Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-01-2017
Uruchomiony przez Bartlomiej (administrator)  BARTEK (13-01-2017 04:25:12)
Uruchomiony z C:\Users\Bartlomiej\Desktop
Załadowane profile: Bartlomiej (Dostępne profile: Bartlomiej)
Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Language Engineering Corporation, LLC) C:\Program Files (x86)\Power Translator 15\LogoMedia TranslateDotNet Server.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAsenmon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\WINDOWS\System32\igfxEM.exe
(Intel Corporation) C:\WINDOWS\System32\igfxHK.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(ZTE) C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
() C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe
() C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\db_daemon.exe
() C:\Program Files (x86)\Sensible Vision\Fast Access\FAAppMonOT.exe
(CyberLink) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Sensible Vision) C:\Program Files (x86)\Sensible Vision\Fast Access\FAupgradeNoticeOT.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.570_none_7645b09c266beb53\TiWorker.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2857128 2015-01-09] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760 2015-08-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320 2015-08-03] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3777696 2014-01-16] (Dell Inc.)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95464 2015-08-08] (Sensible Vision )
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [FAStartup] => [X]
Winlogon\Notify\FastAccess: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll [2015-08-08] (Sensible Vision )
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [Discord] => C:\Users\Bartlomiej\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [Power Translator OLR] => C:\Program Files (x86)\Avanquest Software\OLR\Power Translator\BVRPOLR.exe [62464 2010-12-01] (Avanquest Software)
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [GG] => C:\Users\Bartlomiej\AppData\Local\GG\Application\gghub.exe [4078144 2016-07-04] (GG Network S.A.)
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\Run: [DAEMON Tools Lite Automount] => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\MountPoints2: D - "D:\Selector.exe" 
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\MountPoints2: {96f79fa1-5384-11e6-829b-74e6e22d7dcb} - "E:\Selector.exe" 
HKU\S-1-5-21-598763898-964273417-681385867-1001\...\MountPoints2: {fadfc7dd-6ddf-11e6-82c9-74e6e22d7dcb} - "G:\autorun.exe" 
Lsa: [Notification Packages] scecli FAPassSync
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk [2016-07-30]
ShortcutTarget: mcserver.lnk -> C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe (ZTE)
GroupPolicy: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: 127.0.0.1 realmadrid.pl
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{058e218d-7067-4908-86d5-7cfd62ac809d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5912fcb5-d21f-4e93-b671-55ad07313be5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5D8F07E5-245F-421C-9371-B6DAD71B227B}: [NameServer] 213.158.199.1 213.158.199.5

Internet Explorer:
==================
HKU\S-1-5-21-598763898-964273417-681385867-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCTE
HKU\S-1-5-21-598763898-964273417-681385867-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCTE
BHO-x32: ATLAS Toolbar -> {3C6301ED-0F78-4AF2-8150-D9C052361A8E} -> C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL [2009-06-26] (FUJITSU LIMITED)
BHO-x32: LEC -> {4A241D35-F7EB-401b-8C5B-A904A50F280E} -> C:\Program Files (x86)\Power Translator 15\Applications\LEC IE Translation Extension.dll [2011-07-20] (Language Engineering Corporation, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll => Brak pliku
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll => Brak pliku
Toolbar: HKLM-x32 - ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL [2009-06-26] (FUJITSU LIMITED)
Toolbar: HKLM-x32 - LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Program Files (x86)\Power Translator 15\Applications\LEC IE Translation Extension.dll [2011-07-20] (Language Engineering Corporation, LLC)

Chrome: 
=======
CHR Profile: C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default [2017-01-13]
CHR Extension: (Prezentacje Google) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-29]
CHR Extension: (Dokumenty Google) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-29]
CHR Extension: (Dysk Google) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-29]
CHR Extension: (YouTube) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-29]
CHR Extension: (Arkusze Google) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-29]
CHR Extension: (New XKit) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\inobiceghmpkaklcknpniboilbjmlald [2017-01-01]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-29]
CHR Extension: (Gmail) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-29]
CHR Extension: (Chrome Media Router) - C:\Users\Bartlomiej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-29]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [137968 2015-09-22] (Dell Inc.)
S3 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [278568 2014-10-31] (Aviata, Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [359848 2015-09-05] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LEC TranslateDotNet Server; C:\Program Files (x86)\Power Translator 15\LogoMedia TranslateDotNet Server.exe [1955520 2011-07-25] (Language Engineering Corporation, LLC)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-06-14] (IObit)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-12] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-12] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-12] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-06-23] (Electronic Arts)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2014-04-15] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056 2015-08-03] (Realtek Semiconductor)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; "C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318760 2015-08-13] (Qualcomm Atheros Communications, Inc.)
