Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-06-2017
Ran by Admin (administrator) on LAPEK (06-06-2017 21:45:19)
Running from C:\Users\Krzyzu\Downloads
Loaded Profiles: Krzyzu & Admin (Available Profiles: Krzyzu & Admin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AppEx Networks Corporation) C:\Program Files\AMD Quick Stream\AMDQuickStream.exe
(Spotify Ltd) C:\Users\Krzyzu\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(© 2015 Microsoft Corporation) C:\Users\Krzyzu\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(REALiX) C:\Users\Krzyzu\Desktop\2\HWiNFO64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [866224 2017-03-16] ()
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-05-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-05-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKU\S-1-5-21-2430178884-176901310-90516242-1000\...\Run: [AppEx Accelerator UI] => C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [488640 2015-04-06] (AppEx Networks Corporation)
HKU\S-1-5-21-2430178884-176901310-90516242-1000\...\Run: [Spotify Web Helper] => C:\Users\Krzyzu\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1560176 2017-05-26] (Spotify Ltd)
HKU\S-1-5-21-2430178884-176901310-90516242-1000\...\Run: [BingSvc] => C:\Users\Krzyzu\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2430178884-176901310-90516242-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2430178884-176901310-90516242-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2430178884-176901310-90516242-1003\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3042592 2017-06-01] (Valve Corporation)
HKU\S-1-5-21-2430178884-176901310-90516242-1003\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2430178884-176901310-90516242-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
GroupPolicy\User: Restriction <======= ATTENTION
GroupPolicyUsers\S-1-5-21-2430178884-176901310-90516242-1000\User: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{4FDCCD61-2B77-4D8E-AAE8-30EF892CDD16}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKU\S-1-5-21-2430178884-176901310-90516242-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-05-16] (McAfee, Inc.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-05-16] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-05-16] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-05-16] (McAfee, Inc.)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-04-18]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2017-06-06]
CHR Extension: (Google Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-05]
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-05]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-05]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-05]
CHR Extension: (Google Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-05]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-06-05]
CHR Extension: (Google Docs Offline) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-05]
CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-05]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2430178884-176901310-90516242-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2430178884-176901310-90516242-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2017-03-16] ()
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [188256 2017-05-16] (McAfee, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [31872 2012-02-02] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [229056 2015-04-03] (AppEx Networks Corporation)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R3 HWiNFO32; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO64A.SYS [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-06 21:45 - 2017-06-06 21:45 - 00012772 _____ C:\Users\Krzyzu\Downloads\FRST.txt
2017-06-06 21:44 - 2017-06-06 21:45 - 00000000 ____D C:\FRST
2017-06-06 21:44 - 2017-06-06 21:44 - 00371411 _____ C:\Users\Krzyzu\Downloads\gm.zip
