Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
Ran by John (administrator) on JOHN-PC (18-09-2015 15:10:14)
Running from E:\Pobierane
Loaded Profiles: John (Available Profiles: John)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgcsrva.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgemca.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgrsa.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVG Technologies CZ, s.r.o.) F:\Program Files\AVG\AVG2015\avgui.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [AVG_UI] => F:\Program Files\AVG\AVG2015\avgui.exe [3775912 2015-08-24] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\RunOnce: [] => [X]
HKU\S-1-5-21-3246966307-621913710-3015266008-1000\...\Run: [Google Update] => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-23] (Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 ssl.bandisoft.com
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{C6774D46-9A1D-446B-873B-4FEB1278AE10}: [DhcpNameServer] 62.179.1.62 62.179.1.63

Internet Explorer:
==================
HKU\S-1-5-21-3246966307-621913710-3015266008-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> F:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7125y3tp.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-04-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3246966307-621913710-3015266008-1000: @tools.google.com/Google Update;version=3 -> C:\Users\John\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-3246966307-621913710-3015266008-1000: @tools.google.com/Google Update;version=9 -> C:\Users\John\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-04-22] (Microsoft Corporation)
FF Extension: FT DeepDark - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7125y3tp.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2015-09-04]
FF Extension: Speed Tweaks (SpeedyFox) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7125y3tp.default\Extensions\jid1-wZqm19rJzRkZUA@jetpack.xpi [2015-08-26]
FF Extension: Adblock Plus - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7125y3tp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-03]
StartMenuInternet: FIREFOX.EXE - D:\Program Files\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com","hxxp://mysearch.avg.com?cid={F507DF9C-2300-4343-8F43-355E81A3A4DA}&mid=Unknown&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-18 18:06:17&v=18.0.5.292&pid=safeguard&sg=&sap=hp","hxxp://www.google.com
hxxp://mysearch.avg.com?cid={F507DF9C-2300-4343-8F43-355E81A3A4DA}&mid=Unknown&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-18 18:06:17&v=18.0.5.292&pid=safeguard&sg=&sap=hp","hxxp://home.torchbrowser.com"
CHR DefaultSearchURL: Default -> hxxps://www.google.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> google
CHR Profile: C:\Users\John\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-23]
CHR Extension: (Dokumenty Google) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-23]
CHR Extension: (Dysk Google) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-23]
CHR Extension: (YouTube) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-23]
CHR Extension: (ImprovedTube - YouTube Extension) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnomihfieiccainjcjblhegjgglakjdd [2015-08-25]
CHR Extension: (Adblock Plus) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-24]
CHR Extension: (Google Search) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-23]
CHR Extension: (Instant Anatomy) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddjpnphbpjaknodefjdfbifojgbgpgfd [2015-09-12]
CHR Extension: (NoteBook) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnjfefmblfbbogahfknbbldhicijojcd [2015-08-24]
CHR Extension: (Brilliant) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\eommhbliilafdkodaijeejngbjiiaccl [2015-09-05]
CHR Extension: (Arkusze Google) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-23]
CHR Extension: (Web Timer) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnjbdfgigejghknieofeahaknkjafim [2015-08-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-05]
CHR Extension: (Google Calendar (by Google)) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2015-09-12]
CHR Extension: (Coggle) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcapocoafbfccjgdgammadkndakcfoi [2015-09-05]
CHR Extension: (Any.do Extension) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdadialhpiikehpdeejjeiikopddkjem [2015-09-12]
CHR Extension: (Yosemite) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldcmfdcmbmemodgapljjjceihmaljeii [2015-09-13]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2015-09-12]
CHR Extension: (TubeBuddy) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb [2015-08-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-23]
CHR Extension: (Evernote Web Clipper) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-08-24]
CHR Extension: (Gmail) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-23]
StartMenuInternet: Google Chrome.NGD3YGU5FZUNPZXIF55G4WFBEM - C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVGIDSAgent; F:\Program Files\AVG\AVG2015\avgidsagent.exe [3637160 2015-08-24] (AVG Technologies CZ, s.r.o.)
R2 avgwd; F:\Program Files\AVG\AVG2015\avgwdsvc.exe [335656 2015-08-24] (AVG Technologies CZ, s.r.o.)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 MBAMService; F:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 SkypeUpdate; F:\Program Files (x86)\Skype\Updater\Updater.exe [327296 2015-06-03] (Skype Technologies)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 WiseBootAssistant; F:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580144 2015-08-06] (WiseCleaner.com)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; C:\Windows\system32\ampa.sys [17008 2013-12-18] ()
S3 ampa; C:\Windows\SysWOW64\ampa.sys [17008 2013-12-18] ()
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [313264 2015-08-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [297904 2015-08-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [250800 2015-08-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [300464 2015-08-04] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2015-07-03] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16056 2015-08-23] (SlimWare Utilities, Inc.)
