Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 16-11-2017 Uruchomiony przez Profil (administrator) STACJONARNY (16-11-2017 19:26:25) Uruchomiony z C:\Users\Profil\Desktop Załadowane profile: Profil (Dostępne profile: Admin & Profil & Damian) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe (Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe (Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NahimicMonitor.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (MSI) C:\Windows\SysWOW64\muachost.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe (Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cfp.exe () C:\Program Files (x86)\uTorrent\utorrent.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [9454920 2011-12-21] (COMODO) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2472048 2010-08-11] (VIA) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2010-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-09-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation) HKU\S-1-5-21-3295605243-3104791100-1276282624-1001\...\Run: [µTorrent] => C:\Program Files (x86)\uTorrent\utorrent.exe [174163 2006-07-02] () HKU\S-1-5-21-3295605243-3104791100-1276282624-1001\...\MountPoints2: {14342d5f-13b7-11e7-a397-14dae93af129} - F:\HiSuiteDownLoader.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-10-01] (Microsoft Corporation) AppInit_DLLs: C:\Windows\system32\guard64.dll => C:\Windows\system32\guard64.dll [389840 2011-12-19] (COMODO) AppInit_DLLs-x32: C:\Windows\SysWOW64\guard32.dll => C:\Windows\SysWOW64\guard32.dll [301224 2011-12-19] (COMODO) Lsa: [Notification Packages] scecli "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter" Startup: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2017-07-02] ShortcutTarget: Telegram.lnk -> C:\Users\Profil\AppData\Roaming\Telegram Desktop\Telegram.exe (Brak pliku) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 109.196.145.10 109.196.152.60 Tcpip\..\Interfaces\{3F20D92E-12AF-4FC5-A5CB-67E532FBC373}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{AC8FCEC8-BA9A-4866-9667-66847E4717F3}: [DhcpNameServer] 109.196.145.10 109.196.152.60 Internet Explorer: ================== BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-30] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-30] (Oracle Corporation) BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22] (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security) Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security) Toolbar: HKU\S-1-5-21-3295605243-3104791100-1276282624-1001 -> True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security) DPF: HKLM-x32 {FD3BEB0C-AB43-4253-9146-C371D48FBE0D} hxxp://10.0.1.150/web.cab Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll Brak pliku FireFox: ======== FF ProfilePath: C:\Users\Profil\AppData\Roaming\Mozilla\Firefox\Profiles\qomc70q4.default [2017-11-14] FF SelectedSearchEngine: Mozilla\Firefox\Profiles\qomc70q4.default -> Allegro FF Extension: (Stylish - Custom themes for any website) - C:\Users\Profil\AppData\Roaming\Mozilla\Firefox\Profiles\qomc70q4.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2017-11-14] FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-30] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-30] (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Brak pliku] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-06] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-06] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default [2017-11-16] CHR Extension: (Dokumenty) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14] CHR Extension: (Dysk Google) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-05] CHR Extension: (YouTube) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-05] CHR Extension: (Adblock Plus) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-10-08] CHR Extension: (Arkusze) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14] CHR Extension: (Stylish - Custom themes for any website) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2017-08-17] CHR Extension: (Dokumenty Google offline) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-05] CHR Extension: (AdBlock) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-11-14] CHR Extension: (Morpheon Dark) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafbdhjdkjnoafhfelkjpchpaepjknad [2017-10-08] CHR Extension: (LINE) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde [2017-10-24] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22] CHR Extension: (Oddshot) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnoeeagkgpkplnhmnnlgodjnjgckhja [2017-11-10] CHR Extension: (Gmail) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-05] CHR Extension: (Chrome Media Router) - C:\Users\Profil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15] CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] () S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [369720 2017-09-05] (BlueStack Systems, Inc.) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2779416 2011-12-19] (COMODO) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [392480 2017-02-06] (EasyAntiCheat Ltd) R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [47056 2017-01-12] (Micro-Star Int'l Co., Ltd.) R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2019792 2016-10-13] (Micro-Star INT'L CO., LTD.) R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [132048 2016-10-07] (Micro-Star INT'L CO., LTD.) R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [77752 2016-12-23] (Micro-Star INT'L CO., LTD.) R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2237392 2016-11-10] (Micro-Star INT'L CO., LTD.) R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-02-18] (Nero AG) S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [7987104 2017-04-10] (INCA Internet Co., Ltd.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-06] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-09-19] (NVIDIA Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1451336 2017-10-23] (Overwolf LTD) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Brak podpisu cyfrowego] S4 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.) S4 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.) S4 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-06-21] (Bluestack System Inc. ) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [577824 2011-12-19] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [43248 2011-12-19] (COMODO) S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-06-04] (Disc Soft Ltd) S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-06-04] (Disc Soft Ltd) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.) R3 I2cHkBurn; C:\Windows\System32\drivers\I2cHkBurn.sys [41760 2015-07-27] (FINTEK Corp.) R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [93200 2011-12-19] (COMODO) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-09-19] (NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [76840 2017-04-01] (NVIDIA Corporation) S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [131144 2017-04-28] (Oracle Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-16 19:26 - 2017-11-16 19:27 - 000018223 _____ C:\Users\Profil\Desktop\FRST.txt 2017-11-16 19:26 - 2017-11-16 19:26 - 000000000 ____D C:\Users\Profil\Desktop\FRST-OlderVersion 2017-11-15 19:51 - 2017-11-15 19:51 - 000000521 _____ C:\Users\Public\Desktop\Metin2.lnk 2017-11-15 19:51 - 2017-11-15 19:51 - 000000521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2.lnk 2017-11-15 19:48 - 2017-11-15 19:49 - 003217288 _____ (Gameforge 4D GmbH ) C:\Users\Profil\Downloads\metin2_installer.exe 2017-11-14 00:07 - 2017-11-14 00:07 - 000007023 _____ C:\Users\Profil\AppData\Local\recently-used.xbel 2017-11-13 20:43 - 2017-11-13 20:43 - 000001538 _____ C:\Users\Profil\Desktop\NexusClient.lnk 2017-11-13 20:42 - 2017-11-13 20:42 - 006441096 _____ (Black Tree Gaming ) C:\Users\Profil\Downloads\Nexus Mod Manager-0.63.14.exe 2017-11-12 14:04 - 2017-10-26 15:54 - 001267712 _____ C:\Users\Profil\Desktop\Bosomi.exe 2017-11-10 07:34 - 2017-11-10 18:02 - 000000000 ____D C:\Users\Damian\Desktop\zethape 2017-10-31 00:05 - 2017-10-31 00:05 - 007910645 _____ C:\Users\Profil\Downloads\2017-10-30_01-03-14.mov 2017-10-29 17:07 - 2017-10-29 17:07 - 000010874 _____ C:\Users\Damian\AppData\Local\recently-used.xbel 2017-10-29 05:42 - 2017-10-29 05:43 - 000000000 ____D C:\Users\Profil\Documents\Darkest 2017-10-28 18:54 - 2017-10-28 18:54 - 002111668 _____ C:\Users\Damian\Downloads\[hd] Meme Queen.mp4 2017-10-26 22:50 - 2017-10-26 22:50 - 000370029 _____ C:\Users\Profil\Downloads\Natalia z Piesełem.mp4 2017-10-20 06:55 - 2017-10-20 06:56 - 000353915 _____ C:\Users\Damian\Downloads\kordian.epub 2017-10-20 01:27 - 2017-10-20 01:28 - 292272520 _____ (Duodian Technology Co. Ltd.) C:\Users\Profil\Downloads\nox_setup_v5.2.0.0_full_intl.exe 2017-10-17 17:06 - 2017-10-17 17:06 - 000000000 ____D C:\Users\Damian\Documents\Nexus Mod Manager 2017-10-17 17:06 - 2017-10-17 17:06 - 000000000 ____D C:\Users\Damian\AppData\Local\Black_Tree_Gaming ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-11-16 19:27 - 2017-02-18 16:26 - 000000000 ____D C:\Users\Profil\AppData\Roaming\uTorrent 2017-11-16 19:26 - 2017-10-08 00:03 - 000000000 ____D C:\FRST 2017-11-16 19:26 - 2017-10-08 00:02 - 002392576 _____ (Farbar) C:\Users\Profil\Desktop\FRST64.exe 2017-11-16 19:04 - 2017-02-05 12:53 - 000000000 ____D C:\ProgramData\NVIDIA 2017-11-16 19:03 - 2009-07-14 05:45 - 000025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-11-16 19:03 - 2009-07-14 05:45 - 000025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-11-16 18:53 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-11-16 01:28 - 2017-02-05 20:49 - 000000000 ____D C:\Users\Profil\AppData\Roaming\TS3Client 2017-11-15 22:24 - 2017-02-05 14:46 - 000000000 ____D C:\Program Files (x86)\Steam 2017-11-15 20:29 - 2017-02-05 23:39 - 000000000 ____D C:\Users\Profil\AppData\Local\CrashDumps 2017-11-15 00:41 - 2017-02-06 00:12 - 000000000 ____D C:\Users\Profil\AppData\Local\screenSHU 2017-11-14 21:46 - 2017-06-08 18:52 - 000004582 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-11-14 21:46 - 2017-06-08 18:52 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-11-14 21:46 - 2017-02-05 13:55 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-11-14 21:46 - 2017-02-05 13:55 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-11-14 21:46 - 2017-02-05 13:55 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-11-14 21:46 - 2017-02-05 13:55 - 000000000 ____D C:\Windows\system32\Macromed 2017-11-14 20:24 - 2017-02-25 15:38 - 000000000 ____D C:\Users\Profil\AppData\Roaming\obs-studio 2017-11-14 01:27 - 2017-02-08 14:29 - 000000000 ____D C:\Users\Profil\AppData\Roaming\vlc 2017-11-14 00:38 - 2017-06-01 18:30 - 000000000 ____D C:\Users\Profil\AppData\LocalLow\Mozilla 2017-11-14 00:36 - 2017-02-22 21:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-11-14 00:09 - 2017-02-05 12:40 - 000002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-11-14 00:07 - 2017-03-25 23:57 - 000000000 ____D C:\Users\Profil\AppData\Local\gtk-2.0 2017-11-14 00:07 - 2017-03-25 23:56 - 000000000 ____D C:\Users\Profil\.gimp-2.8 2017-11-14 00:01 - 2017-02-05 12:40 - 000003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2017-11-14 00:01 - 2017-02-05 12:40 - 000003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2017-11-13 20:44 - 2017-02-06 17:58 - 000000000 ____D C:\Users\Profil\AppData\Local\Skyrim 2017-11-12 14:00 - 2017-04-23 19:47 - 000000000 ____D C:\Users\Profil\AppData\Local\EasyTundra 2017-11-12 11:56 - 2017-05-16 15:48 - 000000000 ____D C:\Users\Damian\AppData\Local\SHU 2017-11-12 11:14 - 2017-05-21 21:39 - 000000000 ____D C:\Users\Damian\AppData\Local\Spotify 2017-11-12 10:56 - 2017-05-21 21:38 - 000000000 ____D C:\Users\Damian\AppData\Roaming\Spotify 2017-11-12 10:29 - 2017-10-11 22:56 - 000000000 ____D C:\Users\Damian\Desktop\Quality memz 2017-11-12 10:27 - 2017-07-01 23:21 - 000000000 ____D C:\Users\Damian\AppData\Roaming\Telegram Desktop 2017-11-09 21:36 - 2017-07-28 21:36 - 000000000 ____D C:\Program Files (x86)\Overwolf 2017-11-09 18:10 - 2017-06-20 23:10 - 000000000 ____D C:\Users\Damian\AppData\LocalLow\Mozilla 2017-11-04 19:10 - 2017-04-14 18:24 - 000000000 ____D C:\Users\Profil\Documents\Assassin's Creed IV Black Flag 2017-11-04 16:07 - 2017-02-05 14:07 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2017-11-03 08:11 - 2009-07-14 18:55 - 000748426 _____ C:\Windows\system32\perfh015.dat 2017-11-03 08:11 - 2009-07-14 18:55 - 000159900 _____ C:\Windows\system32\perfc015.dat 2017-11-03 08:11 - 2009-07-14 06:13 - 001693172 _____ C:\Windows\system32\PerfStringBackup.INI 2017-11-03 08:11 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2017-10-30 01:51 - 2017-02-12 12:56 - 000000000 ____D C:\Users\Profil\AppData\Roaming\Audacity 2017-10-29 17:07 - 2017-05-16 21:50 - 000000000 ____D C:\Users\Damian\.gimp-2.8 2017-10-29 05:42 - 2017-02-05 13:29 - 000000000 ____D C:\Users\Profil\AppData\Local\NVIDIA 2017-10-29 03:50 - 2017-02-05 13:29 - 000000000 ____D C:\Users\Profil 2017-10-23 02:43 - 2017-09-08 02:16 - 000000000 ____D C:\ProgramData\BlueStacksSetup 2017-10-22 19:30 - 2017-10-07 13:37 - 000000000 ____D C:\Users\Damian\Documents\CePlusPlus 2017-10-20 22:18 - 2017-07-05 15:53 - 000000000 ____D C:\Users\Damian\Downloads\Telegram Desktop ==================== Pliki w katalogu głównym wybranych folderów ======= 2017-06-06 21:51 - 2017-06-06 22:03 - 000111226 _____ () C:\Program Files (x86)\CMS Setup Log.txt 2017-06-06 22:02 - 2017-06-06 22:02 - 000024021 _____ () C:\Program Files (x86)\CMS Uninstall Log.txt 2017-04-10 21:04 - 2017-04-10 21:04 - 000007452 _____ () C:\Program Files (x86)\Device Manager Setup Log.txt 2017-04-10 21:04 - 2017-06-06 21:52 - 000019626 _____ () C:\Program Files (x86)\DeviceManage Setup Log.txt 2017-06-27 21:26 - 2017-06-27 21:27 - 000010830 _____ () C:\Program Files (x86)\Player Setup Log.txt 2017-06-14 16:13 - 2017-06-18 21:59 - 000005120 _____ () C:\Users\Profil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-04-19 06:20 - 2017-04-19 06:20 - 000004096 ____H () C:\Users\Profil\AppData\Local\keyfile3.drm 2017-11-14 00:07 - 2017-11-14 00:07 - 000007023 _____ () C:\Users\Profil\AppData\Local\recently-used.xbel Niektóre pliki w TEMP: ==================== 2017-10-06 17:52 - 2017-09-16 18:17 - 000758472 _____ (NVIDIA Corporation) C:\Users\Profil\AppData\Local\Temp\nvSCPAPI.dll 2017-10-06 17:52 - 2017-09-16 18:17 - 000873320 _____ (NVIDIA Corporation) C:\Users\Profil\AppData\Local\Temp\nvSCPAPI64.dll 2017-10-10 01:06 - 2017-09-16 18:17 - 000368760 _____ (NVIDIA Corporation) C:\Users\Profil\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2017-11-09 16:26 ==================== Koniec FRST.txt ============================