Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:18-01-2016
Uruchomiony przez Nivez (administrator)  DESKTOP-D9C0QN0 (24-01-2016 06:49:43)
Uruchomiony z C:\Users\Nivez\Downloads\Programs
Załadowane profile: Nivez (Dostępne profile: Nivez)
Platform: Windows 10 Pro Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10_64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel® Corporation) C:\Program Files\Intel\CAM\bin\CAMService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Irfan Skiljan) C:\Program Files\IrfanView\i_view64.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\mspaint.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2015-12-30] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2015-12-30] (Lenovo(beijing) Limited)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\RunOnce: [{cc892976-0919-4ba9-ab52-ae15d2127a12}] => C:\ProgramData\Package Cache\{cc892976-0919-4ba9-ab52-ae15d2127a12}\Setup.exe [1728800 2016-01-23] (Intel Corporation) <===== UWAGA
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\Run: [Viber] => C:\Users\Nivez\AppData\Local\Viber\Viber.exe [51657424 2015-11-09] ()
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-29] (Skype Technologies S.A.)
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\MountPoints2: {6a7739cf-a0be-11e5-a1a6-00c2c675b1d7} - "F:\Setup.exe" 
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\MountPoints2: {77f2e96c-a17c-11e5-a1a7-00c2c675b1d7} - "J:\Setup.exe" 
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\MountPoints2: {cfc0a51c-af9b-11e5-a20a-28d2449c2b16} - "F:\start_infor.exe" 
HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\MountPoints2: {cfc0a56a-af9b-11e5-a20a-28d2449c2b16} - "G:\start_infor.exe" 
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
Startup: C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2015-12-21] ()
Startup: C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2016-01-12]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicyScripts: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9087cb37-6860-4958-b953-e815f7db6beb}: [DhcpNameServer] 217.113.224.35 217.113.224.135
Tcpip\..\Interfaces\{d9ceec5c-980a-499f-bb1c-5db1272be2c0}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-12-16] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-16] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-16] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-16] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-16] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Nivez\AppData\Roaming\Mozilla\Firefox\Profiles\zlju39ru.default
FF Homepage: google.pl
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-21] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-21] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-12-16] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-30] (Google Inc.)
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-12-09]
FF Extension: AdBeaver - C:\Users\Nivez\AppData\Roaming\Mozilla\Firefox\Profiles\zlju39ru.default\Extensions\adbeaver@adbeaver.org.xpi [2016-01-20]
FF Extension: uBlock Origin - C:\Users\Nivez\AppData\Roaming\Mozilla\Firefox\Profiles\zlju39ru.default\Extensions\uBlock0@raymondhill.net.xpi [2016-01-11]
FF Extension: Adblock Plus - C:\Users\Nivez\AppData\Roaming\Mozilla\Firefox\Profiles\zlju39ru.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-21]
FF HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Nivez\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Nivez\AppData\Roaming\IDM\idmmzcc5 [2016-01-24] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-2308007054-2526997979-3171511826-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

Chrome: 
=======
CHR Profile: C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Super Netflix) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\aioencjhbaolepcoappllicjebblphoc [2016-01-08]
CHR Extension: (Dysk Google) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-30]
CHR Extension: (MEGA) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2016-01-23]
CHR Extension: (YouTube) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-30]
CHR Extension: (uBlock Origin) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-01-19]
CHR Extension: (Google Search) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-30]
CHR Extension: (Click&Clean) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2015-12-31]
CHR Extension: (IDM Integration Module) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-12-31]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-30]