R3 VBAudioVMVAIOMME; C:\Windows\System32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2015-08-02] (Windows (R) Win 7 DDK provider)
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-09-17] (wisecleaner.com)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-18 15:08 - 2015-09-18 15:08 - 00053464 _____ C:\Users\John\Desktop\UsbFix_Report.txt
2015-09-18 13:55 - 2015-09-18 15:10 - 00000000 ____D C:\FRST
2015-09-18 13:55 - 2015-09-18 15:08 - 00000000 ____D C:\UsbFix
2015-09-18 13:55 - 2015-09-18 13:55 - 00001448 _____ C:\Users\John\Desktop\UsbFix.lnk
2015-09-18 13:54 - 2015-09-18 13:56 - 00002849 _____ C:\Windows\WindowsUpdate.log
2015-09-18 13:49 - 2015-09-18 13:50 - 05269496 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-18 13:49 - 2015-09-18 13:49 - 00000870 _____ C:\Windows\PFRO.log
2015-09-18 13:49 - 2015-09-18 13:49 - 00000056 _____ C:\Windows\setupact.log
2015-09-18 13:49 - 2015-09-18 13:49 - 00000000 _____ C:\Windows\setuperr.log
2015-09-17 21:37 - 2015-09-17 21:37 - 00133504 _____ C:\Users\John\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-17 21:15 - 2015-09-18 13:50 - 00000426 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2015-09-17 21:15 - 2015-09-18 13:50 - 00000398 _____ C:\Windows\Tasks\Wise Care 365.job
2015-09-17 21:15 - 2015-09-17 21:16 - 00003094 _____ C:\Windows\System32\Tasks\Wise Turbo Checker
2015-09-17 21:15 - 2015-09-17 21:16 - 00002824 _____ C:\Windows\System32\Tasks\Wise Care 365
2015-09-17 21:10 - 2015-09-18 13:51 - 00000000 ____D C:\Users\John\AppData\Roaming\Wise Care 365
2015-09-17 21:10 - 2015-09-17 21:10 - 00014800 _____ (wisecleaner.com) C:\Windows\WiseHDInfo64.dll
2015-09-17 21:10 - 2015-09-17 21:10 - 00000949 _____ C:\Users\Public\Desktop\Wise Care 365.lnk
2015-09-17 21:10 - 2015-09-17 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365
2015-09-17 14:52 - 2015-09-17 14:52 - 00000000 ____D C:\Users\John\AppData\Roaming\Matura-ROM
2015-09-17 14:49 - 2015-09-17 14:49 - 00000732 _____ C:\Users\John\Desktop\Matura-ROM.lnk
2015-09-16 14:31 - 2015-09-16 14:30 - 00011660 _____ C:\Users\John\Desktop\configgo.cfg
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\Users\John\Documents\Amnesia
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\Users\John\AppData\Roaming\fltk.org
2015-09-15 19:45 - 2015-09-15 19:45 - 00000000 ____D C:\ProgramData\fltk.org
2015-09-14 19:57 - 2015-09-14 19:57 - 00000000 ____D C:\Users\John\AppData\Roaming\Skyborn
2015-09-13 13:52 - 2015-09-14 20:46 - 27202533 _____ C:\Users\John\Desktop\Presentation1.pptx
2015-09-12 22:00 - 2015-09-12 22:00 - 00000000 ____D C:\Users\John\AppData\Local\DunDefLauncher
2015-09-11 19:37 - 2015-09-11 19:39 - 00000000 ____D C:\Users\John\AppData\Roaming\vlc
2015-09-11 19:36 - 2015-09-11 19:36 - 00000777 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-09-11 16:39 - 2015-09-11 16:39 - 00000000 ____D C:\Users\John\AppData\Roaming\MMFApplications
2015-09-07 17:18 - 2015-09-17 14:28 - 00004096 _____ C:\Users\Public\Documents\00006C0C.LCS
2015-09-07 17:18 - 2015-09-07 17:18 - 00000000 ____D C:\Users\John\AppData\Roaming\ProtectDISC
2015-09-05 22:18 - 2015-09-05 22:18 - 00000000 ____D C:\Users\John\AppData\Roaming\MPC-HC
2015-09-05 22:17 - 2015-09-05 22:17 - 00000792 _____ C:\Users\John\Desktop\MPC-HC x64.lnk
2015-09-04 22:32 - 2015-09-04 22:32 - 00000889 _____ C:\Users\John\Desktop\OBS Multiplatform.lnk
2015-09-04 22:32 - 2015-09-04 22:32 - 00000000 ____D C:\Users\John\AppData\Roaming\obs-studio
2015-09-04 22:32 - 2015-09-04 22:32 - 00000000 ____D C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform
2015-09-02 19:34 - 2015-09-02 19:35 - 15112136 _____ C:\Users\John\Downloads\The Inner Life of the Cell.mp4