R3 athrusb; C:\WINDOWS\System32\drivers\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
S0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S0 BMLoad; C:\Windows\SysWOW64\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-01-12] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-08-30] (Disc Soft Ltd)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-13] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-12] (NVIDIA Corporation)
S3 OSFMount; C:\Program Files\OSFMount\OSFMount.sys [1299384 2014-02-07] (PassMark Software)
S3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [896744 2015-08-13] (Realtek                                            )
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [412400 2015-08-05] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [42664 2015-01-09] (Synaptics Incorporated)
S1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S1 tcpipBM; C:\WINDOWS\SysWOW64\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2015-10-30] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 zte_cdc_acm; C:\WINDOWS\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (ZTE)
S3 zte_cpo; C:\WINDOWS\system32\DRIVERS\zte_cpo.sys [14336 2011-08-10] (ZTE)
U3 ufldqpow; C:\Users\Bartlomiej\AppData\Local\Temp\ufldqpow.sys [56584 2017-01-13] (GMER) [Brak podpisu cyfrowego]
S4 sptd2; System32\Drivers\sptd2.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-13 04:25 - 2017-01-13 04:25 - 00017773 _____ C:\Users\Bartlomiej\Desktop\FRST.txt
2017-01-13 01:40 - 2017-01-13 01:40 - 03988944 _____ C:\Users\Bartlomiej\Downloads\adwcleaner_6.042.exe
2017-01-12 15:14 - 2017-01-12 15:14 - 00000000 ____D C:\Users\Bartlomiej\Downloads\Cross_H_v01
2017-01-12 14:20 - 2017-01-12 14:20 - 07549047 _____ C:\Users\Bartlomiej\Downloads\2a56d-eratohotw-nightly-b715de12fdd9d9b05941ec5fe02100f28a484b4b.zip
2017-01-12 00:25 - 2017-01-12 00:25 - 08855809 _____ C:\Users\Bartlomiej\Downloads\eraMegaten0.310_TR85M.7z
2017-01-12 00:19 - 2017-01-13 02:02 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\JAM Software
2017-01-11 17:38 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 17:38 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-01-11 17:38 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-01-11 17:38 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 17:38 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 17:38 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-01-11 17:38 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 17:38 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 17:38 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-01-11 17:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-01-11 17:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-01-11 17:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-01-09 03:06 - 2017-01-09 03:06 - 00000000 ___HD C:\$SysReset
2017-01-07 01:15 - 2017-01-07 01:15 - 02310398 _____ C:\Users\Bartlomiej\Downloads\電探魔法少女猫サー○ャ　飼育戦記　ver2.5 TR-02.rar
2017-01-06 17:35 - 2017-01-06 17:35 - 00669421 _____ C:\Users\Bartlomiej\Downloads\Forgotten Realms - Elminster 02 - Elminster in Myth Drannor.pdf
2017-01-06 17:23 - 2017-01-06 17:23 - 01351335 _____ C:\Users\Bartlomiej\Downloads\forgotten realms - elminster 01 - the making of a mage.pdf
2016-12-31 19:21 - 2017-01-07 22:37 - 00000000 ____D C:\Users\Bartlomiej\Downloads\[161222] [Studio e・go！] 廻（めぐ）るセカイで永遠（とわ）なるチカイを！ 初回限定版 Dummy Cut + OST + Bonus Disk + Bonus + Manual
2016-12-31 17:46 - 2017-01-09 03:19 - 00000000 ____D C:\Users\Bartlomiej\Documents\Studio e.go!
2016-12-31 17:25 - 2016-12-31 17:25 - 00001816 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-12-31 16:58 - 2016-12-31 16:58 - 07040818 _____ C:\Users\Bartlomiej\Downloads\eratohoTW_tr23.rar
2016-12-31 16:52 - 2016-12-31 16:52 - 02007337 _____ C:\Users\Bartlomiej\Downloads\EratohoK Tr64.7z
2016-12-31 16:50 - 2016-12-31 16:50 - 06665616 _____ C:\Users\Bartlomiej\Downloads\DTex1335AB_tr30 (1).rar
2016-12-31 16:14 - 2016-12-31 16:15 - 05963008 _____ (JAM Software ) C:\Users\Bartlomiej\Downloads\TreeSizeFreeSetup.exe
2016-12-30 23:44 - 2016-12-31 00:00 - 66096747 _____ C:\Users\Bartlomiej\Downloads\Cross_H_v01.rar
2016-12-30 20:34 - 2017-01-09 03:19 - 00000000 ____D C:\Users\Bartlomiej\Desktop\Cross H v02-03e
2016-12-30 20:05 - 2016-12-30 20:31 - 108514337 _____ C:\Users\Bartlomiej\Downloads\Cross_H_v02-03e.rar
2016-12-30 15:00 - 2016-12-30 15:04 - 04275578 _____ (DriverIdentifier ) C:\Users\Bartlomiej\Downloads\driveridentifier_setup.exe
2016-12-30 14:30 - 2016-12-30 14:30 - 01106888 _____ (Bleeping Computer, LLC) C:\Users\Bartlomiej\Downloads\rkill_2.8.4.064-19745.exe
2016-12-30 02:13 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2016-12-30 02:13 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2016-12-30 02:13 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2016-12-30 02:13 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2016-12-30 02:08 - 2016-12-30 02:08 - 00000000 ____D C:\NVIDIA