2017-06-06 21:43 - 2017-06-06 21:44 - 02433536 _____ (Farbar) C:\Users\Krzyzu\Downloads\FRST64.exe
2017-06-06 21:19 - 2017-06-06 21:26 - 300814328 _____ (AMD Inc.) C:\Users\Krzyzu\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe
2017-06-06 21:16 - 2017-06-06 21:16 - 00000000 ____D C:\Users\Krzyzu\Downloads\hw64_552
2017-06-06 21:16 - 2017-06-06 21:16 - 00000000 ____D C:\Users\Krzyzu\Desktop\2
2017-06-06 21:15 - 2017-06-06 21:16 - 03474294 _____ C:\Users\Krzyzu\Downloads\hw64_552.zip
2017-06-06 21:07 - 2017-06-06 21:09 - 70355768 _____ (AMD Inc.) C:\Users\Krzyzu\Downloads\radeon-crimson-relive-17.5.2-minimalsetup-170518_web.exe
2017-06-06 21:00 - 2017-06-06 21:06 - 00000358 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2017-06-06 21:00 - 2017-06-06 21:00 - 00002708 _____ C:\Windows\System32\Tasks\DriverToolkit Autorun
2017-06-06 20:58 - 2017-06-06 21:00 - 68636559 _____ (AMD Inc.) C:\Users\Krzyzu\Downloads\Unconfirmed 400788.crdownload
2017-06-06 20:55 - 2017-06-06 20:55 - 00000000 ____D C:\Users\Krzyzu\Desktop\VGA
2017-06-06 20:52 - 2017-06-06 20:55 - 234626589 _____ C:\Users\Krzyzu\Downloads\VGA_AMD_Compal_Win7_64_Z894143000.zip
2017-06-06 20:48 - 2017-06-06 20:48 - 00019762 _____ C:\Users\Krzyzu\Desktop\1.gcs
2017-06-06 17:44 - 2017-06-06 17:46 - 176236752 _____ C:\Users\Krzyzu\Desktop\k2.mp4
2017-06-06 12:39 - 2017-06-06 21:12 - 00000000 ____D C:\Program Files (x86)\DriverToolkit
2017-06-06 12:39 - 2017-06-06 12:39 - 00000000 ____D C:\Users\Admin\AppData\Local\DriverToolkit
2017-06-06 12:38 - 2017-06-06 12:39 - 02458632 _____ (Megaify Software ) C:\Users\Krzyzu\Downloads\DriverToolkitInstaller.exe
2017-06-06 10:47 - 2017-06-06 17:29 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\GoPro
2017-06-06 10:47 - 2017-06-06 10:47 - 00000000 ____D C:\Users\Krzyzu\.GoPro
2017-06-06 10:46 - 2017-06-06 21:01 - 00000000 ____D C:\Users\Public\CineForm
2017-06-06 10:46 - 2017-06-06 10:52 - 00000000 ____D C:\Users\Krzyzu\AppData\Local\GoPro
2017-06-06 10:45 - 2017-06-06 10:45 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2017-06-06 10:45 - 2017-06-06 10:45 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2017-06-06 10:45 - 2017-06-06 10:45 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2017-06-06 10:45 - 2017-06-06 10:45 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2017-06-06 10:45 - 2017-06-06 10:45 - 00000860 _____ C:\Users\Public\Desktop\Quik.lnk
2017-06-06 10:45 - 2017-06-06 10:45 - 00000810 _____ C:\Users\Public\Desktop\GoPro Studio.lnk
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\Users\Admin\AppData\Local\GoPro
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\Program Files\GoPro
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\Program Files (x86)\OpenAL
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\Program Files (x86)\GoPro
2017-06-06 10:45 - 2017-06-06 10:45 - 00000000 ____D C:\Program Files (x86)\CineForm
2017-06-06 10:38 - 2017-06-06 10:41 - 278372024 _____ (GoPro, Inc.) C:\Users\Krzyzu\Downloads\GoPro_Quik-WinInstaller-2.3.0.5383.exe
2017-06-06 10:28 - 2017-06-06 10:28 - 00000000 ____D C:\Users\Krzyzu\Desktop\New folder
2017-06-06 00:32 - 2017-06-06 00:32 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\AMD
2017-06-06 00:30 - 2017-06-06 00:30 - 00001455 _____ C:\Users\Krzyzu\Downloads\pasha.rar
2017-06-06 00:22 - 2017-06-06 00:22 - 00000218 _____ C:\Users\Krzyzu\Desktop\Counter-Strike.url
2017-06-06 00:22 - 2017-06-06 00:22 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-06 00:05 - 2017-06-06 00:05 - 00000000 ____D C:\Users\Krzyzu\AppData\Local\Steam
2017-06-05 23:57 - 2017-06-06 01:43 - 00000000 ____D C:\Program Files (x86)\Steam
2017-06-05 23:57 - 2017-06-05 23:57 - 00000959 _____ C:\Users\Public\Desktop\Steam.lnk
2017-06-05 23:57 - 2017-06-05 23:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-05 23:56 - 2017-06-05 23:57 - 01446792 _____ C:\Users\Krzyzu\Downloads\SteamSetup.exe