CHR Extension: (Gmail) - C:\Users\Nivez\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-30]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]

Opera: 
=======
OPR Extension: (Netflix Enhancer) - C:\Users\Nivez\AppData\Roaming\Opera Software\Opera Stable\Extensions\glnfmpbmfjcdmljainjgllggcoklfmim [2016-01-23]
OPR Extension: (µBlock) - C:\Users\Nivez\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2016-01-23]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 aspnet_state; C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [32768 2003-02-20] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 CAMService; C:\Program Files\Intel\CAM\bin\CAMService.exe [1246112 2015-06-03] (Intel® Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2748600 2015-12-04] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [828656 2013-11-18] (Condusiv Technologies)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [135408 2015-06-18] (Intel Corporation)
S4 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1872808 2016-01-01] (Maxthon)
S4 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-29] (Electronic Arts)
R2 Start10; C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe [219664 2015-02-03] (Stardock Software, Inc)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-12-20] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-08-13] (Intel® Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2015-03-10] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2015-03-10] (Windows (R) Win 7 DDK provider)
S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-07] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [46392 2016-01-07] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-09-23] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [200192 2015-09-23] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-09-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-09-23] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-09-23] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-09-23] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-09-23] (ESET)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] ()
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25840 2013-11-18] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [117488 2013-11-18] (Condusiv Technologies)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2015-12-22] (REALiX(tm))
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-12-20] (REALiX(tm))
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195336 2015-09-04] (Intel Corporation)
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3354384 2015-12-20] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3069680 2015-08-30] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-12-20] (Synaptics Incorporated)
R0 sptd2; C:\Windows\System32\Drivers\sptd2.sys [181816 2015-12-31] (Duplex Secure Ltd)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-24 06:48 - 2016-01-24 06:49 - 00000000 ____D C:\FRST
2016-01-24 06:31 - 2016-01-24 06:39 - 00000000 ____D C:\Users\Nivez\Desktop\admin
2016-01-23 23:55 - 2016-01-24 06:16 - 00000000 ____D C:\Chipset_Win8.1_10_64_10.1.1.13
2016-01-23 23:43 - 2016-01-23 23:43 - 00001819 _____ C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SetupChipset.lnk
2016-01-23 23:06 - 2016-01-23 23:06 - 00001145 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® WiFi HotSpot Assistant.lnk
2016-01-23 23:04 - 2016-01-23 23:05 - 00000000 ____D C:\ProgramData\Intel
2016-01-23 23:04 - 2016-01-23 23:04 - 00000000 ____D C:\Users\Nivez\Intel
2016-01-23 23:04 - 2016-01-23 23:04 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-01-23 23:04 - 2016-01-23 23:04 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-01-23 22:32 - 2016-01-23 23:13 - 00002439 _____ C:\Users\Nivez\Desktop\Smartflix.lnk
2016-01-23 22:32 - 2016-01-23 22:32 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Smartflix Limited
2016-01-23 22:31 - 2016-01-24 06:17 - 00000000 ____D C:\Users\Nivez\AppData\Local\smartflix
2016-01-23 15:59 - 2016-01-23 16:00 - 00000000 ____D C:\Users\Nivez\Desktop\Zrobione dla Joli
2016-01-23 15:52 - 2016-01-23 15:52 - 00000129 _____ C:\Users\Nivez\Desktop\expresscache.txt
2016-01-23 15:51 - 2016-01-23 15:51 - 00000000 ____D C:\ProgramData\Condusiv Technologies
2016-01-23 15:51 - 2016-01-23 15:51 - 00000000 ____D C:\Program Files\Condusiv Technologies
2016-01-23 15:51 - 2016-01-23 15:51 - 00000000 ____D C:\Program Files\Common Files\Diskeeper Corporation
2016-01-23 15:51 - 2013-11-18 14:02 - 00117488 _____ (Condusiv Technologies) C:\Windows\system32\Drivers\excsd.sys
2016-01-23 15:51 - 2013-11-18 14:02 - 00025840 _____ (Condusiv Technologies) C:\Windows\system32\Drivers\excfs.sys