2016-12-30 01:23 - 2016-07-28 14:33 - 00000142 _____ C:\Users\Bartlomiej\Downloads\Enable Cortana.reg
2016-12-30 01:23 - 2016-07-28 14:33 - 00000142 _____ C:\Users\Bartlomiej\Downloads\Disable Cortana.reg
2016-12-30 01:22 - 2016-12-30 01:22 - 00000505 _____ C:\Users\Bartlomiej\Downloads\Disable-Cortana.zip
2016-12-30 00:34 - 2016-12-30 00:35 - 00681536 _____ (O&O Software GmbH) C:\Users\Bartlomiej\Downloads\OOSU10.exe
2016-12-29 23:52 - 2016-12-30 00:02 - 00000000 __SHD C:\Recovery
2016-12-29 23:05 - 2016-12-29 23:05 - 00000712 _____ C:\WINDOWS\DtcInstall.log
2016-12-29 23:02 - 2016-12-29 23:03 - 00001559 _____ C:\WINDOWS\comsetup.log
2016-12-29 22:31 - 2017-01-09 03:22 - 00000000 ___HD C:\$WINDOWS.~BT
2016-12-29 22:30 - 2016-12-29 23:01 - 00002877 _____ C:\WINDOWS\setupact.log
2016-12-29 22:30 - 2016-12-29 22:30 - 00000000 _____ C:\WINDOWS\setuperr.log
2016-12-29 19:45 - 2016-12-29 19:45 - 00000854 _____ C:\WINDOWS\PFRO.log
2016-12-29 19:22 - 2017-01-13 04:23 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2016-12-29 19:20 - 2016-12-29 19:20 - 17666189 _____ C:\Users\Bartlomiej\Downloads\500mb (1).bin.crdownload
2016-12-29 18:27 - 2014-05-13 21:07 - 00060416 _____ (Atheros) C:\WINDOWS\system32\athihvui.dll
2016-12-29 18:27 - 2014-05-13 21:06 - 00440320 _____ (Atheros) C:\WINDOWS\system32\athihvs.dll
2016-12-29 18:21 - 2016-12-29 18:25 - 102906456 _____ (Dell Inc.) C:\Users\Bartlomiej\Downloads\Network_Driver_N80VN_WN32_10.0.0.0_A00.EXE
2016-12-29 18:12 - 2017-01-09 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-29 18:12 - 2016-12-29 18:12 - 00003930 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:12 - 2016-12-12 04:03 - 01854400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-12-29 18:12 - 2016-12-12 04:03 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-12-29 18:12 - 2016-12-12 04:03 - 01452480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-12-29 18:12 - 2016-12-12 04:03 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-12-29 18:12 - 2016-12-12 04:03 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-12-29 18:11 - 2016-12-29 18:11 - 00003994 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:11 - 2016-12-29 18:11 - 00003966 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:11 - 2016-12-29 18:11 - 00003904 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:11 - 2016-12-29 18:11 - 00003742 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:11 - 2016-12-29 18:11 - 00003700 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-29 18:10 - 2016-12-12 04:03 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2016-12-29 18:06 - 2016-12-12 04:03 - 40125496 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 35222976 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 34710584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 28201408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 20748080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 17586992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 10912744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 10803880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 10353960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 09158616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 08913328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 08761560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 02950200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 02587704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 01953336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437633.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437633.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 01038392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00974784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00942528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00894400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00683640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00572888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00172736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00150784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-29 18:06 - 2016-12-12 04:03 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-12-29 18:06 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2016-12-29 18:06 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
2016-12-29 17:11 - 2016-12-29 17:21 - 393367376 _____ (NVIDIA Corporation) C:\Users\Bartlomiej\Downloads\376.33-notebook-win10-64bit-international-whql.exe
2016-12-29 16:53 - 2016-12-29 16:58 - 00737344 _____ (Oracle Corporation) C:\Users\Bartlomiej\Downloads\JavaSetup8u111.exe
