\Paweł
2016-12-15 22:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-15 22:12 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-15 22:12 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-15 22:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-15 21:37 - 2016-11-14 16:23 - 00001170 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-15 21:37 - 2016-11-14 16:23 - 00001170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-15 21:37 - 2016-11-14 15:47 - 00000829 _____ C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-15 21:34 - 2016-11-14 21:18 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Spotify
2016-12-15 21:24 - 2016-11-14 21:19 - 00000000 ____D C:\Users\Paweł\AppData\Local\Spotify
2016-12-15 21:22 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-12-15 21:05 - 2016-11-14 16:23 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2016-12-15 20:51 - 2009-07-14 06:08 - 00026838 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-15 20:44 - 2016-11-14 16:31 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2016-12-15 20:44 - 2016-11-14 16:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-15 20:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-15 20:43 - 2016-11-14 16:31 - 00000000 ____D C:\Program Files (x86)\AMD APP
2016-12-15 20:43 - 2016-11-14 16:30 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-12-15 20:43 - 2016-11-14 16:14 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-12-15 20:43 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-12-15 20:43 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-12-15 20:43 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-15 20:43 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-15 20:43 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-15 20:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2016-12-14 15:15 - 2016-11-14 16:33 - 00000000 ____D C:\ProgramData\IObit
2016-12-13 15:04 - 2016-11-14 16:33 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\IObit
2016-12-13 00:07 - 2016-11-14 16:22 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-13 00:07 - 2016-11-14 16:22 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-12 23:57 - 2016-11-14 16:28 - 00000000 ____D C:\AMD
2016-12-12 23:45 - 2016-11-14 16:33 - 00000000 ____D C:\ProgramData\ProductData
2016-12-12 14:29 - 2016-11-14 16:22 - 00004054 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-12 14:29 - 2016-11-14 16:22 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-08 13:27 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-12-04 14:54 - 2009-07-14 03:34 - 00000267 _____ C:\Windows\system.ini
2016-11-28 16:46 - 2015-01-15 12:03 - 00000000 ____D C:\Windows\Panther
2016-11-28 14:58 - 2011-04-12 14:21 - 00739932 _____ C:\Windows\system32\perfh015.dat
2016-11-28 14:58 - 2011-04-12 14:21 - 00155474 _____ C:\Windows\system32\perfc015.dat
2016-11-28 14:58 - 2009-07-14 06:13 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-28 14:50 - 2015-01-15 12:07 - 01641016 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-11-21 15:57 - 2016-11-14 17:21 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-21 15:57 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-18 16:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2016-11-15 17:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports

==================== Pliki w katalogu głównym wybranych folderów =======

2016-11-25 21:08 - 2016-11-25 21:08 - 0000000 ____H () C:\Users\Paweł\AppData\Local\BITAA62.tmp
2016-12-04 02:14 - 2016-12-04 02:14 - 0000017 _____ () C:\Users\Paweł\AppData\Local\resmon.resmoncfg
2016-11-25 21:07 - 2016-11-25 21:08 - 0000000 _____ () C:\Users\Paweł\AppData\Local\{CF14A992-38DB-455E-922E-B23E834A8005}
2016-11-14 16:39 - 2016-11-14 16:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\Paweł\AppData\Local\Temp\CE6C.tmp.exe
C:\Users\Paweł\AppData\Local\Temp\libeay32.dll
C:\Users\Paweł\AppData\Local\Temp\ludashisetup.exe
C:\Users\Paweł\AppData\Local\Temp\msvcr120.dll
C:\Users\Paweł\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2016-12-10 15:07

==================== Koniec  FRST.txt ============================