Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 05-03-2017
Uruchomiony przez Szymek (administrator)  SZYMEKPC (05-03-2017 20:36:00)
Uruchomiony z C:\Users\Szymek\Desktop
Załadowane profile: Szymek &  (Dostępne profile: Szymek)
Platform: Windows 10 Pro Wersja 1607 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Micro-Star INT'L CO., LTD.) D:\Programy\Live Update\MSI_LiveUpdate_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Electronic Arts) D:\Gry\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Panda Security, S.L.) D:\Programy\Panda Security Protection\PSUAService.exe
(Panda Security, S.L.) D:\Programy\Panda Security Protection\PSANHost.exe
(Malwarebytes) D:\Programy\Malwarebytes Anti-Malware\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) D:\Programy\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) D:\Programy\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) D:\Programy\Malwarebytes Anti-Malware\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ROCCAT GmbH Co., Ltd.) D:\Programy\ROCCAT\Ryos TKL Keyboard\Ryos TKL Monitor.exe
(Panda Security, S.L.) D:\Programy\Panda Security Protection\PSUAMain.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Malwarebytes) D:\Programy\Malwarebytes Anti-Malware\Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8843520 2016-01-29] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => D:\PROGRAMY\MALWAREBYTES ANTI-MALWARE\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [Live Update] => D:\Programy\Live Update\Live Update.exe [11336656 2016-03-16] (Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [PSUAMain] => D:\Programy\Panda Security Protection\PSUAMain.exe [109824 2016-05-03] (Panda Security, S.L.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWoW64\userinit.exe,
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001\...\Run: [Steam] => D:\Gry\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Programy\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001\...\Run: [CCleaner Monitoring] => D:\Programy\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001\...\Run: [GalaxyClient] => D:\Programy\GalaxyClient\GalaxyClient.exe [3946048 2016-11-02] (GOG.com)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665\...\Run: [Steam] => D:\Gry\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665\...\Run: [DAEMON Tools Lite Automount] => D:\Programy\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665\...\Run: [CCleaner Monitoring] => D:\Programy\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665\...\Run: [GalaxyClient] => D:\Programy\GalaxyClient\GalaxyClient.exe [3946048 2016-11-02] (GOG.com)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-03-02]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2017-03-02]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos TKL Driver.lnk [2017-03-02]
ShortcutTarget: Ryos TKL Driver.lnk -> D:\Programy\ROCCAT\Ryos TKL Keyboard\Ryos TKL Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-03-02]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{44f23ec2-b580-4eac-8bc5-114b67c1d869}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665\Software\Microsoft\Internet Explorer\Main,Start Page = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-02-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Programy\Java\bin\ssv.dll [2016-03-21] (Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Programy\Java\bin\jp2ssv.dll [2016-03-21] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-02-19] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-19] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-02-28] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-2232669616-1159948849-1106635208-1001 -> hxxp://www.google.com

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> D:\Programy\Java\bin\dtplugin\npDeployJava1.dll [2016-03-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> D:\Programy\Java\bin\plugin2\npjp2.dll [2016-03-21] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-19] (Microsoft Corporation)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> D:\Programy\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> D:\Programy\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-02-19] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-2232669616-1159948849-1106635208-1001: SkypePlugin -> C:\Users\Szymek\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi.dll [2016-09-22] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2232669616-1159948849-1106635208-1001: SkypePlugin64 -> C:\Users\Szymek\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi-x64.dll [2016-09-22] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665: SkypePlugin -> C:\Users\Szymek\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi.dll [2016-09-22] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2232669616-1159948849-1106635208-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03032017080240665: SkypePlugin64 -> C:\Users\Szymek\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi-x64.dll [2016-09-22] (Skype Technologies S.A.)