2016-12-29 05:36 - 2016-12-29 05:36 - 00001147 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2016-12-29 05:35 - 2016-12-29 05:36 - 16752192 _____ C:\Users\Bartlomiej\Downloads\gu5setup.exe
2016-12-29 05:28 - 2016-12-29 05:28 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-29 05:24 - 2016-12-29 05:27 - 01065376 _____ (Google Inc.) C:\Users\Bartlomiej\Desktop\ChromeSetup.exe
2016-12-29 01:09 - 2016-12-29 01:09 - 00000000 ____D C:\Users\Bartlomiej\Downloads\liru_xmas
2016-12-29 00:22 - 2016-12-29 00:22 - 14649684 _____ C:\Users\Bartlomiej\Downloads\Way2ver1.55_TL1.0.6+Patch0.2 (2).7z
2016-12-28 16:28 - 2016-12-28 16:28 - 00781199 _____ C:\Users\Bartlomiej\Downloads\AA2Install.v7.b3.7z
2016-12-28 16:26 - 2016-12-28 16:26 - 00000762 _____ C:\Users\Bartlomiej\Downloads\Turn_Off_GameBar.reg
2016-12-28 15:17 - 2016-12-28 15:17 - 07631498 _____ C:\Users\Bartlomiej\Downloads\eratohoTW-a6aec82e114e6f781a17262ce2bd2bfc608eef7e-a6aec82e114e6f781a17262ce2bd2bfc608eef7e.zip
2016-12-28 00:43 - 2016-12-28 00:43 - 00001202 _____ C:\Users\Public\Desktop\Opera.lnk
2016-12-28 00:43 - 2016-12-28 00:43 - 00001202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-12-28 00:17 - 2016-12-28 00:17 - 03904447 _____ C:\Users\Bartlomiej\Downloads\Kronia_Skradzionych_Legend_Earthdawn.PDF
2016-12-27 21:32 - 2016-12-29 22:30 - 00000036 _____ C:\WINDOWS\progress.ini
2016-12-27 21:31 - 2017-01-13 01:01 - 00000733 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent uaktualnienia do systemu Windows 10.lnk
2016-12-27 21:31 - 2017-01-13 01:01 - 00000721 _____ C:\Users\Bartlomiej\Desktop\Asystent uaktualnienia do systemu Windows 10.lnk
2016-12-27 21:31 - 2017-01-13 01:01 - 00000000 ____D C:\Windows10Upgrade
2016-12-27 21:31 - 2016-12-30 00:26 - 00000000 ___HD C:\$GetCurrent
2016-12-27 21:30 - 2016-12-27 21:31 - 05741448 _____ (Microsoft Corporation) C:\Users\Bartlomiej\Downloads\Windows10Upgrade9252.exe
2016-12-27 21:08 - 2016-12-27 21:08 - 00000000 ____D C:\Users\Bartlomiej\Intel
2016-12-27 20:55 - 2016-12-27 20:56 - 05388073 _____ C:\Users\Bartlomiej\Downloads\windows10.0-kb3199986-x86_bf0ba5d3aba65e64d16c3bbe309e2ef67831c26f.msu
2016-12-27 20:54 - 2016-12-27 20:54 - 11788076 _____ C:\Users\Bartlomiej\Downloads\windows10.0-kb3199986-x64_5d4678c30de2de2bd7475073b061d0b3b2e5c3be.msu
2016-12-27 20:47 - 2016-12-27 20:47 - 00003994 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1482868045
2016-12-27 20:47 - 2016-12-27 20:47 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Opera Software
2016-12-27 20:47 - 2016-12-27 20:47 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\Opera Software
2016-12-27 20:46 - 2016-12-28 00:43 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-27 20:45 - 2016-12-27 20:46 - 01131728 _____ (Opera Software) C:\Users\Bartlomiej\Downloads\OperaSetup.exe
2016-12-27 06:32 - 2016-12-27 06:32 - 00000000 ____D C:\Program Files\HitmanPro
2016-12-27 05:41 - 2016-12-27 05:41 - 01106888 _____ (Bleeping Computer, LLC) C:\Users\Bartlomiej\Downloads\rkill_2.8.4.064.exe
2016-12-27 01:06 - 2016-12-27 01:06 - 00099747 _____ C:\Users\Bartlomiej\Downloads\AA027967.png
2016-12-26 04:23 - 2016-12-26 04:23 - 00000000 ____D C:\Users\Bartlomiej\Documents\Infinity Engine - Enhanced Edition
2016-12-26 03:05 - 2016-12-26 03:05 - 00000000 ____D C:\Users\Bartlomiej\Desktop\WLAN
2016-12-26 03:04 - 2016-12-26 03:05 - 00586195 _____ C:\Users\Bartlomiej\Downloads\wopt021.zip
2016-12-25 18:15 - 2016-12-26 01:50 - 00000000 ____D C:\Users\Bartlomiej\Documents\Baldur's Gate II - Enhanced Edition
2016-12-25 18:11 - 2017-01-09 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baldur's Gate II - Enhanced Edition [GOG.com]
2016-12-25 18:11 - 2016-12-25 18:11 - 00001898 _____ C:\Users\Public\Desktop\Baldur's Gate II - Enhanced Edition.lnk
2016-12-25 17:15 - 2017-01-08 03:06 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\qBittorrent
2016-12-25 17:15 - 2016-12-25 17:16 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\qBittorrent
2016-12-25 17:14 - 2017-01-09 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2016-12-25 17:14 - 2016-12-25 17:14 - 00000000 ____D C:\Program Files (x86)\qBittorrent
2016-12-25 17:08 - 2016-12-25 17:08 - 00000330 _____ C:\Users\Bartlomiej\AppData\Roaming\Tribler.exe.old.log
2016-12-25 03:59 - 2016-12-25 04:38 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\.Tribler
2016-12-25 03:59 - 2016-12-25 03:59 - 00000000 ____D C:\Users\Bartlomiej\Downloads\TriblerDownloads
2016-12-25 03:32 - 2016-12-25 03:47 - 75471208 _____ C:\Users\Bartlomiej\Downloads\Tribler_6.5.2.exe
2016-12-25 03:03 - 2017-01-09 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellaris v1.4.1
2016-12-25 03:03 - 2016-12-25 03:03 - 00000858 _____ C:\Users\Public\Desktop\Stellaris v1.4.1.lnk
2016-12-25 02:58 - 2016-12-25 03:03 - 00000000 ____D C:\Program Files (x86)\Stellaris v1.4.1