2016-01-23 15:49 - 2016-01-23 15:49 - 00000000 ____D C:\SWTOOLS
2016-01-23 15:41 - 2016-01-23 15:41 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-01-23 15:40 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-01-23 15:40 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-01-23 15:29 - 2016-01-23 22:32 - 00000000 ____D C:\Users\Nivez\AppData\Local\SquirrelTemp
2016-01-23 15:29 - 2016-01-23 15:45 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Smartflix
2016-01-23 11:32 - 2016-01-23 11:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-23 11:32 - 2016-01-23 11:32 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-23 11:32 - 2016-01-23 11:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-22 08:58 - 2016-01-22 08:58 - 00000000 _____ C:\Users\Nivez\Desktop\Nowy dokument tekstowy (2).txt
2016-01-21 23:24 - 2016-01-24 06:19 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-21 23:24 - 2016-01-23 10:20 - 00003916 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-21 23:17 - 2016-01-21 23:17 - 00927824 _____ (Google Inc.) C:\Users\Nivez\Downloads\ChromeSetup.exe
2016-01-21 16:52 - 2016-01-21 16:52 - 00000000 _____ C:\Users\Nivez\Desktop\Nowy dokument tekstowy.txt
2016-01-17 13:33 - 2016-01-17 13:33 - 00000000 ____D C:\Users\Nivez\Documents\Moje palety
2016-01-17 13:28 - 2016-01-21 09:15 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Corel
2016-01-17 13:28 - 2016-01-17 13:28 - 00000000 ____D C:\Users\Nivez\Documents\Corel
2016-01-17 13:28 - 2016-01-17 13:28 - 00000000 ____D C:\ProgramData\Protexis64
2016-01-17 13:18 - 2016-01-17 13:53 - 00000000 ____D C:\Users\Nivez\Desktop\PDFF
2016-01-17 13:15 - 2016-01-17 13:15 - 00000000 ____D C:\Program Files\Common Files\Protexis
2016-01-17 13:13 - 2016-01-17 13:27 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2016-01-16 22:27 - 2016-01-17 20:02 - 00409344 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-15 22:34 - 2016-01-15 22:34 - 00000000 ____D C:\Users\Nivez\AppData\Local\GHISLER
2016-01-15 21:21 - 2016-01-15 21:42 - 00000000 ____D C:\totalcmd
2016-01-15 21:21 - 2016-01-15 21:21 - 00000683 _____ C:\Users\Nivez\Desktop\Total Commander 64 bit.lnk
2016-01-15 21:21 - 2016-01-15 21:21 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2016-01-15 21:21 - 2016-01-15 21:21 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\GHISLER
2016-01-15 21:02 - 2016-01-15 21:02 - 27298365 _____ C:\Users\Nivez\Downloads\Backup i zarzadzanie danymi w W - Adam Jozefiok.pdf
2016-01-14 16:19 - 2016-01-16 22:16 - 00000000 ____D C:\Users\Nivez\AppData\Local\Microsoft Help
2016-01-14 15:50 - 2016-01-14 15:50 - 00000000 ___RD C:\Users\Nivez\Documents\Scanned Documents
2016-01-14 15:50 - 2016-01-14 15:50 - 00000000 ____D C:\Users\Nivez\Documents\Fax
2016-01-13 13:28 - 2016-01-13 13:28 - 00000000 ____D C:\Xposed ZE500KL-ZE500KG
2016-01-13 13:16 - 2016-01-13 13:16 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\dvdcss
2016-01-13 11:51 - 2016-01-13 11:51 - 00001445 _____ C:\Users\Public\Desktop\Ontrack EasyRecovery Home.lnk
2016-01-13 11:51 - 2016-01-13 11:51 - 00000000 ____D C:\Users\Nivez\licman
2016-01-13 11:51 - 2016-01-13 11:51 - 00000000 ____D C:\Users\Nivez\ERHome64
2016-01-13 11:51 - 2016-01-13 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ontrack EasyRecovery Home
2016-01-13 11:51 - 2016-01-13 11:51 - 00000000 ____D C:\Program Files (x86)\Kroll Ontrack
2016-01-13 01:04 - 2016-01-16 22:14 - 00004096 _____ C:\Windows\ZZZZZZZZZZZZZ.ZZZ
2016-01-12 22:57 - 2016-01-12 22:57 - 00001118 _____ C:\Users\Public\Desktop\PDF-XChange Viewer.lnk
2016-01-12 22:57 - 2016-01-12 22:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange
2016-01-12 22:57 - 2016-01-12 22:57 - 00000000 ____D C:\Program Files\Tracker Software
2016-01-12 19:21 - 2016-01-12 19:21 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\ESET
2016-01-12 19:18 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-01-12 19:18 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-01-12 19:17 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-12 19:17 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-12 19:17 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-01-12 19:17 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-12 19:17 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-12 19:17 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-12 19:17 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-12 19:17 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-12 19:17 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-12 19:17 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-01-12 