Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-02-2017
Uruchomiony przez Flxz (administrator)  PC-MICH (12-02-2017 11:56:22)
Uruchomiony z E:\download\scoped_dir_8164_18096
Załadowane profile: Flxz (Dostępne profile: Flxz & mati)
Platform: Windows 10 Home Wersja 1607 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\TieringEngineService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\ASUS USB-N13 Wireless LAN Driver\WPSService20.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(ShareX Team) C:\Program Files\ShareX\ShareX.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera_crashreporter.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Spotify Ltd) C:\Users\test\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Mozilla Corporation) D:\Programy\Thunderbird\thunderbird.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Opera Software) C:\Program Files\OperaStable\43.0.2442.806\opera.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig]  <===== UWAGA
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-12-05] (Glarysoft Ltd)
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Run: [Spotify Web Helper] => C:\Users\test\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-07] (Spotify Ltd)
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Run: [GoogleChromeAutoLaunch_1B0E81B795B08FCFC87354BB5741BA8D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504 2017-02-01] (Google Inc.)
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [NoPreviewPane] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [HideSCANetwork] 0
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\...\Policies\Explorer: [HideSCAVolume] 1
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2016-11-12]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2017-02-09]
ShortcutTarget: ShareX.lnk -> C:\Program Files\ShareX\ShareX.exe (ShareX Team)
BootExecute: autocheck autochk *  

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 91.226.6.2 91.226.6.12
Tcpip\..\Interfaces\{360905b4-e26b-4e8b-8e65-5443b4061da7}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{41b9900a-51a8-45f6-8399-661474a481b5}: [DhcpNameServer] 91.226.6.2 91.226.6.12
Tcpip\..\Interfaces\{59eff58a-1fec-4cd1-ba19-cadbdd228938}: [DhcpNameServer] 91.226.6.2 91.226.6.12
Tcpip\..\Interfaces\{dd82ae36-b007-4662-b358-2da46d9d88e2}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=lcjb
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=lcjb
HKU\S-1-5-21-2401798506-2639982409-459395285-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=lcjb
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-11] (Oracle Corporation)
Handler: WSKVAllmytubechrome - Brak wartości CLSID

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-2401798506-2639982409-459395285-1002 -> [funkcja włączona]

FireFox:
========
FF DefaultProfile: lsd934n5.Mich
FF ProfilePath: C:\Users\test\AppData\Roaming\Postbox\Profiles\rn3cczb6.default [2017-02-09]
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\lsd934n5.Mich [2017-02-11]
FF Homepage: Mozilla\Firefox\Profiles\lsd934n5.Mich -> hxxps://www.google.pl/?gfe_rd=cr&ei=6n6MWPKNEOiv8wfw0oDQDQ
FF Session Restore: Mozilla\Firefox\Profiles\lsd934n5.Mich -> [funkcja włączona]
FF Extension: (Avira Browser Safety) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\lsd934n5.Mich\Extensions\abs@avira.com.xpi [2017-02-09]
FF Extension: (Adguard AdBlocker) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\lsd934n5.Mich\Extensions\adguardadblocker@adguard.com.xpi [2017-01-27]
FF Extension: (Tampermonkey) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\lsd934n5.Mich\Extensions\firefox@tampermonkey.net.xpi [2017-01-27]
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-11] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-31] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default [2017-02-09]
CHR Extension: (Dysk Google) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-31]
CHR Extension: (Bloker reklam Adguard) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2017-01-31]
CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-31]
CHR Extension: (Steam Inventory Helper) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-02-09]