2016-12-25 01:52 - 2016-12-27 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-24 15:18 - 2016-12-24 15:20 - 11581544 _____ (SurfRight B.V.) C:\Users\Bartlomiej\Downloads\hitmanpro_x64 (1).exe
2016-12-24 15:01 - 2016-12-24 15:01 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\30C10FE1.sys
2016-12-24 05:45 - 2016-12-24 05:46 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Bartlomiej\Downloads\rkill_2.8.4.0.exe
2016-12-23 16:05 - 2016-12-23 19:55 - 2497101739 _____ C:\Users\Bartlomiej\Downloads\Stellaris.2016.PL.v1.4.1.Galaxy.Edition-J.rar
2016-12-21 23:58 - 2016-12-21 23:58 - 07631498 _____ C:\Users\Bartlomiej\Downloads\eratohoTW-a374275c5a9b56844e37cde3a17f40e6a7c4c8df-a374275c5a9b56844e37cde3a17f40e6a7c4c8df.zip
2016-12-21 01:55 - 2016-12-21 01:55 - 00005364 _____ C:\Users\Bartlomiej\Downloads\camp.sav
2016-12-21 00:31 - 2016-12-21 00:31 - 00399709 _____ C:\Users\Bartlomiej\Downloads\campingtrip.zip
2016-12-20 17:58 - 2016-12-20 17:58 - 09822480 _____ C:\Users\Bartlomiej\Downloads\eratohoYMAEM Ver4242+ tr4.rar
2016-12-20 00:42 - 2016-12-20 00:46 - 00000925 _____ C:\Users\Bartlomiej\Desktop\Nowy dokument tekstowy.txt
2016-12-19 23:46 - 2016-12-19 23:46 - 00186057 _____ C:\Users\Bartlomiej\Downloads\Emuera-AnchorV107.7z
2016-12-19 02:21 - 2016-12-19 02:21 - 00047738 _____ C:\Users\Bartlomiej\Downloads\[140613] [ILLUSION] ジンコウガクエン２ ‐Artificial Academy‐ + Hairstyle Set + Personality Set + DLC + Wallpaper.torrent
2016-12-18 15:43 - 2016-12-18 15:43 - 00000000 ____D C:\Users\Bartlomiej\Downloads\Gameforge Live
2016-12-18 15:43 - 2016-12-18 15:43 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\Gameforge4d
2016-12-18 15:42 - 2017-01-09 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-12-18 15:42 - 2016-12-18 15:42 - 00001134 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2016-12-18 15:42 - 2016-12-18 15:42 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2016-12-18 15:40 - 2016-12-18 15:40 - 20253928 _____ (Gameforge ) C:\Users\Bartlomiej\Downloads\Elsword_GameforgeLiveSetup.exe
2016-12-18 05:06 - 2017-01-12 14:22 - 00000000 ____D C:\Users\Bartlomiej\Desktop\ER
2016-12-18 04:11 - 2016-12-18 04:11 - 01965015 _____ C:\Users\Bartlomiej\Downloads\EratohoK Tr63f.7z
2016-12-18 01:00 - 2016-12-18 01:00 - 05753283 _____ C:\Users\Bartlomiej\Downloads\TohoReverseT02.rar
2016-12-17 17:40 - 2016-12-17 17:40 - 07630899 _____ C:\Users\Bartlomiej\Downloads\eratohoTW-7c413e188e30392486e2390a6cf68b45b4f7e00e-7c413e188e30392486e2390a6cf68b45b4f7e00e.zip
2016-12-17 15:21 - 2016-12-17 15:26 - 524288000 _____ C:\Users\Bartlomiej\Downloads\500mb.bin
2016-12-16 23:24 - 2016-12-16 23:35 - 00000000 ____D C:\Users\Bartlomiej\Desktop\vcmi_099
2016-12-16 15:45 - 2016-12-16 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of Might and Magic III - Z³ota Edycja
2016-12-16 15:43 - 2011-04-25 18:26 - 00000000 ____D C:\Users\Bartlomiej\Downloads\HOMM3PL
2016-12-15 22:01 - 2016-11-22 12:42 - 00384864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-12-15 22:01 - 2016-11-22 11:43 - 03692040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-12-15 22:01 - 2016-11-22 11:36 - 00159640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2016-12-15 22:01 - 2016-11-22 11:35 - 00609056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-12-15 22:01 - 2016-11-22 11:35 - 00075448 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2016-12-15 22:01 - 2016-11-22 11:04 - 02549456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-12-15 22:01 - 2016-11-22 11:03 - 01777280 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-15 22:01 - 2016-11-22 11:02 - 01399216 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-12-15 22:01 - 2016-11-22 10:32 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-12-15 22:01 - 2016-11-22 10:24 - 02938408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-12-15 22:01 - 2016-11-22 10:21 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2016-12-15 22:01 - 2016-11-22 10:17 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2016-12-15 22:01 - 2016-11-22 10:16 - 00064072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2016-12-15 22:01 - 2016-11-22 10:13 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2016-12-15 22:01 - 2016-11-22 10:00 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2016-12-15 22:01 - 2016-11-22 09:59 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-12-15 22:01 - 2016-11-22 09:55 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-12-15 22:01 - 2016-11-22 09:50 - 00715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-12-15 22:01 - 2016-11-22 09:49 - 02195640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-12-15 22:01 - 2016-11-22 09:48 - 01522672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-15 22:01 - 2016-11-22 09:47 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-12-15 22:01 - 2016-11-22 09:35 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-12-15 