Chrome: 
=======
CHR Profile: C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default [2017-03-05]
CHR Extension: (Adblock Plus) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-02]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-02]
CHR Extension: (Chrome Media Router) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-02]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apps_Cfg; C:\ProgramData\Apple\Apps\config.dll [115712 2017-03-02] () [Brak podpisu cyfrowego]
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2016-10-01] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294920 2017-02-19] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; D:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 GalaxyClientService; D:\Programy\GalaxyClient\GalaxyClientService.exe [284224 2016-11-02] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6625856 2016-11-12] (GOG.com)
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-02-24] (Hi-Rez Studios) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Brak podpisu cyfrowego]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Brak podpisu cyfrowego]
R2 jhi_service; D:\Programy\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-10] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-01-28] (Rivet Networks)
R2 LMS; D:\Programy\Intel(R) Management Engine Components\LMS\LMS.exe [415520 2015-07-10] (Intel Corporation)
R2 MBAMService; D:\Programy\Malwarebytes Anti-Malware\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 MSI_LiveUpdate_Service; D:\Programy\Live Update\MSI_LiveUpdate_Service.exe [1794000 2016-03-17] (Micro-Star INT'L CO., LTD.)
R2 NanoServiceMain; D:\Programy\Panda Security Protection\PSANHost.exe [153096 2016-05-03] (Panda Security, S.L.)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
S3 Origin Client Service; D:\Gry\Origin\OriginClientService.exe [2130440 2016-09-17] (Electronic Arts)
R2 Origin Web Helper Service; D:\Gry\Origin\OriginWebHelperService.exe [2195472 2016-09-17] (Electronic Arts)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [73176 2016-02-22] (Panda Security, S.L.)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-07-23] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-07-22] ()
R2 PSUAService; D:\Programy\Panda Security Protection\PSUAService.exe [48584 2016-05-03] (Panda Security, S.L.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [144456 2016-01-22] (Rivet Networks, LLC.)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-04-03] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-04-03] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77408 2017-02-24] ()
R1 FACEIT; C:\WINDOWS\System32\Drivers\FACEIT.sys [4340736 2017-02-28] ()
R3 KillerEth; C:\WINDOWS\System32\drivers\e22w10x64.sys [156744 2015-10-07] (Qualcomm Atheros, Inc.)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [186304 2017-03-03] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [111544 2017-03-03] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-03-03] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [251840 2017-03-03] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [92088 2017-03-05] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [103856 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [210864 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [112560 2015-12-10] (Panda Security, S.L.)
R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [82864 2016-03-17] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [133552 2015-12-10] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [309680 2015-12-10] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [179632 2016-02-18] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [122800 2015-12-10] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [267184 2016-02-18] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [115632 2015-12-10] (Panda Security, S.L.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_02838dee03d82b94\nvlddmkm.sys [14427064 2017-01-21] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [174000 2016-02-18] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [129456 2016-02-18] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207280 2016-02-18] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133552 2016-02-18] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-02-24] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-02-18] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [62080 2015-06-16] (Panda Security, S.L.)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [40568 2015-10-02] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [52952 2016-08-29] (SteelSeries ApS)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [36808 2016-08-19] (Wellbia.com Co., Ltd.)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-03-05 20:36 - 2017-03-05 20:36 - 00025659 _____ C:\Users\Szymek\Desktop\FRST.txt