19:17 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2016-01-12 19:17 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-01-12 19:17 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2016-01-12 19:17 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-01-12 19:17 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-01-12 19:17 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-12 19:17 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-12 19:17 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-01-12 19:17 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-12 19:17 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-01-12 19:17 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-01-12 19:17 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-12 19:17 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-01-12 19:17 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-01-12 19:17 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-01-12 19:17 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\RMSRoamingSecurity.dll
2016-01-12 19:17 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\usermgrcli.dll
2016-01-12 19:17 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2016-01-12 19:17 - 2016-01-05 02:54 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-01-12 19:17 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-01-12 19:17 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-01-12 19:17 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-12 19:17 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-01-12 19:17 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-01-12 19:17 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-01-12 19:17 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-01-12 19:17 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-01-12 19:17 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-01-12 19:17 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-01-12 19:17 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-01-12 19:17 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-01-12 19:17 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ProximityCommon.dll
2016-01-12 19:17 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-01-12 19:17 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-01-12 19:17 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usermgrcli.dll
2016-01-12 19:17 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-01-12 19:17 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-12 19:17 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-01-12 19:17 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-01-12 19:17 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-01-12 19:17 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-01-12 19:17 - 2016-01-05 02:43 - 00953856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-01-12 19:17 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-01-12 19:17 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-12 19:17 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-01-12 19:17 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2016-01-12 19:17 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-01-12 19:17 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-01-12 19:17 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-01-12 19:17 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-01-12 19:17 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommon.dll
2016-01-12 19:17 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-01-12 19:17 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-01-12 19:17 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-01-12 19:17 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-01-12 19:17 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-12 19:17 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-01-12 19:17 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-12 19:17 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-01-12 19:17 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-01-12 19:17 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-12 19:17 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-12 19:17 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-01-12 19:17 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-12 19:17 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-01-12 19:17 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-01-12 09:40 - 2016-01-12 09:53 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-12 09:39 - 2016-01-12 09:39 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-01-12 09:39 - 2016-01-12 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-01-12 09:39 - 2016-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-12 09:39 - 2016-01-12 09:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-12 09:39 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-01-12 09:39 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-01-12 09:39 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-01-12 08:12 - 2016-01-12 08:12 - 00000000 ____D C:\Program Files\HitmanPro