22:01 - 2016-11-22 09:32 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-15 22:01 - 2016-11-22 09:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-12-15 22:01 - 2016-11-22 09:20 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-12-15 22:01 - 2016-11-22 09:12 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-12-15 22:01 - 2016-11-22 09:04 - 03587584 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-15 22:01 - 2016-11-22 08:57 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-12-15 22:01 - 2016-11-22 08:54 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-12-15 22:01 - 2016-11-22 08:53 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-15 22:01 - 2016-11-22 08:41 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-12-15 22:01 - 2016-11-22 08:38 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-12-15 22:01 - 2016-11-22 08:36 - 00766464 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-15 22:01 - 2016-11-22 08:26 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-15 22:01 - 2016-11-22 08:26 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-12-15 22:01 - 2016-11-22 08:21 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-12-15 22:01 - 2016-11-22 08:02 - 24610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-15 22:01 - 2016-11-22 08:01 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-15 22:01 - 2016-11-22 07:59 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-12-15 22:01 - 2016-11-22 07:55 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-15 22:01 - 2016-11-22 07:35 - 19350016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-15 22:01 - 2016-11-22 07:34 - 12134400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-13 04:25 - 2016-10-01 00:43 - 00000000 ____D C:\FRST
2017-01-13 04:25 - 2016-10-01 00:17 - 02419200 _____ (Farbar) C:\Users\Bartlomiej\Desktop\FRST64.exe
2017-01-13 04:25 - 2016-07-30 04:18 - 00000000 ____D C:\Users\Bartlomiej\Desktop\FRST-OlderVersion
2017-01-13 04:21 - 2016-10-01 04:20 - 01894679 _____ C:\Users\Bartlomiej\Desktop\gmer.txt
2017-01-13 03:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2017-01-13 02:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-13 01:59 - 2016-11-15 16:00 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\GG
2017-01-13 01:42 - 2016-01-24 17:42 - 00000000 ____D C:\AdwCleaner
2017-01-13 01:36 - 2016-12-12 19:01 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-13 01:36 - 2015-12-30 18:44 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-13 01:36 - 2015-12-30 18:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-13 01:36 - 2015-12-30 15:44 - 00000000 __SHD C:\Users\Bartlomiej\IntelGraphicsProfiles
2017-01-13 01:35 - 2015-12-30 18:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-13 01:35 - 2015-10-30 07:28 - 01310720 ___SH C:\WINDOWS\system32\config\BBI
2017-01-12 22:32 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-12 22:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-12 22:29 - 2016-10-13 23:59 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Telegram Desktop
2017-01-12 22:29 - 2015-12-30 21:01 - 00004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{845C5B53-D1BA-4E12-A608-D1F3175152CA}
2017-01-12 15:02 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-12 14:12 - 2016-01-04 17:06 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\CrashDumps
2017-01-12 06:41 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-12 00:23 - 2016-01-05 16:58 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Skype
2017-01-10 04:17 - 2016-05-09 19:32 - 00000000 ____D C:\ProgramData\ProductData
2017-01-09 06:42 - 2015-12-30 18:59 - 01849016 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-09 06:42 - 2015-10-30 20:19 - 00809230 _____ C:\WINDOWS\system32\perfh015.dat
2017-01-09 06:42 - 2015-10-30 20:19 - 00158372 _____ C:\WINDOWS\system32\perfc015.dat
2017-01-09 06:42 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2017-01-09 03:28 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ModemLogs
2017-01-09 03:10 - 2016-12-12 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-09 03:10 - 2016-11-10 02:35 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-01-09 03:10 - 2016-11-09 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEC Power Translator 15
2017-01-09 03:10 - 2016-10-22 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sunless Sea - Zubmariner [GOG.com]
2017-01-09 03:10 - 2016-10-21 04:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2017-01-09 03:10 - 2016-10-13 23:59 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2017-01-09 03:10 - 2016-09-24 23:21 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-09 03:10 - 2016-09-24 23:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-09 03:10 - 2016-08-18 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Fend Reloaded
