Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 31-07-2017
Uruchomiony przez krzysiek (administrator)  GAMINGPC (05-08-2017 17:54:52)
Uruchomiony z C:\Users\krzysiek\Downloads
Załadowane profile: krzysiek (Dostępne profile: krzysiek)
Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [GalaxyClient] => D:\Wiedzmin\GalaxyClient\GalaxyClient.exe [4876864 2017-04-28] (GOG.com)
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [screenSHU] => C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [screenshooter] => C:\Program Files (x86)\ScreenShooter\screenshooter.exe [606208 2010-09-03] ()
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [GG] => C:\Users\krzysiek\AppData\Local\GG\Application\gghub.exe [4078144 2016-07-04] (GG Network S.A.)
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\MountPoints2: {3c0bdf9e-165a-11e5-8291-7824af9ce68a} - "G:\Startme.exe" 
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\MountPoints2: {8f1d021e-cf0c-11e4-827a-7824af9ce68a} - "G:\Startme.exe" 
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\MountPoints2: {b98eab38-2296-11e6-82f4-7824af9ce68a} - "H:\setup.exe" 
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\...\MountPoints2: {ce196fd5-8448-11e5-82c3-7824af9ce68a} - "H:\setup.exe" 
Startup: C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar39.lnk [2017-08-05]
ShortcutTarget: Sidebar39.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 94.75.115.221
Tcpip\..\Interfaces\{BD83AC88-305B-4071-86F4-71263CA6FB71}: [DhcpNameServer] 8.8.8.8 94.75.115.221

Internet Explorer:
==================
HKU\S-1-5-21-1981851526-225882999-3007349896-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-13] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\krzysiek\AppData\Roaming\Mozilla\Firefox\Profiles\hj3zn56m.default-1486827521832 [2017-08-05]
FF Extension: (MEGA) - C:\Users\krzysiek\AppData\Roaming\Mozilla\Firefox\Profiles\hj3zn56m.default-1486827521832\Extensions\firefox@mega.co.nz.xpi [2017-07-28]
FF Extension: (Gladiatus Crazy Add On) - C:\Users\krzysiek\AppData\Roaming\Mozilla\Firefox\Profiles\hj3zn56m.default-1486827521832\Extensions\{b4badc0e-93d6-4083-b7e7-b66308c99f10}.xpi [2017-07-19]
FF Extension: (Adblock Plus) - C:\Users\krzysiek\AppData\Roaming\Mozilla\Firefox\Profiles\hj3zn56m.default-1486827521832\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-07]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-11] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-11] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-19] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-19] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR StartupUrls: Profile 1 -> "hxxp://www.google.com/"
CHR Profile: C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-08-05]
CHR Extension: (Dysk Google) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-22]
CHR Extension: (Google Search) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-15]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-11]
CHR Extension: (Gmail) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-15]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-05-07] ()
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 GalaxyClientService; D:\Wiedzmin\GalaxyClient\GalaxyClientService.exe [512576 2017-04-28] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7942208 2017-04-28] (GOG.com)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3844640 2015-11-22] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-07-19] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-07-19] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-19] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-19] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168208 2017-07-11] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148184 2017-07-11] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-07-28] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
S3 NvStreamNetworkSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" [X]
S2 NvStreamSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-11-08] (Disc Soft Ltd)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-19] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [46016 2017-07-19] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48064 2017-07-19] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-07-19] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-08-02] (Duplex Secure Ltd.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-08-05 16:38 - 2017-08-05 16:38 - 000058626 _____ C:\Users\krzysiek\Downloads\Shortcut.txt
2017-08-05 16:32 - 2017-08-05 16:38 - 000047356 _____ C:\Users\krzysiek\Downloads\Addition.txt
2017-08-05 16:31 - 2017-08-05 17:54 - 000016123 _____ C:\Users\krzysiek\Downloads\FRST.txt
2017-08-05 16:31 - 2017-08-05 17:54 - 000000000 ____D C:\FRST