2016-01-12 07:32 - 2016-01-12 07:32 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Big Angry Dog
2016-01-11 20:08 - 2016-01-12 20:12 - 00000000 ____D C:\Program Files (x86)\Steam
2016-01-11 20:08 - 2016-01-11 20:08 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk
2016-01-11 20:08 - 2016-01-11 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-10 14:17 - 2016-01-19 22:56 - 00471822 _____ C:\Windows\ProcessedPackets.KTL
2016-01-10 10:06 - 2016-01-10 10:06 - 00000000 ____D C:\ProgramData\Energy Management
2016-01-09 23:20 - 2016-01-09 23:20 - 00054303 _____ C:\Users\Nivez\Downloads\^4F9C3BE2DB0ECC365D5BF603F1ED8D6C5FD96F824CAE618AC5^pimgpsh_fullsize_distr.jpg
2016-01-09 22:25 - 2016-01-09 22:25 - 00000022 _____ C:\Users\Nivez\Downloads\MEGA-MASTERKEY.txt
2016-01-09 22:05 - 2016-01-12 07:07 - 00000000 ____D C:\Program Files\Recuva
2016-01-07 19:19 - 2016-01-13 00:15 - 00000000 ____D C:\AdwCleaner
2016-01-07 18:21 - 2016-01-07 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2016-01-07 18:21 - 2016-01-07 18:21 - 00000000 ____D C:\ProgramData\Elcomsoft Password Recovery
2016-01-07 18:21 - 2016-01-07 18:21 - 00000000 ____D C:\Program Files (x86)\Elcomsoft Password Recovery
2016-01-07 18:21 - 2016-01-07 18:21 - 00000000 ____D C:\Program Files (x86)\Elcomsoft
2016-01-07 18:07 - 2016-01-07 18:07 - 00001855 _____ C:\Windows\SysWOW64\odtwarzacz.csh
2016-01-07 18:07 - 2016-01-07 18:07 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Szkoła Hakerów - Odtwarzacz filmów instruktażowych
2016-01-07 18:07 - 2016-01-07 18:07 - 00000000 ____D C:\Program Files (x86)\Szkoła Hakerów - Odtwarzacz filmów instruktażowych
2016-01-07 18:05 - 2016-01-07 18:05 - 00001327 _____ C:\Users\Public\Desktop\Virtual CloneDrive.lnk
2016-01-07 18:05 - 2016-01-07 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2016-01-07 18:05 - 2016-01-07 18:05 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes
2016-01-07 17:57 - 2016-01-07 17:57 - 00000000 ____D C:\Users\Nivez\AppData\Local\Disc_Soft_Ltd
2016-01-07 17:53 - 2016-01-07 17:53 - 00046392 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-01-07 17:53 - 2016-01-07 17:53 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-01-07 17:53 - 2016-01-07 17:53 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-01-07 17:53 - 2016-01-07 17:53 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\DAEMON Tools Lite
2016-01-07 17:52 - 2016-01-07 17:52 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-01-07 17:18 - 2016-01-07 17:58 - 00000000 ____D C:\Program Files (x86)\UltraISO
2016-01-07 16:57 - 2016-01-21 09:10 - 00001341 _____ C:\Users\Nivez\Desktop\Revo Uninstaller.lnk
2016-01-07 16:57 - 2016-01-07 16:58 - 722358272 _____ C:\Users\Nivez\Downloads\Szkola hackerow - DVD_02.iso
2016-01-07 16:57 - 2016-01-07 16:57 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-01-07 16:53 - 2016-01-07 16:53 - 69150592 _____ C:\Users\Nivez\Downloads\se_31_12_15.pdf
2016-01-07 16:27 - 2016-01-07 16:28 - 158466048 _____ C:\Users\Nivez\Downloads\Szkola hackerow - DVD_01.iso
2016-01-06 20:05 - 2016-01-06 20:05 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Todoist
2016-01-06 20:05 - 2016-01-06 20:05 - 00000000 ____D C:\Users\Nivez\AppData\Local\Todoist
2016-01-06 20:05 - 2016-01-06 20:05 - 00000000 ____D C:\Users\Nivez\AppData\Local\Doist_Ltd
2016-01-06 12:58 - 2016-01-06 12:58 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-01-05 21:48 - 2016-01-05 21:48 - 00000751 _____ C:\Users\Nivez\Downloads\Obrazy — skrót.lnk
2016-01-05 13:10 - 2016-01-05 14:02 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\DeepBurner
2016-01-05 13:10 - 2016-01-05 13:10 - 00001158 _____ C:\Users\Nivez\Desktop\DeepBurner.lnk
2016-01-05 13:10 - 2016-01-05 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeepBurner
2016-01-05 13:10 - 2016-01-05 13:10 - 00000000 ____D C:\Program Files (x86)\Astonsoft
2016-01-03 20:44 - 2016-01-03 20:44 - 00000000 ____D C:\Users\Nivez\Documents\Diablo III
2016-01-03 20:26 - 2016-01-03 20:26 - 00000910 _____ C:\Users\Public\Desktop\Diablo III.lnk