2017-06-05 18:49 - 2017-06-05 18:49 - 00001234 __RSH C:\Users\Krzyzu\ntuser.pol
2017-06-05 18:46 - 2017-06-05 18:46 - 00000632 __RSH C:\Users\Admin\ntuser.pol
2017-06-05 18:44 - 2017-06-05 18:44 - 00057560 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2017-06-05 18:44 - 2017-06-05 18:44 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ATI
2017-06-05 18:44 - 2017-06-05 18:44 - 00000000 ____D C:\Users\Admin\AppData\Local\Google
2017-06-05 18:44 - 2017-06-05 18:44 - 00000000 ____D C:\Users\Admin\AppData\Local\ATI
2017-06-05 18:44 - 2017-06-05 18:44 - 00000000 ____D C:\Users\Admin\AppData\Local\AMD
2017-06-05 18:43 - 2017-06-05 18:46 - 00000000 ____D C:\Users\Admin
2017-06-05 18:43 - 2017-06-05 18:43 - 00001409 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-05 18:43 - 2017-06-05 18:43 - 00000020 ___SH C:\Users\Admin\ntuser.ini
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 _SHDL C:\Users\Admin\My Documents
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 _SHDL C:\Users\Admin\Documents\My Videos
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 _SHDL C:\Users\Admin\Documents\My Pictures
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 _SHDL C:\Users\Admin\Documents\My Music
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Adobe
2017-06-05 18:43 - 2017-06-05 18:43 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2017-06-05 18:43 - 2017-03-04 13:04 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Macromedia
2017-06-05 18:43 - 2010-11-21 09:16 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Media Center Programs
2017-06-05 10:32 - 2017-06-05 18:54 - 00000000 ____D C:\Users\Krzyzu\Desktop\pliki telefon
2017-05-31 03:22 - 2017-05-31 03:27 - 00158368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.149619409507602
2017-05-31 03:20 - 2017-06-01 00:22 - 00000000 ____D C:\ProgramData\AVAST Software
2017-05-31 03:18 - 2017-05-31 03:18 - 00001102 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2017-05-31 03:18 - 2017-05-31 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2017-05-31 03:16 - 2017-05-31 03:16 - 13677800 _____ (Google) C:\Users\Krzyzu\Downloads\picasa39-setup.exe
2017-05-31 03:15 - 2017-05-31 03:16 - 01263726 _____ ( ) C:\Users\Krzyzu\Downloads\Picasa-12733-AsystentPobierania_0403324284.exe
2017-05-31 03:14 - 2017-05-31 09:24 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-05-31 03:14 - 2017-05-31 03:14 - 21025552 _____ (Mooii) C:\Users\Krzyzu\Downloads\Setup_PhotoScapeSetup_V3.7.exe
2017-05-31 03:14 - 2017-05-31 03:14 - 01263726 _____ ( ) C:\Users\Krzyzu\Downloads\Photoscape-12505-AsystentPobierania_2898614393.exe
2017-05-31 03:14 - 2017-05-31 03:14 - 00000000 ____D C:\ProgramData\McAfee
2017-05-31 03:12 - 2017-05-31 03:12 - 00677194 _____ C:\Users\Krzyzu\Downloads\Gmail.zip
2017-05-31 03:12 - 2017-05-31 03:12 - 00000000 ____D C:\Users\Krzyzu\Downloads\Gmail
2017-05-30 14:24 - 2017-06-02 15:14 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\foobar2000
2017-05-30 14:24 - 2017-05-30 14:24 - 00001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2017-05-30 14:24 - 2017-05-30 14:24 - 00001027 _____ C:\Users\Public\Desktop\foobar2000.lnk
2017-05-30 14:24 - 2017-05-30 14:24 - 00000000 ____D C:\Program Files (x86)\foobar2000
2017-05-30 14:21 - 2017-05-30 14:21 - 03958951 _____ (foobar2000.org) C:\Users\Krzyzu\Downloads\foobar2000_v1.3.15.exe
2017-05-25 18:22 - 2017-05-25 18:35 - 00000000 ____D C:\Users\Krzyzu\Desktop\Wycieczka biegowa 25.05.2017
2017-05-17 00:25 - 2017-05-17 00:25 - 01112320 _____ C:\Users\Krzyzu\Downloads\video-1494952868.mp4
2017-05-12 21:35 - 2017-05-31 03:36 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-12 21:35 - 2017-05-31 03:36 - 00000000 ____D C:\ProgramData\Skype
2017-05-12 21:35 - 2017-05-13 00:13 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\Skype