2017-08-05 16:30 - 2017-08-05 16:32 - 000000000 ____D C:\Users\krzysiek\Desktop\s2.Nebris_2017
2017-08-05 16:30 - 2017-08-05 16:30 - 002381312 _____ (Farbar) C:\Users\krzysiek\Downloads\FRST64.exe
2017-08-05 16:26 - 2017-08-05 16:28 - 1273716662 _____ C:\Users\krzysiek\Downloads\s2.Nebris_2017.rar
2017-08-04 18:17 - 2017-08-04 18:17 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 18:17 - 2017-08-04 18:17 - 000003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 18:17 - 2017-08-04 18:17 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 18:17 - 2017-08-04 18:17 - 000001428 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-08-04 18:17 - 2017-08-04 18:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-08-04 18:17 - 2017-07-19 02:37 - 001903040 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-08-04 18:17 - 2017-07-19 02:37 - 001755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-08-04 18:17 - 2017-07-19 02:37 - 001489344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-08-04 18:17 - 2017-07-19 02:37 - 001317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-08-04 18:17 - 2017-07-19 02:37 - 000121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-08-04 18:17 - 2017-07-19 02:37 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-08-04 18:16 - 2017-07-19 02:37 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2017-08-04 18:16 - 2017-07-19 00:38 - 000135800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-08-04 18:15 - 2017-08-04 18:17 - 000000000 ____D C:\Windows\LastGood
2017-08-04 18:14 - 2017-07-19 02:37 - 040239736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 035803256 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 035314296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 028928120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 018704048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 017808120 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 015482488 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-08-04 18:14 - 2017-07-19 02:37 - 014689632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 013655672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 012451608 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 012133112 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 011591392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 010487760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 009982968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 003803768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 003691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 003359168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438494.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 001615448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438494.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 001067640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 001005176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000972920 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000895968 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000689992 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000512856 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000499320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000491536 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000429920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000218712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-08-04 18:14 - 2017-07-19 02:37 - 000179136 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000171384 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000154208 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000149224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000124536 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-08-04 18:14 - 2017-07-19 02:37 - 000048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-08-04 18:14 - 2017-07-19 02:37 - 000046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2017-08-04 18:14 - 2017-07-19 02:37 - 000045976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-08-04 18:14 - 2017-07-19 02:37 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-08-04 18:14 - 2017-07-19 02:37 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2017-08-04 18:02 - 2017-08-04 18:02 - 000000000 ____D C:\NVIDIA
2017-08-04 18:01 - 2017-08-04 18:01 - 412501456 _____ (NVIDIA Corporation) C:\Users\krzysiek\Downloads\384.94-desktop-win8-win7-64bit-international-whql.exe
2017-08-04 17:55 - 2017-08-04 18:17 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 17:55 - 2017-08-04 18:17 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 17:55 - 2017-08-04 18:17 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 17:55 - 2017-08-04 18:17 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 17:55 - 2017-08-04 18:17 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-04 17:54 - 2017-08-04 17:55 - 089914048 _____ (NVIDIA Corporation) C:\Users\krzysiek\Downloads\GeForce_Experience_v3.8.0.89.exe