2016-01-03 20:26 - 2016-01-03 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-01-03 20:04 - 2016-01-04 20:02 - 00000000 ____D C:\Users\Nivez\AppData\Local\Battle.net
2016-01-03 20:04 - 2016-01-03 20:11 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Battle.net
2016-01-03 20:04 - 2016-01-03 20:04 - 00000918 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-01-03 20:04 - 2016-01-03 20:04 - 00000000 ____D C:\Users\Nivez\AppData\Local\Blizzard Entertainment
2016-01-03 20:04 - 2016-01-03 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-01-03 20:04 - 2016-01-03 20:04 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2016-01-03 20:03 - 2016-01-03 20:03 - 00000000 ____D C:\ProgramData\Battle.net
2016-01-02 12:11 - 2016-01-02 12:11 - 00000000 ____D C:\Windows\SysWOW64\Atheros_L1e
2016-01-02 12:09 - 2016-01-23 23:05 - 00000000 ____D C:\Program Files\Intel
2016-01-02 12:09 - 2016-01-03 20:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2016-01-02 12:09 - 2016-01-02 12:09 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2016-01-02 12:09 - 2016-01-02 12:09 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Intel
2016-01-01 17:54 - 2016-01-17 19:57 - 00003014 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-01 17:53 - 2016-01-12 23:01 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-01 13:20 - 2016-01-01 15:05 - 00000000 ____D C:\Users\Nivez\AppData\Local\AdFender
2016-01-01 13:20 - 2016-01-01 15:05 - 00000000 ____D C:\ProgramData\AdFender
2016-01-01 12:27 - 2016-01-01 12:27 - 00000960 _____ C:\Users\Nivez\Desktop\Maxthon Nitro.lnk
2016-01-01 12:27 - 2016-01-01 12:27 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\mxnitro
2016-01-01 12:27 - 2016-01-01 12:27 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maxthon Nitro
2016-01-01 12:24 - 2016-01-17 19:57 - 00002768 _____ C:\Windows\System32\Tasks\Maxthon Update
2016-01-01 12:24 - 2016-01-01 12:24 - 00001158 _____ C:\Users\Public\Desktop\Maxthon Cloud Browser.lnk
2016-01-01 12:24 - 2016-01-01 12:24 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Maxthon3
2016-01-01 12:24 - 2016-01-01 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxthon Cloud Browser
2016-01-01 12:24 - 2016-01-01 12:24 - 00000000 ____D C:\Program Files (x86)\Maxthon
2016-01-01 12:12 - 2016-01-23 16:11 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-01-01 12:12 - 2016-01-23 10:20 - 00004134 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-01-01 12:04 - 2016-01-17 19:57 - 00003410 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1451646271
2016-01-01 12:04 - 2016-01-01 12:04 - 00001208 _____ C:\Users\Public\Desktop\Opera.lnk
2016-01-01 12:04 - 2016-01-01 12:04 - 00001208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-01-01 12:04 - 2016-01-01 12:04 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Opera Software
2016-01-01 12:04 - 2016-01-01 12:04 - 00000000 ____D C:\Users\Nivez\AppData\Local\Opera Software
2016-01-01 12:02 - 2016-01-16 15:47 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-31 15:29 - 2015-12-31 15:29 - 00000000 ____D C:\Users\Nivez\Documents\Electronic Arts
2015-12-31 15:11 - 2016-01-23 18:55 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Kadu
2015-12-31 15:11 - 2015-12-31 15:11 - 00000813 _____ C:\Users\Nivez\Desktop\Kadu.lnk
2015-12-31 15:11 - 2015-12-31 15:11 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kadu
2015-12-31 15:11 - 2015-12-31 15:11 - 00000000 ____D C:\Program Files\Kadu
2015-12-31 14:50 - 2015-12-31 14:50 - 00000000 ____D C:\ProgramData\Gadu-Gadu 10
2015-12-31 14:08 - 2015-12-31 14:09 - 00000000 ___SD C:\Users\Nivez\GG dysk
2015-12-31 14:06 - 2015-12-31 14:49 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\GG
2015-12-31 14:06 - 2015-12-31 14:49 - 00000000 ____D C:\Users\Nivez\AppData\Local\GG
2015-12-31 11:58 - 2015-12-31 12:03 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\CalendarSyncPlus
2015-12-31 11:32 - 2015-12-31 11:32 - 00000000 ____D C:\Users\Nivez\Documents\Pliki programu Outlook
2015-12-31 11:00 - 2015-12-31 11:02 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\C2PublicFoldersSyncAddin
2015-12-31 10:02 - 2016-01-07 17:21 - 00000583 _____ C:\Users\Nivez\Documents\ax_files.xml
2015-12-31 09:57 - 2016-01-07 17:21 - 00000000 ____D C:\ProgramData\Alcohol Soft
2015-12-31 09:57 - 2016-01-07 17:21 - 00000000 ____D C:\Program Files (x86)\Alcohol Soft
2015-12-31 09:51 - 2015-12-31 09:51 - 00181816 _____ (Duplex Secure Ltd) C:\Windows\system32\Drivers\sptd2.sys
2015-12-31 09:48 - 2016-01-24 06:03 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Skype
2015-12-31 09:48 - 2015-12-31 09:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-31 09:48 - 2015-12-31 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-31 00:01 - 2015-12-31 00:01 - 00000000 ____D C:\Intel