CHR Extension: (Search by Image (by Google)) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2017-02-09]
CHR Extension: (Fair AdBlocker App (by STANDS)) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble [2017-02-09]
CHR Extension: (Tampermonkey) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-01-31]
CHR Extension: (OneDrive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-02-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-31]
CHR Extension: (Speedtest by Ookla) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-02-09]
CHR Extension: (Gmail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-31]
CHR Extension: (Chrome Media Router) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-31]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Forget that page) - C:\Users\test\AppData\Roaming\Opera Software\Opera Stable\Extensions\ieomhnichbamgimkoacbpinnnlnpllej [2017-02-10]
OPR Extension: (gera2ld) - C:\Users\test\AppData\Roaming\Opera Software\Opera Stable\Extensions\niofholngoecgnpgamgbiiijcjlllpge [2017-02-09]
OPR Extension: (Instant Translate: Select and Translate) - C:\Users\test\AppData\Roaming\Opera Software\Opera Stable\Extensions\ollghamalkmmhboihmhoaaobmamehjgn [2017-02-10]
StartMenuInternet: (HKLM) Operabeta - D:\Programy\Opera\Launcher.exe
StartMenuInternet: (HKLM) OperaMail - C:\Users\test\AppData\Local\Opera Mail\OperaMail.exe
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\OperaStable\Launcher.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 Kingsoft_WPS_UpdateService; C:\Users\test\AppData\Local\Kingsoft\WPS Office\10.1.0.5652\wtoolex\wpsupdatesvr.exe [133376 2016-07-21] (Zhuhai Kingsoft Office Software Co.,Ltd)
S4 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation)
S4 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [Brak podpisu cyfrowego]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2015-09-03] (CyberLink)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2016-07-11] () [Brak podpisu cyfrowego]
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [304408 2017-01-29] (RaMMicHaeL)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 WPSService20; C:\Program Files (x86)\ASUS USB-N13 Wireless LAN Driver\WPSService20.exe [96768 2014-05-06] () [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-12-06] (Glarysoft Ltd)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2017-02-12] (Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [47104 2016-05-20] ()
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmowu.inf_amd64_7d04a4e2e36ad11f\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-10-25] (NVIDIA Corporation)
R3 RtlWlanu_OldIC; C:\WINDOWS\System32\drivers\rtwlanu_oldIC.sys [3814400 2016-07-16] (Realtek Semiconductor Corporation                           )
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [41824 2016-11-03] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [52960 2016-10-05] (SteelSeries ApS)
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [34488 2015-09-18] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [203320 2015-09-18] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [221824 2016-04-24] (Samsung Electronics Co., Ltd.)
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [203320 2015-09-18] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [66360 2015-09-18] (DEVGURU Co., LTD.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [203320 2015-09-18] (DEVGURU Co., LTD.(www.devguru.co.kr))
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-12 11:54 - 2017-02-12 11:56 - 00000000 ____D C:\FRST
2017-02-12 10:56 - 2017-02-12 10:56 - 00000000 __SHD C:\Users\test\AppData\Local\icsxml
2017-02-12 10:56 - 2017-02-12 10:56 - 00000000 ____D C:\Users\test\AppData\Local\MetaGeek,_LLC
2017-02-12 10:55 - 2017-02-12 10:55 - 00002499 _____ C:\Users\Public\Desktop\inSSIDer 4.lnk
2017-02-12 10:55 - 2017-02-12 10:55 - 00000000 __SHD C:\Users\test\AppData\Local\ms-drivers
2017-02-12 10:55 - 2017-02-12 10:55 - 00000000 __SHD C:\ProgramData\DIBsection
2017-02-12 10:55 - 2017-02-12 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek
2017-02-12 10:55 - 2017-02-12 10:55 - 00000000 ____D C:\Program Files (x86)\MetaGeek