2017-08-04 15:16 - 2017-08-04 15:16 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\MK10
2017-08-04 12:49 - 2017-08-04 12:49 - 000099918 _____ C:\Users\krzysiek\Downloads\Mortal.Kombat.XL-PLAZA-[rarbg.to].torrent
2017-08-03 09:44 - 2017-08-04 17:55 - 000000000 ____D C:\Windows\LastGood.Tmp
2017-08-03 08:57 - 2017-08-03 09:03 - 717536622 _____ C:\Users\krzysiek\Desktop\shaolin.mp4
2017-08-03 08:56 - 2017-08-03 09:00 - 535978475 _____ C:\Users\krzysiek\Desktop\ip man narodzenie legendy.mp4
2017-08-03 08:54 - 2017-08-03 08:58 - 539486552 _____ C:\Users\krzysiek\Desktop\Kolekcjoner.mp4
2017-07-28 14:28 - 2017-07-28 14:28 - 000186541 _____ C:\Users\krzysiek\Desktop\samotna.mp4
2017-07-28 14:12 - 2017-07-28 14:12 - 000129044 _____ C:\Users\krzysiek\Downloads\Mafia.III.Sign.of.the.Times-RELOADED-[rarbg.to].torrent
2017-07-25 14:14 - 2017-07-25 14:20 - 1614897401 _____ C:\Users\krzysiek\Desktop\vesteris_060617.zip
2017-07-24 11:08 - 2017-07-24 11:08 - 000185808 _____ C:\Users\krzysiek\Downloads\despasito.mp4
2017-07-22 15:22 - 2017-08-05 16:26 - 000000114 _____ C:\Users\krzysiek\Desktop\gladaitus staty.txt
2017-07-21 20:49 - 2017-07-21 20:49 - 000127813 _____ C:\Users\krzysiek\Downloads\ZZSeries.16.06.11.Bridgette.B.And.Abigail.Mac.Pussy.O.Plomo.Part.2.XXX.1080p.MP4-KTR-[rarbg.to].torrent
2017-07-21 20:47 - 2017-07-21 20:47 - 000120533 _____ C:\Users\krzysiek\Downloads\ZZSeries.17.05.19.Abigail.Mac.Katrina.Jade.And.Kimmy.Granger.Power.Bangers.A.XXX.Parody.Part.5.XXX.1080p.MP4-KTR-[rarbg.to].torrent
2017-07-18 12:59 - 2017-07-18 13:01 - 000000138 _____ C:\Users\krzysiek\Desktop\kalorie.txt
2017-07-17 11:03 - 2017-07-17 11:03 - 000364094 _____ C:\Users\krzysiek\Downloads\cv-krzysztof-galek (1).pdf
2017-07-14 17:10 - 2017-07-14 17:10 - 000000282 _____ C:\Users\krzysiek\AppData\Roaming\GPU MeterV2_Settings.ini
2017-07-13 18:05 - 2017-07-13 18:05 - 000018835 _____ C:\Users\krzysiek\Downloads\Microsoft Windows 10 1607 Oct 2016 (x64) FULL [TechTools]-[rarbg.to].torrent
2017-07-13 18:04 - 2017-07-13 22:03 - 000001908 _____ C:\Windows\diagwrn.xml
2017-07-13 18:04 - 2017-07-13 22:03 - 000001908 _____ C:\Windows\diagerr.xml
2017-07-13 18:04 - 2017-07-13 18:04 - 018357776 _____ (Microsoft Corporation) C:\Users\krzysiek\Downloads\MediaCreationTool.exe
2017-07-13 18:04 - 2017-07-13 18:04 - 000000000 ___HD C:\$Windows.~WS
2017-07-13 18:04 - 2017-07-13 18:04 - 000000000 ____D C:\Windows\Panther
2017-07-13 14:57 - 2017-07-13 14:57 - 000255392 _____ C:\Users\krzysiek\Downloads\Forza.Horizon.3-FULL.UNLOCKED(1).torrent
2017-07-13 14:08 - 2017-07-19 15:12 - 000000000 ____D C:\Users\krzysiek\Desktop\Samia.pl
2017-07-13 13:09 - 2017-07-13 13:09 - 009747512 _____ (Piriform Ltd) C:\Users\krzysiek\Downloads\ccsetup532.exe
2017-07-13 13:09 - 2017-07-13 13:09 - 000000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-07-13 12:53 - 2017-07-13 13:05 - 1265211503 _____ C:\Users\krzysiek\Downloads\Samia.pl.7z
2017-07-13 12:20 - 2017-07-13 12:20 - 001089606 _____ C:\Users\krzysiek\Downloads\GladiatusCrazyAddOnV3.2.8(1).crx
2017-07-13 09:05 - 2017-07-13 09:05 - 001089606 _____ C:\Users\krzysiek\Downloads\GladiatusCrazyAddOnV3.2.8.crx
2017-07-12 18:11 - 2017-06-29 08:27 - 025734656 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-12 18:11 - 2017-06-29 08:02 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-12 18:11 - 2017-06-29 07:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-07-12 18:11 - 2017-06-29 07:44 - 005975552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-12 18:11 - 2017-06-29 07:23 - 020270592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-07-12 18:11 - 2017-06-29 07:23 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-07-12 18:11 - 2017-06-29 07:17 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-07-12 18:11 - 2017-06-29 07:13 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-07-12 18:11 - 2017-06-29 07:09 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-12 18:11 - 2017-06-29 06:58 - 015253504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-12 18:11 - 2017-06-29 06:53 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-12 18:11 - 2017-06-29 06:52 - 004549632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-07-12 18:11 - 2017-06-29 06:51 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-07-12 18:11 - 2017-06-29 06:47 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-07-12 18:11 - 2017-06-29 06:43 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-07-12 18:11 - 2017-06-29 06:41 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-12 18:11 - 2017-06-29 06:29 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-07-12 