2015-12-31 00:01 - 2013-08-05 11:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-12-30 23:46 - 2015-12-30 23:45 - 00039008 _____ (Lenovo.) C:\Windows\system32\Drivers\LhdX64.sys
2015-12-30 23:46 - 2015-12-30 23:45 - 00019872 _____ (Lenovo (Beijing) Limited) C:\Windows\system32\LenovoSDKEmSubSystem.dll
2015-12-30 23:45 - 2015-12-30 23:45 - 00000000 ____D C:\ProgramData\Downloaded Installations
2015-12-30 20:30 - 2015-12-30 20:30 - 00001092 _____ C:\Users\Public\Desktop\Notepad++.lnk
2015-12-30 17:32 - 2016-01-21 23:18 - 00002354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2015-12-30 17:32 - 2016-01-21 23:18 - 00002342 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-30 17:31 - 2016-01-17 20:02 - 00001078 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-30 17:31 - 2016-01-17 20:02 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-30 17:31 - 2016-01-17 19:57 - 00003650 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-30 17:31 - 2016-01-17 19:57 - 00003426 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-30 17:31 - 2015-12-30 18:23 - 00000000 ____D C:\Users\Nivez\AppData\Local\Google
2015-12-30 17:31 - 2015-12-30 17:32 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-30 13:11 - 2016-01-19 22:56 - 00107627 _____ C:\Windows\NGIPacket.KTL
2015-12-29 21:55 - 2015-12-29 21:55 - 00001423 _____ C:\Users\Public\Desktop\The Sims 4.lnk
2015-12-29 21:55 - 2015-12-29 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4
2015-12-29 21:54 - 2014-09-16 18:45 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2015-12-29 20:52 - 2015-12-30 12:40 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Origin
2015-12-29 20:52 - 2015-12-29 20:54 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-12-29 20:52 - 2015-12-29 20:52 - 00000000 ____D C:\Users\Nivez\AppData\Local\Origin
2015-12-29 20:50 - 2015-12-31 21:28 - 00000000 ____D C:\ProgramData\Origin
2015-12-29 20:50 - 2015-12-31 15:29 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-12-29 20:50 - 2015-12-29 20:50 - 00001052 _____ C:\Users\Public\Desktop\Origin.lnk
2015-12-29 20:50 - 2015-12-29 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-12-29 20:49 - 2015-12-29 20:52 - 00000000 ____D C:\Program Files (x86)\Origin
2015-12-29 19:29 - 2016-01-11 20:09 - 00000000 ____D C:\Users\Nivez\AppData\Local\Steam
2015-12-29 19:29 - 2015-12-29 19:29 - 00000000 ____D C:\Users\Nivez\AppData\Local\CEF
2015-12-29 13:23 - 2015-12-29 13:18 - 00199152 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2015-12-28 15:34 - 2015-12-28 15:34 - 00000000 ____D C:\Users\Nivez\Desktop\strefakursow.pl Kurs Word 2013 od podstaw
2015-12-28 15:26 - 2015-12-28 15:26 - 00000000 ____D C:\Users\Nivez\Desktop\strefakursow.pl Kurs Outlook - efektywna praca
2015-12-28 15:26 - 2015-12-28 15:26 - 00000000 ____D C:\Users\Nivez\Desktop\strefakursow.pl Kurs Excel 2013 od podstaw
2015-12-26 20:51 - 2015-12-29 18:50 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\IrfanView
2015-12-26 20:51 - 2015-12-26 20:51 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-12-26 20:51 - 2015-12-26 20:51 - 00000000 ____D C:\Program Files\IrfanView

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-24 06:26 - 2015-12-03 22:25 - 01992678 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-24 06:26 - 2015-10-30 20:19 - 00869394 _____ C:\Windows\system32\perfh015.dat
2016-01-24 06:26 - 2015-10-30 20:19 - 00184746 _____ C:\Windows\system32\perfc015.dat
2016-01-24 06:26 - 2015-10-30 08:21 - 00000000 ____D C:\Windows\INF
2016-01-24 06:20 - 2015-12-03 22:29 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-24 06:20 - 2015-12-03 22:18 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-24 06:19 - 2015-10-30 07:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-01-24 06:18 - 2015-12-10 20:59 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\DMCache
2016-01-24 06:17 - 2015-12-21 22:39 - 00000000 ____D C:\Program Files\Lenovo
2016-01-24 06:17 - 2015-12-21 22:39 - 00000000 ____D C:\Program Files (x86)\Lenovo
2016-01-24 06:17 - 2015-12-11 18:05 - 00000000 ____D C:\Windows\system32\appmgmt
2016-01-23 23:50 - 2015-12-03 22:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-23 23:38 - 2015-12-10 20:59 - 00000000 ____D C:\Users\Nivez\Downloads\Compressed
2016-01-23 23:04 - 2015-12-03 22:22 - 00000000 ____D C:\Users\Nivez
2016-01-23 23:02 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-23 22:31 - 2015-12-03 23:41 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\vlc