2017-01-09 03:10 - 2016-08-13 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FM Genie Scout 16
2017-01-09 03:10 - 2016-08-04 16:35 - 00000000 ____D C:\WINDOWS\system32\nn-NO
2017-01-09 03:10 - 2016-07-21 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-01-09 03:10 - 2016-07-20 22:29 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-01-09 03:10 - 2016-07-18 23:08 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2017-01-09 03:10 - 2016-07-15 23:08 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2017-01-09 03:10 - 2016-07-12 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Morrowind
2017-01-09 03:10 - 2016-07-02 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HexChat
2017-01-09 03:10 - 2016-06-23 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-01-09 03:10 - 2016-06-08 16:32 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TADS
2017-01-09 03:10 - 2016-06-07 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cockatrice
2017-01-09 03:10 - 2016-05-26 01:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellaris
2017-01-09 03:10 - 2016-05-09 19:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2017-01-09 03:10 - 2016-04-25 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader
2017-01-09 03:10 - 2016-02-29 22:59 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-09 03:10 - 2016-02-29 22:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-09 03:10 - 2016-02-15 21:27 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Simulator
2017-01-09 03:10 - 2016-01-18 22:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-01-09 03:10 - 2016-01-12 01:27 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Command Modern Air Naval Operations
2017-01-09 03:10 - 2016-01-05 16:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-01-09 03:10 - 2016-01-04 17:31 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\K2T
2017-01-09 03:10 - 2016-01-04 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager
2017-01-09 03:10 - 2015-12-30 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-09 03:10 - 2015-12-30 19:41 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2017-01-09 03:10 - 2015-12-30 19:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastAccess Facial Recognition
2017-01-09 03:10 - 2015-12-30 18:46 - 00000000 ____D C:\Users\Bartlomiej
2017-01-09 03:10 - 2015-12-30 18:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-09 03:10 - 2015-12-30 18:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-09 03:10 - 2015-12-30 18:42 - 00000000 ____D C:\Program Files\Intel
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2017-01-09 03:10 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-09 03:10 - 2015-10-11 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 20 GB
2017-01-09 03:10 - 2015-10-11 20:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2017-01-09 03:10 - 2015-10-11 20:13 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-01-09 03:10 - 2015-10-11 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2017-01-09 03:10 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-09 03:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2017-01-09 03:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2017-01-09 03:10 - 2007-06-22 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATLAS V14.0 Trial Version
2017-01-09 03:09 - 2015-12-30 19:04 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\TileDataLayer
2016-12-31 17:31 - 2016-01-12 00:25 - 00000000 ____D C:\Users\Bartlomiej\AppData\Roaming\DAEMON Tools Lite
2016-12-30 15:51 - 2016-09-07 17:30 - 00093984 _____ C:\net-log.txt
2016-12-30 15:21 - 2016-08-04 16:25 - 00013560 _____ C:\Users\Bartlomiej\Downloads\DellSystemDetectLauncher.Application
2016-12-30 14:31 - 2016-11-11 02:18 - 00001642 _____ C:\Users\Bartlomiej\Desktop\Rkill.txt
2016-12-30 02:13 - 2015-10-11 20:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-30 01:49 - 2016-01-31 23:06 - 00000266 __RSH C:\ProgramData\ntuser.pol
2016-12-30 01:03 - 2015-10-11 20:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-30 00:56 - 2016-04-11 18:27 - 00000000 ____D C:\Program Files (x86)\DigitalCute
2016-12-30 00:32 - 2015-12-30 19:08 - 00002420 _____ C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-30 00:32 - 2015-12-30 15:52 - 00000000 ___RD C:\Users\Bartlomiej\OneDrive
2016-12-30 00:28 - 2015-12-30 15:45 - 00000402 ___SH C:\Users\Bartlomiej\Documents\desktop.ini
2016-12-30 00:28 - 2015-12-30 15:45 - 00000282 ___SH C:\Users\Bartlomiej\Downloads\desktop.ini
2016-12-30 00:28 - 2015-12-30 15:45 - 00000282 ___SH C:\Users\Bartlomiej\Desktop\desktop.ini
2016-12-30 00:28 - 2015-12-30 15:45 - 00000174 ___SH C:\Users\Bartlomiej\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-30 00:28 - 2015-12-30 15:45 - 00000000 ___RD C:\Users\Bartlomiej\Searches
2016-12-30 00:28 - 2015-12-30 15:45 - 00000000 ___RD C:\Users\Bartlomiej\Contacts