2017-02-11 21:14 - 2015-10-08 09:54 - 03850968 ____R (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtwlanu.sys
2017-02-11 21:14 - 2014-05-06 11:19 - 00594432 ____N (Realtek Semiconductor Corp. ) C:\WINDOWS\system32\Rtlihvs.dll
2017-02-11 21:13 - 2017-02-11 21:14 - 00000000 ____D C:\Program Files (x86)\ASUS USB-N13 Wireless LAN Driver
2017-02-11 21:13 - 2012-06-18 18:21 - 00451072 ____N C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2017-02-10 17:14 - 2017-02-10 17:14 - 00005819 _____ C:\Users\test\AppData\Local\recently-used.xbel
2017-02-10 16:07 - 2017-02-11 21:16 - 00000992 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-02-10 16:07 - 2017-02-11 21:16 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-10 16:07 - 2017-02-10 16:07 - 00004054 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-02-10 16:07 - 2017-02-10 16:07 - 00003906 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-10 14:11 - 2017-02-10 14:11 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-02-10 14:11 - 2016-12-29 13:28 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-02-10 14:11 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-02-10 14:11 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-02-10 14:11 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-02-10 14:11 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-02-10 14:08 - 2017-02-10 14:12 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-02-09 18:18 - 2017-02-09 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX
2017-02-09 18:18 - 2017-02-09 18:18 - 00000000 ____D C:\Program Files\ShareX
2017-02-09 18:16 - 2017-02-09 18:16 - 04828846 _____ (ShareX Team ) C:\Users\test\Downloads\ShareX-11.5.0-setup.exe
2017-02-09 17:57 - 2017-02-09 17:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2017-02-09 12:50 - 2017-02-09 12:50 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-02-09 12:45 - 2017-02-09 12:45 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 43.lnk
2017-02-09 12:04 - 2017-02-09 12:50 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-08 14:33 - 2017-02-08 14:33 - 00000000 ____D C:\Users\test\AppData\Local\Stardock
2017-02-08 14:33 - 2017-02-08 14:33 - 00000000 ____D C:\ProgramData\Stardock
2017-02-08 14:31 - 2017-02-08 14:31 - 00000000 ____D C:\Users\test\Downloads\Stardock
2017-02-08 14:31 - 2017-02-08 14:31 - 00000000 ____D C:\Users\Public\Documents\Stardock
2017-02-07 13:53 - 2017-02-07 13:53 - 00000000 ____D C:\Users\test\AppData\Roaming\Postbox
2017-02-07 13:53 - 2017-02-07 13:53 - 00000000 ____D C:\Users\test\AppData\Local\Postbox
2017-02-07 13:53 - 2017-02-07 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postbox
2017-02-07 13:53 - 2017-02-07 13:53 - 00000000 ____D C:\Program Files (x86)\Postbox
2017-02-06 22:09 - 2017-02-06 22:09 - 00000000 ____D C:\Users\test\AppData\Roaming\Molszowy00@hotmaIL.COM
2017-02-06 22:08 - 2017-02-06 22:09 - 00000000 ____D C:\Users\test\AppData\Roaming\Mail
2017-02-06 22:08 - 2017-02-06 22:09 - 00000000 ____D C:\Users\test\AppData\Roaming\Claws-mail
2017-02-06 21:56 - 2017-02-09 12:45 - 00003996 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1486414565
2017-02-06 21:14 - 2017-02-06 21:14 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2017-02-06 21:13 - 2017-02-10 16:29 - 00000000 ____D C:\Users\test\AppData\Roaming\WhatsApp
2017-02-06 21:13 - 2017-02-06 21:14 - 00000000 ____D C:\Users\test\AppData\Local\WhatsApp
2017-02-06 21:13 - 2017-02-06 21:14 - 00000000 ____D C:\Users\test\AppData\Local\SquirrelTemp
2017-02-06 20:54 - 2017-02-06 20:54 - 00000000 ____D C:\Users\test\AppData\Local\Arcode
2017-02-06 20:53 - 2017-02-06 21:02 - 00000000 ____D C:\Users\test\AppData\Local\Inky
2017-02-02 18:49 - 2017-02-02 18:50 - 00000000 ____D C:\Opera
2017-02-02 18:43 - 2017-02-07 16:17 - 00000000 ____D C:\Program Files (x86)\Hard Disk Sentinel
2017-02-02 18:43 - 2017-02-02 18:43 - 00000000 ____D C:\Users\test\AppData\Roaming\Hard Disk Sentinel
2017-01-31 10:39 - 2017-02-09 17:53 - 00002354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-31 10:39 - 2017-01-31 10:44 - 00003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-31 10:39 - 2017-01-31 10:44 - 00003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-31 09:51 - 2017-02-07 14:51 - 00000000 ____D C:\Users\test\AppData\Local\gtk-2.0