2016-01-23 22:14 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\AppReadiness
2016-01-23 15:44 - 2015-12-20 15:59 - 00000000 ____D C:\Users\Nivez\AppData\Local\NVIDIA
2016-01-23 09:28 - 2015-12-10 11:42 - 00004226 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8BF07302-0A66-452F-AC17-6152A9AA459A}
2016-01-22 21:10 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-22 13:37 - 2015-12-10 20:59 - 00000000 ____D C:\Users\Nivez\Downloads\Video
2016-01-22 13:01 - 2015-12-20 21:11 - 00002536 _____ C:\Users\Nivez\Desktop\Paragon Partition Manager™ 2014 Free.lnk
2016-01-21 23:24 - 2015-12-04 22:17 - 00000000 ____D C:\Users\Nivez\AppData\Local\Adobe
2016-01-21 09:16 - 2015-12-03 22:22 - 00000000 ____D C:\Users\Nivez\AppData\Local\Packages
2016-01-21 09:15 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-01-19 22:56 - 2015-12-20 13:42 - 00007509 _____ C:\Windows\NGIControl.KTL
2016-01-19 09:52 - 2015-12-07 20:23 - 00000000 ____D C:\Users\Nivez\Documents\ViberDownloads
2016-01-19 09:51 - 2015-12-07 20:19 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\ViberPC
2016-01-18 22:33 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\LiveKernelReports
2016-01-17 19:57 - 2015-12-22 17:03 - 00002280 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-01-17 11:16 - 2015-12-24 18:13 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\foobar2000
2016-01-17 09:15 - 2015-12-10 20:59 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\IDM
2016-01-13 10:39 - 2015-10-30 08:11 - 00000000 ____D C:\Windows\CbsTemp
2016-01-13 00:15 - 2015-12-21 11:27 - 00000000 ____D C:\Program Files (x86)\Intel
2016-01-13 00:15 - 2015-12-06 21:03 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\Notepad++
2016-01-13 00:15 - 2015-12-06 20:52 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\TeamViewer
2016-01-13 00:15 - 2015-12-04 12:38 - 00000000 ____D C:\Users\Nivez\AppData\Roaming\uTorrent
2016-01-13 00:15 - 2015-12-03 23:55 - 00000000 ____D C:\ProgramData\Skype
2016-01-13 00:12 - 2015-12-17 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-01-12 21:18 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\NDF
2016-01-12 20:56 - 2015-12-09 19:18 - 00001408 __RSH C:\ProgramData\ntuser.pol
2016-01-12 19:31 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-12 19:18 - 2015-12-08 22:08 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-01-12 19:18 - 2015-12-08 22:08 - 00000000 ____D C:\Windows\system32\MRT
2016-01-12 07:50 - 2015-12-22 15:12 - 00041080 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2016-01-12 05:41 - 2015-12-20 15:59 - 01542600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-01-12 05:41 - 2015-12-20 15:59 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-01-12 05:40 - 2015-12-20 15:59 - 01860120 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-01-12 05:40 - 2015-12-20 15:59 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-01-12 05:40 - 2015-12-20 15:59 - 00112032 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-01-07 17:57 - 2015-12-20 15:54 - 00000000 ____D C:\ProgramData\ProductData
2016-01-07 16:57 - 2015-12-11 18:04 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-01-07 08:13 - 2015-12-03 23:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-06 21:12 - 2015-12-03 22:22 - 00000000 ____D C:\Users\Nivez\AppData\Local\VirtualStore
2016-01-03 13:00 - 2015-12-13 10:41 - 00000000 ____D C:\adb
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 12:11 - 2015-12-04 20:03 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-01 17:53 - 2015-12-04 22:17 - 00000000 ____D C:\ProgramData\Adobe
2015-12-31 14:49 - 2015-12-06 11:31 - 00000000 ____D C:\Program Files\MyPortal
2015-12-31 12:54 - 2015-12-10 20:59 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2015-12-30 23:46 - 2015-12-13 10:42 - 00000000 ____D C:\Program Files\DIFX
2015-12-30 23:45 - 2012-02-21 05:48 - 02356592 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01011.dll
2015-12-26 00:21 - 2015-12-11 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-16 20:39 - 2015-12-16 20:39 - 0000093 _____ () C:\Users\Nivez\AppData\Local\fusioncache.dat
2015-12-09 14:46 - 2015-12-09 14:46 - 0000017 _____ () C:\Users\Nivez\AppData\Local\resmon.resmoncfg
2015-12-03 22:57 - 2015-12-03 22:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\Package Cache\{cc892976-0919-4ba9-ab52-ae15d2127a12}\Setup.exe


Niektóre pliki w TEMP:
====================
C:\Users\Nivez\AppData\Local\Temp\NVI2_29.DLL


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


UWAGA: ==> Nie można uzyskać dostępu do BCD. 


LastRegBack: 2016-01-24 00:35

==================== Koniec  FRST.txt ============================