18:11 - 2017-06-29 06:28 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-07-12 18:11 - 2017-06-29 06:24 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-07-12 18:11 - 2017-06-29 06:23 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-07-12 18:11 - 2017-06-27 16:29 - 007796736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-07-12 18:11 - 2017-06-27 16:29 - 007077376 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2017-07-12 18:11 - 2017-06-27 16:26 - 005274112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2017-07-12 18:11 - 2017-06-27 16:26 - 005268992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-07-12 18:11 - 2017-06-22 16:22 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-07-12 18:11 - 2017-06-17 18:45 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-12 18:11 - 2017-06-17 18:34 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-12 18:11 - 2017-06-17 18:11 - 002551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-12 18:11 - 2017-06-17 18:05 - 001920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-12 18:11 - 2017-06-16 00:02 - 000990040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-12 18:11 - 2017-06-15 15:45 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-12 18:11 - 2017-06-15 15:45 - 001674520 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-07-12 18:11 - 2017-06-15 15:45 - 001534064 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-07-12 18:11 - 2017-06-15 15:45 - 001499920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-07-12 18:11 - 2017-06-15 15:45 - 001370320 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-07-12 18:11 - 2017-06-15 15:45 - 000086360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-07-12 18:11 - 2017-06-12 02:06 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-07-12 18:11 - 2017-06-12 00:21 - 000590848 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-07-12 18:11 - 2017-06-11 23:43 - 000371200 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-12 18:11 - 2017-06-11 23:25 - 000478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2017-07-12 18:11 - 2017-06-11 23:15 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-12 18:11 - 2017-06-11 23:08 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-12 18:11 - 2017-06-11 23:07 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2017-07-12 18:11 - 2017-06-11 23:00 - 000962560 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-12 18:11 - 2017-06-11 22:58 - 000334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-12 18:11 - 2017-06-11 22:40 - 001323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-12 18:11 - 2017-06-11 22:35 - 000325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-12 18:11 - 2017-06-11 22:31 - 000781312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-12 18:11 - 2017-06-11 17:15 - 002013528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-12 18:11 - 2017-06-06 22:52 - 003120640 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-12 18:11 - 2017-06-06 22:42 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2017-07-12 18:11 - 2017-06-06 22:38 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
2017-07-12 18:11 - 2017-06-06 22:36 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
2017-07-12 18:11 - 2017-06-06 22:36 - 000020992 _____ (Microsoft Corporation) C:\Windows\system32\convert.exe
2017-07-12 18:11 - 2017-06-06 22:35 - 000517120 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-07-12 18:11 - 2017-06-06 21:13 - 000177664 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll
2017-07-12 18:11 - 2017-06-06 21:11 - 000557568 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2017-07-12 18:11 - 2017-06-06 21:11 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2017-07-12 18:11 - 2017-06-06 21:11 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
2017-07-12 18:11 - 2017-06-06 21:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
2017-07-12 18:11 - 2017-06-06 21:08 - 002712576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-12 18:11 - 2017-06-06 21:03 - 000837632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2017-07-12 18:11 - 2017-06-06 20:59 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cnvfat.dll
2017-07-12 18:11 - 2017-06-06 20:57 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uudf.dll
2017-07-12 18:11 - 2017-06-06 20:56 - 000375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-07-12 18:11 - 2017-06-06 20:03 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ulib.dll
2017-07-12 18:11 - 2017-06-06 20:02 - 000513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2017-07-12 18:11 - 2017-06-06 20:02 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
2017-07-12 18:11 - 2017-06-06 20:02 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ufat.dll