2017-01-31 09:51 - 2017-01-31 09:51 - 00000000 ____D C:\Users\test\.thumbnails
2017-01-30 15:39 - 2017-02-07 14:55 - 00000867 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera beta.lnk
2017-01-30 15:39 - 2017-02-02 18:05 - 00003974 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485787178
2017-01-30 15:21 - 2017-01-30 15:21 - 00000000 ____D C:\Users\test\AppData\Roaming\Opera Mail
2017-01-30 15:02 - 2017-01-30 15:02 - 00002085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera  Mail.lnk
2017-01-29 19:26 - 2017-01-30 15:31 - 00000000 ____D C:\Program Files (x86)\Opera beta
2017-01-29 11:52 - 2017-01-29 11:52 - 00000000 ____D C:\Users\test\AppData\Roaming\Thunderbird
2017-01-29 11:46 - 2017-01-29 11:51 - 00000000 ____D C:\Users\test\AppData\Roaming\eM Client
2017-01-29 11:31 - 2017-01-30 15:33 - 00000000 ____D C:\Program Files (x86)\eM Client
2017-01-28 15:28 - 2017-01-28 15:28 - 00000000 ____D C:\Users\test\AppData\Local\AviraSpeedup
2017-01-28 15:18 - 2017-01-28 15:18 - 00000000 ____D C:\Users\test\AppData\Local\Avira
2017-01-28 15:17 - 2017-02-11 21:16 - 00000000 ____D C:\Program Files (x86)\Avira
2017-01-28 12:22 - 2017-01-28 12:22 - 00029152 _____ C:\ProgramData\agent.1485602531.bdinstall.bin
2017-01-28 12:17 - 2017-02-09 17:47 - 00000000 ____D C:\Users\test\AppData\Roaming\XnView
2017-01-28 12:17 - 2017-01-28 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2017-01-28 12:17 - 2017-01-28 12:17 - 00000000 ____D C:\Program Files (x86)\XnView
2017-01-28 12:06 - 2017-01-28 12:06 - 00046980 _____ C:\ProgramData\agent.1485601601.bdinstall.bin
2017-01-25 19:20 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 19:20 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-20 20:30 - 2017-01-20 20:30 - 00029141 _____ C:\ProgramData\agent.1484940641.bdinstall.bin
2017-01-19 19:40 - 2017-01-19 19:40 - 00028719 _____ C:\ProgramData\agent.1484851209.bdinstall.bin
2017-01-19 19:29 - 2017-01-19 19:29 - 00047139 _____ C:\ProgramData\agent.1484850549.bdinstall.bin
2017-01-17 05:56 - 2017-01-17 05:56 - 34717624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-01-17 05:56 - 2017-01-17 05:56 - 28209080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-01-17 05:56 - 2017-01-17 05:56 - 00951224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-01-17 05:56 - 2017-01-17 05:56 - 00904760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-01-17 05:56 - 2017-01-17 05:56 - 00448568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-01-17 05:56 - 2017-01-17 05:56 - 00397240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 02961336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 02594744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 01964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437654.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 01598392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437654.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 01047096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 00985144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 00393144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 00355768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-01-17 05:55 - 2017-01-17 05:55 - 00054728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-01-17 05:54 - 2017-01-17 05:54 - 40134200 _____ C:\WINDOWS\system32\nvcompiler.dll
2017-01-17 05:54 - 2017-01-17 05:54 - 35233336 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-01-17 05:53 - 2017-01-17 05:53 - 11017016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 10907368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 10453152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 09246832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 09000336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 08847016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00818688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00698544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00658592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00586784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00407240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-01-17 05:52 - 2017-01-17 05:52 - 00339152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-01-14 20:00 - 2017-01-14 20:00 - 00000000 ____D C:\Users\test\AppData\Roaming\AVG