2017-03-05 20:35 - 2017-03-05 20:36 - 00000000 ____D C:\FRST
2017-03-05 20:35 - 2017-03-05 20:35 - 00000000 ____D C:\Users\Szymek\Desktop\FRST-OlderVersion
2017-03-03 08:11 - 2017-03-03 08:11 - 00000491 _____ C:\Users\Szymek\Desktop\Fixlog.txt
2017-03-03 08:08 - 2017-03-05 20:35 - 02423808 _____ (Farbar) C:\Users\Szymek\Desktop\FRST64.exe
2017-03-03 08:06 - 2017-03-03 08:06 - 00000911 _____ C:\Users\Szymek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Temp File Cleaner.lnk
2017-03-03 08:06 - 2017-03-03 08:06 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\addpcs
2017-03-03 08:06 - 2017-03-03 08:06 - 00000000 ____D C:\Program Files\Temp File Cleaner
2017-03-03 01:18 - 2017-03-03 01:17 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-03-03 00:55 - 2017-03-05 20:31 - 00092088 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-03-03 00:55 - 2017-03-03 01:45 - 00186304 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-03-03 00:55 - 2017-03-03 01:45 - 00111544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-03-03 00:55 - 2017-03-03 01:45 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-03-03 00:54 - 2017-03-03 00:54 - 00001044 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-03-03 00:54 - 2017-02-24 06:23 - 00077408 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-03-02 22:22 - 2017-03-02 22:22 - 00003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-03-02 22:22 - 2017-03-02 22:22 - 00003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-03-02 22:22 - 2017-03-02 22:22 - 00000000 ____D C:\Program Files (x86)\Google
2017-03-02 22:22 - 2017-03-02 22:21 - 01129376 _____ (Google Inc.) C:\Users\Szymek\Downloads\ChromeSetup.exe
2017-03-02 22:21 - 2017-03-02 22:21 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2017-03-02 14:22 - 2017-03-02 14:22 - 04031440 _____ C:\Users\Szymek\Desktop\adwcleaner_6.044.exe
2017-03-02 13:47 - 2017-03-02 22:01 - 00000866 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-02 13:46 - 2017-03-02 21:51 - 00000364 _____ C:\WINDOWS\SysWOW64\data.bin
2017-03-02 13:46 - 2017-03-02 13:46 - 00000000 ____D C:\ProgramData\Apple
2017-03-01 19:06 - 2017-03-01 20:07 - 00000000 ___HD C:\ProgramData\24I7291C6934V474
2017-03-01 19:06 - 2017-03-01 19:06 - 00000000 ____D C:\WINDOWS\Minidump
2017-03-01 19:06 - 2017-03-01 19:06 - 00000000 ____D C:\Users\Szymek\AppData\Local\Aragepy
2017-02-28 10:10 - 2017-02-28 10:10 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-02-26 17:55 - 2017-02-26 17:55 - 00000000 ____D C:\Users\Szymek\Documents\cossacks
2017-02-19 14:12 - 2017-02-19 14:12 - 00639728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll
2017-02-19 14:12 - 2017-02-19 14:12 - 00334616 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll
2017-02-19 14:12 - 2017-02-19 14:12 - 00244504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll
2017-02-19 14:11 - 2017-02-19 14:11 - 00443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll
2017-02-19 14:11 - 2017-02-19 14:11 - 00089328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll
2017-02-19 14:10 - 2017-02-19 14:10 - 00085744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll
2017-02-19 14:09 - 2017-02-19 14:09 - 00394504 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll
2017-02-19 14:09 - 2017-02-19 14:09 - 00271104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll
2017-02-13 20:28 - 2017-02-13 20:28 - 00292275 _____ C:\Users\Szymek\Desktop\kupon_30.pdf
2017-02-09 16:28 - 2017-02-09 16:28 - 00000000 ____D C:\ProgramData\For Honor
2017-02-04 18:13 - 2017-02-28 11:32 - 04340736 _____ C:\WINDOWS\system32\Drivers\FACEIT.sys
2017-02-04 18:12 - 2017-03-02 22:01 - 00000743 _____ C:\Users\Public\Desktop\FACEIT Client.lnk
2017-02-04 18:12 - 2017-03-02 22:01 - 00000743 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT Client.lnk
2017-02-04 16:58 - 2017-02-04 16:58 - 00589610 _____ C:\Users\Szymek\Desktop\Ticketpro-eTicket-4477696.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-03-05 20:33 - 2016-10-01 10:38 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-05 20:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-05 20:33 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\asd
2017-03-03 08:07 - 2016-11-16 21:23 - 00000000 ____D C:\Users\Szymek\AppData\LocalLow\Temp
2017-03-03 08:07 - 2016-10-01 10:39 - 02596016 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-03 08:07 - 2016-07-16 23:05 - 01014794 _____ C:\WINDOWS\system32\perfh015.dat
2017-03-03 08:07 - 2016-07-16 23:05 - 00263350 _____ C:\WINDOWS\system32\perfc015.dat