2017-07-12 18:11 - 2017-06-06 20:02 - 000074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uexfat.dll
2017-07-12 18:11 - 2017-06-03 18:27 - 002346496 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-07-12 18:11 - 2017-06-03 18:03 - 001549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-07-12 18:11 - 2017-05-31 23:20 - 000470360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-12 18:11 - 2017-05-16 00:09 - 000057688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-07-12 18:11 - 2017-05-15 22:03 - 000379744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-07-12 18:11 - 2017-05-09 16:37 - 000658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2017-07-12 18:11 - 2017-05-09 16:35 - 000555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2017-07-12 18:11 - 2017-05-09 16:29 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2017-07-12 18:11 - 2017-05-09 16:29 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-07-12 18:11 - 2017-05-09 16:28 - 000193024 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2017-07-12 18:11 - 2017-05-09 16:28 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2017-07-12 18:11 - 2017-05-09 16:12 - 000448576 _____ C:\Windows\system32\ApnDatabase.xml
2017-07-12 18:11 - 2017-05-06 18:45 - 001114624 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2017-07-12 18:11 - 2017-05-06 18:41 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2017-07-12 18:11 - 2017-05-02 22:09 - 000686592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-07-12 18:11 - 2017-05-02 22:08 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-07-12 18:11 - 2017-05-02 22:08 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-07-12 18:11 - 2017-05-02 20:41 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2017-07-12 18:11 - 2017-05-02 20:31 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2017-07-12 18:11 - 2017-05-02 20:31 - 000207360 _____ (Microsoft Corporation) C:\Windows\system32\smbwmiv2.dll
2017-07-12 18:11 - 2017-05-02 19:35 - 000031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2017-07-12 18:11 - 2017-04-30 18:48 - 000080078 _____ C:\Windows\system32\normidna.nls
2017-07-12 18:11 - 2017-04-28 03:13 - 001292288 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-07-12 18:11 - 2017-04-28 03:11 - 001060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-07-12 18:10 - 2017-05-04 01:11 - 000103600 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-07-12 18:10 - 2017-05-03 15:43 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 001206272 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000620544 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000311296 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-07-12 18:10 - 2017-05-03 15:43 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-07-11 20:32 - 2017-07-12 17:58 - 000000000 ____D C:\Users\krzysiek\Documents\FIFA 16
2017-07-11 20:29 - 2017-07-11 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16
2017-07-11 20:05 - 2017-07-11 20:05 - 000001005 _____ C:\Users\Public\Desktop\Origin.lnk
2017-07-11 20:03 - 2017-07-11 20:07 - 000000000 ____D C:\Users\krzysiek\AppData\Local\Origin
2017-07-11 20:03 - 2017-07-11 20:03 - 054864456 _____ (Electronic Arts) C:\Users\krzysiek\Downloads\OriginThinSetup.exe
2017-07-09 21:00 - 2017-07-09 21:00 - 000255392 _____ C:\Users\krzysiek\Downloads\Forza.Horizon.3-FULL.UNLOCKED.torrent
2017-07-09 11:07 - 2017-07-09 11:07 - 001772036 _____ C:\Users\krzysiek\Downloads\1499561129643.webm

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-08-05 16:10 - 2016-11-19 09:33 - 000000000 ____D C:\Users\krzysiek\AppData\LocalLow\Mozilla
2017-08-05 09:00 - 2014-12-31 21:51 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1981851526-225882999-3007349896-1001
2017-08-05 08:55 - 2014-12-30 04:57 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-04 18:20 - 2014-12-30 04:37 - 001828496 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-04 18:20 - 2013-08-23 01:12 - 000806956 _____ C:\Windows\system32\perfh015.dat
2017-08-04 18:20 - 2013-08-23 01:12 - 000163808 _____ C:\Windows\system32\perfc015.dat
2017-08-04 18:20 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-08-04 18:18 - 2014-12-31 21:46 - 000000000 ____D C:\Users\krzysiek\AppData\Local\NVIDIA Corporation
2017-08-04 18:18 - 2014-12-30 04:57 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-04 18:17 - 2014-12-31 21:46 - 000000000 ____D C:\Users\krzysiek\AppData\Local\NVIDIA
2017-08-04 18:17 - 2014-12-30 04:57 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-04 18:17 - 2014-12-30 04:56 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-04 18:11 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-04 17:54 - 2015-01-19 14:24 - 000000000 ____D C:\Users\krzysiek\AppData\Local\CrashDumps
2017-08-04 14:40 - 2015-01-03 14:40 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\uTorrent