2017-01-14 19:56 - 2017-01-14 19:56 - 00000000 ____D C:\Users\test\AppData\Roaming\TuneUp Software
2017-01-14 19:50 - 2017-01-19 19:31 - 00000000 ____D C:\ProgramData\MFAData
2017-01-14 19:50 - 2017-01-14 19:50 - 00000000 ____D C:\Users\test\AppData\Local\MFAData
2017-01-14 19:41 - 2017-01-19 19:37 - 00000000 ____D C:\Users\test\AppData\Local\AvgSetupLog
2017-01-14 19:40 - 2017-01-14 19:40 - 00029155 _____ C:\ProgramData\agent.1484419219.bdinstall.bin
2017-01-14 19:31 - 2017-01-14 19:31 - 00020404 _____ C:\ProgramData\agent.1484418694.bdinstall.bin
2017-01-14 19:11 - 2017-01-14 19:11 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3
2017-01-14 19:11 - 2017-01-14 19:11 - 00000000 ____D C:\Users\test\.TeamSpeak 3
2017-01-14 18:47 - 2017-01-14 18:49 - 00000000 ____D C:\Users\test\AppData\Roaming\AutoSizer

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-12 11:17 - 2016-12-06 18:20 - 00000000 ____D C:\Users\test\AppData\Local\ESET
2017-02-12 11:16 - 2016-08-11 06:36 - 00000000 ____D C:\Users\test\AppData\Local\Spotify
2017-02-12 11:14 - 2016-08-11 06:36 - 00000000 ____D C:\Users\test\AppData\Roaming\Spotify
2017-02-12 11:02 - 2016-08-15 16:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-12 10:24 - 2016-08-10 13:30 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-12 09:56 - 2016-07-16 23:05 - 01420910 _____ C:\WINDOWS\system32\perfh015.dat
2017-02-12 09:56 - 2016-07-16 23:05 - 00372342 _____ C:\WINDOWS\system32\perfc015.dat
2017-02-12 09:56 - 2016-07-11 20:35 - 03324404 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-12 09:53 - 2016-11-11 13:59 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-11 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-02-11 21:16 - 2016-08-10 13:58 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-11 21:16 - 2016-07-11 14:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-11 21:15 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-11 21:15 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-02-11 21:13 - 2016-12-11 21:26 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-11 21:12 - 2016-07-11 11:39 - 00000170 _____ C:\WINDOWS\win.ini
2017-02-11 12:44 - 2016-07-12 18:52 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps
2017-02-11 12:14 - 2016-07-11 12:36 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-11 12:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-10 17:14 - 2016-07-22 22:01 - 00000000 ____D C:\Users\test\.gimp-2.8
2017-02-10 16:24 - 2016-07-11 14:19 - 00000000 ____D C:\Users\test\Documents\ShareX
2017-02-10 16:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-10 16:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-10 16:07 - 2016-07-16 10:58 - 00000000 ____D C:\Users\test\AppData\Local\Adobe
2017-02-10 14:12 - 2017-01-09 19:13 - 00000000 ____D C:\Temp
2017-02-10 14:12 - 2016-11-11 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-10 14:12 - 2016-11-11 13:59 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-10 09:52 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-09 18:16 - 2016-11-17 19:46 - 00000000 ____D C:\Users\test\AppData\LocalLow\Mozilla
2017-02-09 17:47 - 2016-11-27 14:20 - 00000000 ____D C:\Program Files (x86)\Steam
2017-02-09 12:45 - 2016-11-27 13:06 - 00000000 ____D C:\Program Files\OperaStable
2017-02-08 14:33 - 2016-07-11 12:05 - 00000000 ____D C:\ProgramData\Unchecky
2017-02-07 22:23 - 2016-08-10 13:41 - 00000000 ____D C:\Users\test
2017-02-07 20:54 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-07 18:52 - 2016-08-25 07:49 - 00202832 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-06 21:56 - 2016-07-11 13:45 - 00000000 ____D C:\Users\test\AppData\Roaming\Opera Software
2017-02-06 21:56 - 2016-07-11 13:45 - 00000000 ____D C:\Users\test\AppData\Local\Opera Software
2017-01-31 10:39 - 2016-07-11 14:13 - 00000000 ____D C:\Users\test\AppData\Local\Google