2015-09-02 15:51 - 2015-09-02 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-09-02 15:50 - 2015-08-17 23:43 - 00608048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-09-02 15:46 - 2015-08-18 10:48 - 31515256 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 24200312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 22992048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 17559240 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 15294072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 13916600 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 13828032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 12896432 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-09-02 15:46 - 2015-08-18 10:48 - 11272048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 11209376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 04245808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 03987760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 01908528 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434181.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 01556656 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434181.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 00945456 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 00908592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 00903472 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-09-02 15:46 - 2015-08-18 10:48 - 00870008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-09-02 15:34 - 2015-09-02 15:39 - 282835496 _____ (NVIDIA Corporation) C:\Users\John\Downloads\341.81-desktop-win8-win7-winvista-64bit-international.exe
2015-09-01 16:37 - 2015-09-01 16:37 - 00012526 _____ C:\Users\John\Downloads\[kat.cr]bandicam.v2.1.3.757.reg.key.torrent
2015-09-01 16:34 - 2015-09-01 16:34 - 00001770 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.2.3.804.multilingual.keymaker.100.working.akhilyo.torrent
2015-09-01 16:32 - 2015-09-01 16:32 - 00016041 _____ C:\Users\John\Downloads\[kat.cr]bandisoft.bandicam.2.3.0.834.neosoft (1).torrent
2015-09-01 16:31 - 2015-09-01 16:31 - 00016041 _____ C:\Users\John\Downloads\[kat.cr]bandisoft.bandicam.2.3.0.834.neosoft.torrent
2015-09-01 16:18 - 2015-09-01 16:18 - 00012660 _____ C:\Users\John\Downloads\[kat.cr]bandicam.v2.0.1.651.final.incl.keymaker.scenedl.torrent
2015-09-01 16:17 - 2015-09-01 16:17 - 00000000 ____D C:\Windows\system32\Drivers\etc\BACKUP
2015-09-01 16:14 - 2015-09-01 16:14 - 00013215 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.2.3.805.full.repack.by.kpojiuk.4realtorrentz.torrent
2015-09-01 16:14 - 2015-09-01 16:14 - 00001924 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.3.0.834.multilingual.keygen.avengerxxx (2).torrent
2015-09-01 16:14 - 2015-09-01 16:14 - 00001924 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.3.0.834.multilingual.keygen.avengerxxx (1).torrent
2015-09-01 16:12 - 2015-09-01 16:12 - 00013243 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.2.3.803.multilingual.keygen.glodls.torrent
2015-09-01 16:11 - 2015-09-01 16:11 - 00001924 _____ C:\Users\John\Downloads\[kat.cr]bandicam.2.3.0.834.multilingual.keygen.avengerxxx.torrent
2015-09-01 16:09 - 2015-09-01 16:09 - 00003594 _____ C:\Users\John\Downloads\Bandicam2.1.2.740RePackportablebyKpoJIuK - ThePirateBay.TO.torrent
2015-09-01 09:03 - 2015-09-01 09:07 - 00000000 ____D C:\Program Files\OBS
2015-09-01 09:03 - 2015-09-01 09:07 - 00000000 ____D C:\Program Files (x86)\OBS
2015-09-01 09:02 - 2015-09-01 09:03 - 07420880 _____ C:\Users\John\Downloads\OBS_0_655b_Installer.exe
2015-08-31 20:54 - 2015-09-13 16:10 - 00000000 ____D C:\Users\John\Desktop\wynikizpraktykwszystko
2015-08-31 19:56 - 2015-08-31 19:56 - 04712266 _____ C:\Users\John\Downloads\wynikizpraktykwszystko.zip
2015-08-30 21:31 - 2015-08-30 21:31 - 00040913 _____ C:\Users\John\Downloads\gunny_rewritten.zip
2015-08-30 21:28 - 2015-08-30 21:28 - 00832663 _____ C:\Users\John\Downloads\djb_messy_amanda_goes_bold.zip
2015-08-30 21:28 - 2015-08-30 21:28 - 00438947 _____ C:\Users\John\Downloads\shimes_two.zip
2015-08-28 20:20 - 2015-08-28 20:20 - 00000000 ____D C:\Users\John\AppData\Local\CrashRpt
2015-08-28 20:19 - 2015-08-28 20:19 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-08-28 20:19 - 2015-08-28 20:19 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-08-28 20:19 - 2015-08-28 20:19 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-08-28 20:19 - 2015-08-28 20:19 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2015-08-28 20:19 - 2015-08-28 20:19 - 00000000 ____D C:\Program Files (x86)\OpenAL
2015-08-28 20:18 - 2015-08-28 20:18 - 00000000 ____D C:\Users\John\AppData\Local\Curve Digital
2015-08-28 13:31 - 2015-08-28 13:36 - 00000000 ____D C:\Users\John\AppData\Local\RelicHuntersZero
2015-08-27 10:13 - 2015-08-28 21:45 - 00000000 ____D C:\Users\John\AppData\Local\GeometryDash