2017-05-12 21:35 - 2017-05-12 21:35 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-05-12 21:35 - 2017-05-12 21:35 - 00000000 ____D C:\Users\Krzyzu\Tracing
2017-05-12 21:35 - 2017-05-12 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-12 21:31 - 2017-05-12 21:31 - 00000000 ____D C:\Users\Krzyzu\.TeamSpeak 3
2017-05-12 21:30 - 2017-05-12 21:35 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\TS3Client
2017-05-12 21:29 - 2017-05-12 21:29 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2017-05-12 21:29 - 2017-05-12 21:29 - 00000929 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-05-12 21:29 - 2017-05-12 21:29 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-05-12 21:25 - 2017-05-12 21:28 - 77604984 _____ (TeamSpeak Systems GmbH) C:\Users\Krzyzu\Downloads\TeamSpeak3-Client-win64-3.1.4.exe
2017-05-09 20:25 - 2017-05-09 20:25 - 01631712 _____ (Skype Technologies S.A.) C:\Users\Krzyzu\Downloads\SkypeSetup.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-06 21:28 - 2017-03-04 16:14 - 00000000 ____D C:\AMD
2017-06-06 21:14 - 2009-07-14 06:45 - 00028320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-06 21:14 - 2009-07-14 06:45 - 00028320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-06 21:10 - 2017-03-04 16:15 - 00000000 ____D C:\Program Files\AMD
2017-06-06 21:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-06 21:04 - 2017-03-04 16:48 - 00000000 ____D C:\ProgramData\AMD
2017-06-06 21:04 - 2017-03-04 16:46 - 00000000 ____D C:\Program Files (x86)\AMD
2017-06-06 21:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-06 21:00 - 2017-03-04 17:00 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2017-06-06 12:41 - 2017-03-16 12:07 - 00000000 ____D C:\Users\Krzyzu\AppData\Local\Spotify
2017-06-06 11:55 - 2017-03-16 12:00 - 00000000 ____D C:\Users\Krzyzu\AppData\Roaming\Spotify
2017-06-06 10:47 - 2017-03-03 00:55 - 00000000 ____D C:\Users\Krzyzu
2017-06-06 10:46 - 2017-03-04 16:44 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-06 10:35 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2017-06-05 18:46 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicyUsers
2017-06-05 18:46 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-05-31 03:18 - 2017-03-03 17:15 - 00000000 ____D C:\Users\Krzyzu\AppData\Local\Google
2017-05-31 03:18 - 2017-03-03 17:15 - 00000000 ____D C:\Program Files (x86)\Google
2017-05-30 09:59 - 2017-03-03 17:31 - 00000000 ____D C:\ProgramData\Avg
2017-05-26 09:15 - 2009-07-14 07:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-17 00:19 - 2017-03-03 17:17 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-17 00:19 - 2017-03-03 17:17 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-09 15:47 - 2017-03-04 12:48 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-05-09 15:47 - 2017-03-04 12:48 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-09 15:47 - 2017-03-04 12:48 - 00004446 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-05-09 15:47 - 2017-03-04 12:48 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-05-09 15:47 - 2017-03-04 12:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-05-09 15:47 - 2017-03-04 12:47 - 00000000 ____D C:\Windows\system32\Macromed

Some files in TEMP:
====================
2017-05-12 21:45 - 2017-05-12 21:45 - 1118360 _____ (© 2015 Microsoft Corporation) C:\Users\Krzyzu\AppData\Local\Temp\BSvcProcessor.exe
2017-05-12 21:45 - 2017-05-12 21:45 - 0170128 _____ (© 2015 Microsoft Corporation) C:\Users\Krzyzu\AppData\Local\Temp\BSvcUpdater.exe
2017-03-04 16:52 - 2017-03-04 16:55 - 90906712 _____ () C:\Users\Krzyzu\AppData\Local\Temp\playstv_patch.exe
2017-03-04 16:50 - 2017-03-04 16:51 - 59432328 _____ () C:\Users\Krzyzu\AppData\Local\Temp\raptrpatch.exe
2017-03-04 16:50 - 2017-03-04 16:50 - 0221632 _____ () C:\Users\Krzyzu\AppData\Local\Temp\raptr_stub.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-06 18:36

==================== End of FRST.txt ============================