2016-12-30 00:28 - 2015-12-30 15:42 - 00000000 ___RD C:\Users\Bartlomiej\Saved Games
2016-12-30 00:28 - 2015-12-30 15:42 - 00000000 ___RD C:\Users\Bartlomiej\Pictures
2016-12-30 00:28 - 2015-12-30 15:42 - 00000000 ___RD C:\Users\Bartlomiej\Music
2016-12-30 00:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-12-30 00:20 - 2015-12-30 18:56 - 00023140 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-12-29 23:07 - 2015-12-30 19:38 - 00000000 ___DC C:\WINDOWS\Panther
2016-12-29 23:07 - 2015-12-30 17:57 - 00001908 _____ C:\WINDOWS\diagwrn.xml
2016-12-29 23:07 - 2015-12-30 17:57 - 00001908 _____ C:\WINDOWS\diagerr.xml
2016-12-29 19:47 - 2015-12-30 15:44 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\NVIDIA Corporation
2016-12-29 19:45 - 2016-07-20 15:47 - 00524288 ___SH C:\Users\Bartlomiej\NTUSER.DAT{1e6674c0-4d36-11e6-8290-74e6e22d7dcb}.TMContainer00000000000000000001.regtrans-ms
2016-12-29 19:45 - 2016-07-20 15:47 - 00065536 ___SH C:\Users\Bartlomiej\NTUSER.DAT{1e6674c0-4d36-11e6-8290-74e6e22d7dcb}.TM.blf
2016-12-29 18:28 - 2016-08-04 16:35 - 00000000 ____D C:\Program Files (x86)\Dell Wireless
2016-12-29 18:19 - 2016-08-01 20:22 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\Diagnostics
2016-12-29 18:12 - 2015-12-30 15:44 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\NVIDIA
2016-12-29 17:01 - 2015-12-30 21:39 - 00000000 ____D C:\ProgramData\Oracle
2016-12-29 17:00 - 2015-12-30 21:39 - 00000000 ____D C:\Program Files (x86)\Java
2016-12-29 16:59 - 2015-12-30 21:39 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-12-29 16:35 - 2015-12-30 20:23 - 00007609 _____ C:\Users\Bartlomiej\AppData\Local\resmon.resmoncfg
2016-12-29 16:26 - 2016-12-12 19:00 - 00001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-29 05:28 - 2015-12-30 21:44 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\Google
2016-12-29 05:28 - 2015-12-30 21:44 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-28 01:48 - 2016-07-21 15:21 - 00485032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-12-27 23:23 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-12-27 22:12 - 2015-10-30 07:28 - 00262144 ___SH C:\Users\Default\NTUSER.DAT
2016-12-27 05:46 - 2016-12-12 19:01 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2016-12-27 05:46 - 2016-12-12 19:01 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-12-26 14:33 - 2016-12-12 19:01 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2016-12-25 18:11 - 2016-08-17 22:26 - 00466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-12-25 18:11 - 2016-08-17 22:26 - 00444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2016-12-25 18:11 - 2016-08-17 22:26 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2016-12-25 18:11 - 2016-08-17 22:26 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2016-12-25 18:08 - 2016-10-14 03:00 - 00000000 ____D C:\GOG Games
2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-22 04:16 - 2016-12-03 17:20 - 00000000 ____D C:\Users\Bartlomiej\Desktop\HOMM3PL
2016-12-20 02:24 - 2016-10-13 23:59 - 00001049 _____ C:\Users\Bartlomiej\Desktop\Telegram.lnk
2016-12-17 15:15 - 2016-07-20 15:47 - 00237696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-17 02:36 - 2016-12-04 00:41 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-12-16 05:06 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-16 05:06 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-15 05:45 - 2016-12-09 16:44 - 00000000 ____D C:\Users\Bartlomiej\Desktop\COC
2016-12-15 04:59 - 2016-02-17 20:02 - 00000000 ____D C:\Users\Bartlomiej\AppData\Local\CoCEd
2016-12-14 12:55 - 2016-12-12 19:00 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2016-12-14 03:00 - 2016-10-15 20:26 - 00000000 ____D C:\Users\Bartlomiej\Downloads\Telegram Desktop

==================== Pliki w katalogu głównym wybranych folderów =======

2016-11-05 00:56 - 2010-01-15 10:36 - 0075040 _____ () C:\Program Files (x86)\Common Files\SpeechUninstall.exe
2016-12-25 17:08 - 2016-12-25 17:08 - 0000330 _____ () C:\Users\Bartlomiej\AppData\Roaming\Tribler.exe.old.log
2016-12-11 22:17 - 2016-12-12 16:24 - 0002705 _____ () C:\Users\Bartlomiej\AppData\Local\noxico.ini
2015-12-30 20:23 - 2016-12-29 16:35 - 0007609 _____ () C:\Users\Bartlomiej\AppData\Local\resmon.resmoncfg
2015-12-30 18:43 - 2015-12-30 18:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-10-11 20:09 - 2015-10-11 20:09 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
2015-10-11 20:06 - 2015-10-11 20:06 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
2015-10-11 20:08 - 2015-10-11 20:09 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log
2015-10-11 20:07 - 2015-10-11 20:08 - 0000113 _____ () C:\ProgramData\{E1646825-D391-42A0-93AA-27FA810DA093}.log

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-01-09 16:25

==================== Koniec  FRST.txt ============================