2017-03-03 01:45 - 2016-10-01 10:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-03 01:45 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-03 01:45 - 2016-04-08 22:49 - 00251840 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-03-03 01:18 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-03-03 00:54 - 2016-04-08 22:48 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-03 00:16 - 2016-10-01 10:38 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-02 22:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-02 22:22 - 2016-03-21 19:05 - 00002354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-02 22:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-03-02 22:01 - 2016-11-15 22:18 - 00001464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centrum obsługi HP.lnk
2017-03-02 22:01 - 2016-11-15 22:18 - 00001458 _____ C:\Users\Public\Desktop\Centrum obsługi HP.lnk
2017-03-02 22:01 - 2016-11-15 22:18 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rejestracja programu I.R.I.S. OCR.lnk
2017-03-02 22:01 - 2016-10-07 18:29 - 00001489 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-03-02 22:01 - 2016-10-01 10:46 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-03-02 22:01 - 2016-10-01 10:39 - 00000000 ____D C:\Users\Szymek
2017-03-02 22:01 - 2016-08-23 22:56 - 00000897 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2017-03-02 22:01 - 2016-08-06 11:59 - 00001808 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus.lnk
2017-03-02 22:01 - 2016-08-06 11:59 - 00001765 _____ C:\Users\Public\Desktop\Panda Free Antivirus.lnk
2017-03-02 22:01 - 2016-05-11 16:00 - 00000785 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002568 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002538 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive dla firm.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002405 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-03-02 22:01 - 2016-04-15 10:27 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-03-02 22:01 - 2016-04-03 14:37 - 00000727 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2017-03-02 22:01 - 2016-03-21 18:31 - 00002414 _____ C:\Users\Szymek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-02 22:00 - 2016-06-12 14:43 - 00000800 _____ C:\Users\Szymek\Desktop\CodeBlocks.lnk
2017-03-02 14:56 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-02 14:56 - 2016-04-08 22:47 - 00000000 ____D C:\Users\Szymek\AppData\Local\CrashDumps
2017-03-02 14:56 - 2016-04-03 21:42 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\DAEMON Tools Lite
2017-03-02 14:56 - 2016-04-03 14:37 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\Azureus
2017-03-02 14:25 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-02 14:14 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Resources
2017-03-01 20:56 - 2016-03-21 19:39 - 00000000 ____D C:\Users\Szymek\AppData\Local\Battle.net
2017-03-01 19:16 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-02-28 10:10 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-28 10:10 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-28 10:09 - 2016-04-15 10:25 - 00000000 ____D C:\Program Files\Microsoft Office
2017-02-27 20:09 - 2016-06-27 21:16 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\vlc
2017-02-26 18:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Performance
2017-02-24 18:14 - 2016-04-12 14:44 - 00000000 ____D C:\Users\Szymek\Desktop\gry
2017-02-24 09:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-23 16:42 - 2016-04-12 11:40 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\steelseries-engine-3-client
2017-02-23 16:33 - 2016-03-21 21:13 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-23 16:30 - 2016-03-21 21:13 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-13 20:48 - 2016-03-21 18:30 - 00000000 ____D C:\Users\Szymek\AppData\Local\Packages
2017-02-10 13:56 - 2016-04-16 10:58 - 00000000 ____D C:\Users\Szymek\AppData\Local\Ubisoft Game Launcher
2017-02-10 13:27 - 2016-04-12 14:47 - 00542248 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-02-09 16:28 - 2016-04-16 10:58 - 00000000 ____D C:\Users\Szymek\Documents\My Games
2017-02-08 12:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-02-06 20:48 - 2016-12-14 20:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-06 20:48 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

==================== Pliki w katalogu głównym wybranych folderów =======

2016-03-21 18:51 - 2016-03-21 18:51 - 0000000 _____ () C:\Users\Szymek\AppData\Local\Driver_LOM_8161Present.flag
2016-08-31 16:50 - 2016-08-31 16:50 - 0000094 _____ () C:\Users\Szymek\AppData\Local\fusioncache.dat
2016-10-07 17:20 - 2016-10-07 17:20 - 0007606 _____ () C:\Users\Szymek\AppData\Local\Resmon.ResmonCfg
2016-11-03 15:26 - 2016-11-15 22:51 - 0006201 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-02-23 16:30

==================== Koniec  FRST.txt ============================