2015-08-23 13:08 - 2015-08-23 13:08 - 00016056 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2015-08-23 13:07 - 2015-08-23 13:07 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2015-08-23 13:07 - 2015-08-23 13:07 - 00000000 ____D C:\Users\John\AppData\Local\SlimWare Utilities Inc
2015-08-23 11:39 - 2015-09-16 14:01 - 00002327 _____ C:\Users\John\Desktop\Google Chrome.lnk
2015-08-23 11:39 - 2015-09-12 18:41 - 00000000 ____D C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-23 11:38 - 2015-09-18 14:54 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3246966307-621913710-3015266008-1000UA.job
2015-08-23 11:38 - 2015-09-17 19:54 - 00001002 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3246966307-621913710-3015266008-1000Core.job
2015-08-23 11:38 - 2015-09-15 19:49 - 00004022 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3246966307-621913710-3015266008-1000UA
2015-08-23 11:38 - 2015-09-15 19:49 - 00003626 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3246966307-621913710-3015266008-1000Core
2015-08-20 16:02 - 2015-08-20 16:02 - 00000000 ____D C:\Users\John\AppData\Local\404Sight
2015-08-19 14:07 - 2015-08-19 14:07 - 00000000 ____D C:\Users\John\AppData\Local\Risen
2015-08-19 11:53 - 2015-08-19 11:53 - 00297904 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2015-08-19 11:52 - 2015-08-19 11:52 - 00313264 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-08-19 10:37 - 2015-08-19 11:01 - 00000000 ____D C:\Users\John\AppData\Roaming\Epic_Pen
2015-08-19 10:29 - 2015-08-19 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Pen

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-18 14:36 - 2015-08-11 17:23 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-18 14:00 - 2015-07-03 08:37 - 00000000 ____D C:\Users\John\AppData\Local\Adobe
2015-09-18 13:56 - 2015-07-03 08:14 - 00000000 ____D C:\ProgramData\MFAData
2015-09-18 13:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-18 13:49 - 2015-07-03 10:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-17 22:04 - 2009-07-14 06:45 - 00020640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-17 22:04 - 2009-07-14 06:45 - 00020640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-17 21:12 - 2015-07-03 17:20 - 00000000 ____D C:\Users\John\AppData\Roaming\Sony
2015-09-17 21:11 - 2015-07-03 17:43 - 00000000 ____D C:\Windows\Panther
2015-09-17 21:09 - 2015-07-04 15:19 - 00000000 ____D C:\Users\John\AppData\Roaming\LolClient
2015-09-17 20:38 - 2015-08-13 10:34 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-17 20:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-09-17 19:59 - 2015-07-04 13:22 - 00000000 ____D C:\Users\John\AppData\Roaming\Skype
2015-09-17 16:56 - 2015-08-06 19:03 - 00000000 ____D C:\Users\John\AppData\Local\Battle.net
2015-09-17 13:05 - 2015-07-03 08:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-09-16 20:23 - 2015-07-03 07:51 - 00000000 ____D C:\Users\John
2015-09-16 19:39 - 2015-07-03 10:54 - 00000000 ____D C:\Users\John\AppData\Roaming\Audacity
2015-09-15 14:40 - 2015-07-03 07:53 - 00000000 ____D C:\Users\John\AppData\Local\Google
2015-09-13 19:12 - 2009-07-14 07:13 - 00780436 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-13 17:10 - 2015-07-03 17:11 - 00000000 ____D C:\Users\John\AppData\Local\Windows Live
2015-09-13 16:18 - 2015-07-03 08:56 - 00000000 ____D C:\Users\John\AppData\Roaming\uTorrent
2015-09-12 22:20 - 2015-08-09 17:48 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-09-06 16:49 - 2015-07-03 10:51 - 00000000 ____D C:\Users\John\Desktop\Szablony Photoshop
2015-09-02 15:47 - 2015-07-03 10:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-09-02 14:21 - 2015-07-07 16:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-01 16:38 - 2015-07-03 08:32 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2015-08-20 15:59 - 2015-07-03 09:17 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-19 10:34 - 2015-07-03 07:59 - 00764302 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

==================== Files in the root of some directories =======

2015-08-02 17:11 - 2015-08-02 17:22 - 0002870 _____ () C:\Users\John\AppData\Roaming\VoiceMeeterDefault.xml

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-12 20:08

==================== End of FRST.txt ============================