2017-01-31 10:39 - 2016-07-11 14:13 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-30 15:37 - 2017-01-08 20:19 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2017-01-30 15:36 - 2016-11-11 12:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-01-30 15:33 - 2016-07-21 13:53 - 00000000 ____D C:\Users\test\AppData\Roaming\IrfanView
2017-01-30 15:22 - 2017-01-08 20:13 - 00000000 ____D C:\Users\test\AppData\Local\Opera Mail
2017-01-28 15:37 - 2016-08-10 14:27 - 00000000 ___DC C:\WINDOWS\Panther
2017-01-28 15:37 - 2016-07-11 14:48 - 00000000 ____D C:\Users\test\AppData\Roaming\5kplayer
2017-01-28 12:08 - 2016-07-12 07:56 - 00000000 ____D C:\Games
2017-01-28 11:57 - 2016-07-11 14:29 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client
2017-01-27 21:04 - 2017-01-09 19:13 - 00002642 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Update
2017-01-27 21:04 - 2017-01-09 19:13 - 00002624 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Engine
2017-01-27 21:04 - 2017-01-09 19:13 - 00002466 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Initial Update
2017-01-27 19:49 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-19 19:39 - 2016-07-11 12:14 - 00000000 ____D C:\ProgramData\Avg
2017-01-19 19:31 - 2016-07-11 13:14 - 00000000 ____D C:\Users\test\AppData\Local\Avg
2017-01-19 19:25 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-01-17 05:55 - 2016-11-11 13:57 - 01604152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-01-17 05:55 - 2016-11-11 13:57 - 00221640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-01-17 05:52 - 2016-11-11 13:57 - 03972960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-01-17 05:52 - 2016-11-11 13:57 - 03509152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-01-17 00:59 - 2016-11-11 13:57 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb
2017-01-15 19:06 - 2016-07-11 20:39 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-14 22:00 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-14 22:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-14 22:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-14 22:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-14 22:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-14 20:03 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-14 19:19 - 2016-07-11 15:07 - 00000000 ____D C:\Users\test\AppData\Roaming\steelseries-engine-3-client
2017-01-14 19:16 - 2016-11-27 13:06 - 00001200 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-01-14 19:10 - 2016-07-11 14:29 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-01-13 21:01 - 2016-07-11 15:53 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-13 20:59 - 2016-07-11 15:52 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Pliki w katalogu głównym wybranych folderów =======

2017-02-10 17:14 - 2017-02-10 17:14 - 0005819 _____ () C:\Users\test\AppData\Local\recently-used.xbel
2016-07-11 13:47 - 2016-08-21 10:05 - 0007605 _____ () C:\Users\test\AppData\Local\resmon.resmoncfg
2017-01-08 21:04 - 2017-01-08 21:04 - 0047503 _____ () C:\ProgramData\agent.1483905869.bdinstall.bin
2017-01-09 19:15 - 2017-01-09 19:15 - 0028747 _____ () C:\ProgramData\agent.1483985749.bdinstall.bin
2017-01-14 19:31 - 2017-01-14 19:31 - 0020404 _____ () C:\ProgramData\agent.1484418694.bdinstall.bin
2017-01-14 19:40 - 2017-01-14 19:40 - 0029155 _____ () C:\ProgramData\agent.1484419219.bdinstall.bin
2017-01-19 19:29 - 2017-01-19 19:29 - 0047139 _____ () C:\ProgramData\agent.1484850549.bdinstall.bin
2017-01-19 19:40 - 2017-01-19 19:40 - 0028719 _____ () C:\ProgramData\agent.1484851209.bdinstall.bin
2017-01-20 20:30 - 2017-01-20 20:30 - 0029141 _____ () C:\ProgramData\agent.1484940641.bdinstall.bin
2017-01-28 12:06 - 2017-01-28 12:06 - 0046980 _____ () C:\ProgramData\agent.1485601601.bdinstall.bin
2017-01-28 12:22 - 2017-01-28 12:22 - 0029152 _____ () C:\ProgramData\agent.1485602531.bdinstall.bin
2016-08-10 13:33 - 2016-08-10 13:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-07-21 20:40 - 2016-08-27 21:30 - 0019535 _____ () C:\ProgramData\empty.ico

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-02-11 14:05

==================== Koniec  FRST.txt ============================