2017-08-03 09:44 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\ModemLogs
2017-08-02 08:00 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-07-31 23:00 - 2014-12-31 21:46 - 000000000 ____D C:\Users\krzysiek
2017-07-31 18:04 - 2015-06-08 16:44 - 000000000 ____D C:\Users\krzysiek\Documents\The Witcher 3
2017-07-26 18:41 - 2015-06-25 16:29 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-25 20:33 - 2015-11-15 17:06 - 000000000 ____D C:\Users\krzysiek\Desktop\Vesteris Client
2017-07-25 16:44 - 2014-12-31 17:30 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\AIMP3
2017-07-25 12:42 - 2015-09-19 13:45 - 000000000 ____D C:\Users\krzysiek\AppData\Local\screenSHU
2017-07-24 15:56 - 2016-07-28 17:19 - 000000000 ____D C:\Users\krzysiek\Desktop\Paris
2017-07-20 09:52 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-07-19 02:37 - 2014-12-30 04:57 - 000512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-07-19 02:37 - 2014-12-30 04:57 - 000418752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2017-07-19 02:37 - 2014-12-30 04:56 - 021403904 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-07-19 02:37 - 2014-12-30 04:56 - 004187336 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-07-19 02:37 - 2014-12-30 04:56 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2017-07-19 02:37 - 2014-12-30 04:56 - 000044200 _____ C:\Windows\system32\nvinfo.pb
2017-07-19 01:24 - 2016-05-28 09:06 - 000549312 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-07-19 01:24 - 2016-05-28 09:06 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-07-19 01:24 - 2014-12-30 04:57 - 006463608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-07-19 01:24 - 2014-12-30 04:57 - 002479040 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-07-19 01:24 - 2014-12-30 04:57 - 001762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-07-19 01:24 - 2014-12-30 04:57 - 000392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-07-19 01:24 - 2014-12-30 04:57 - 000069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-07-17 13:39 - 2015-04-06 17:35 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\GG
2017-07-13 21:28 - 2013-08-22 16:44 - 000513448 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-13 21:23 - 2015-01-02 21:48 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-13 21:21 - 2014-12-31 18:02 - 000000000 ____D C:\Windows\system32\MRT
2017-07-13 21:18 - 2014-12-31 18:01 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-07-13 21:17 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-07-13 18:17 - 2015-01-06 19:12 - 000000000 ____D C:\Users\krzysiek\AppData\Local\Ubisoft Game Launcher
2017-07-13 18:17 - 2015-01-04 16:18 - 000000000 ____D C:\Program Files (x86)\Steam
2017-07-13 15:55 - 2014-12-31 16:44 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\Origin
2017-07-13 15:54 - 2014-12-31 16:40 - 000000000 ____D C:\ProgramData\Origin
2017-07-13 15:35 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-07-13 14:44 - 2017-04-18 19:47 - 000000000 ____D C:\Users\krzysiek\Documents\Assassin's Creed Unity
2017-07-13 13:11 - 2015-11-08 12:15 - 000000000 ____D C:\Users\krzysiek\AppData\Roaming\DAEMON Tools Lite
2017-07-13 03:37 - 2014-12-30 04:57 - 008095171 _____ C:\Windows\system32\nvcoproc.bin
2017-07-12 17:58 - 2015-12-27 19:11 - 000000000 ____D C:\Users\krzysiek\Documents\FIFA 11
2017-07-11 20:29 - 2014-12-31 16:58 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-11 20:05 - 2014-12-31 16:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-07-11 20:05 - 2014-12-31 16:40 - 000000000 ____D C:\Program Files (x86)\Origin
2017-07-11 19:36 - 2014-12-31 17:50 - 000004388 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-07-11 19:36 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-07-11 19:36 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed

==================== Pliki w katalogu głównym wybranych folderów =======

2017-01-06 18:43 - 2017-01-06 18:43 - 000000624 _____ () C:\Users\krzysiek\AppData\Roaming\All CPU MeterV3_Settings.ini
2017-07-14 17:10 - 2017-07-14 17:10 - 000000282 _____ () C:\Users\krzysiek\AppData\Roaming\GPU MeterV2_Settings.ini
2017-01-27 21:47 - 2017-01-27 21:47 - 000002888 _____ () C:\Users\krzysiek\AppData\Local\recently-used.xbel
2015-01-02 20:38 - 2015-07-03 20:27 - 000007597 _____ () C:\Users\krzysiek\AppData\Local\Resmon.ResmonCfg
2014-12-30 04:40 - 2014-12-30 04:40 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
2016-05-28 09:06 - 2016-05-20 03:45 - 000845552 _____ (NVIDIA Corporation) C:\Users\krzysiek\AppData\Local\Temp\nvSCPAPI64.dll
2017-08-04 18:15 - 2016-05-20 03:45 - 000326712 _____ (NVIDIA Corporation) C:\Users\krzysiek\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-05-15 16:52

==================== Koniec  FRST.txt ============================