Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by Tomek (administrator) on TOMEK-PC (01-11-2015 19:51:06)
Running from C:\Users\Tomek\Downloads\do wirusów\FRST64
Loaded Profiles: Tomek (Available Profiles: Tomek & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Bosch Security Systems B.V.) C:\Program Files (x86)\Bosch\DNS-SD\BoschDNSSDService.exe
(Audinate Pty. Ltd.) C:\Program Files (x86)\Audinate\Shared Files\conmon_cmm_service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Mediafour Corporation) C:\Program Files (x86)\Common Files\Mediafour\M4LIC.EXE
(Mediafour Corporation) C:\Program Files\Mediafour\MacDrive 8\MacDrive8Service.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(MSI) C:\Program Files (x86)\SCM\SCM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mediafour Corporation) C:\Program Files\Mediafour\MacDrive 8\MacDrive.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(www.shadowexplorer.com) C:\Program Files (x86)\ShadowExplorer\sesvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891568 2013-10-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184632 2013-11-13] (Motorola Solutions, Inc.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SCM] => c:\Program Files (x86)\SCM\SCM.exe [405504 2014-09-01] (MSI)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-08-14] (Realtek Semiconductor)
HKLM\...\Run: [MacDrive 8 application] => C:\Program Files\Mediafour\MacDrive 8\MacDrive.exe [345688 2010-02-04] (Mediafour Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-20] (Intel Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.)
HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS)
HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-168588485-3458256194-3685778785-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [177416 2015-10-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155976 2015-10-03] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [{6570C58B-C08B-46AD-AA82-2369B0D1B627}] -> MacDrive volume icons =>  No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-03-04]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{29CDA0F1-A6DA-44CC-9ABB-131A7D3D77AE}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 10 C:\Program Files (x86)\Bosch\DNS-SD\BoschDNSSDNSP.dll [115712 2012-12-18] (Bosch Security Systems B.V.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{FED056C4-7DCB-4836-8ABD-3C4FAA042B5B}: [DhcpNameServer] 192.168.43.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-168588485-3458256194-3685778785-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-168588485-3458256194-3685778785-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\tlnelhv3.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-18] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\tlnelhv3.default\searchplugins\secure-torrentz-search.xml [2015-09-20]
FF SearchPlugin: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\tlnelhv3.default\searchplugins\the-pirate-bay.xml [2015-03-30]
FF Extension: IE BandProxy - C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\tlnelhv3.default\Extensions\{73AE3664-B6B0-310C-2AA4-3859F2642D6B} [2015-10-24] [not signed]
FF Extension: Adblock Plus - C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\tlnelhv3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Bosch DNS-SD Service; C:\Program Files (x86)\Bosch\DNS-SD\BoschDNSSDService.exe [417792 2012-12-18] (Bosch Security Systems B.V.) [File not signed]
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [File not signed]
R2 conmon; C:\Program Files (x86)\Audinate\Shared Files\conmon_cmm_service.exe [276480 2012-12-11] (Audinate Pty. Ltd.) [File not signed]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2505472 2015-10-09] (ESET)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101680 2013-10-15] (ELAN Microelectronics Corp.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155376 2015-10-04] (NVIDIA Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2015-10-26] (SurfRight B.V.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 M4LIC; C:\Program Files (x86)\Common Files\Mediafour\M4LIC.EXE [205312 2009-07-29] (Mediafour Corporation) [File not signed]
R2 MacDrive8Service; C:\Program Files\Mediafour\MacDrive 8\MacDrive8Service.exe [218112 2010-01-07] (Mediafour Corporation) [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Micro Star SCM; c:\Program Files (x86)\SCM\MSIService.exe [160768 2014-09-01] (Micro-Star International Co., Ltd.) [File not signed]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-05-29] ()
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [35616 2015-02-27] (Microsoft)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568816 2015-10-04] (NVIDIA Corporation)
R2 PaceLicenseDServices; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2938880 2012-05-18] (PACE Anti-Piracy, Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-03-31] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-03-04] (Qualcomm Atheros) [File not signed]
R2 sesvc; C:\Program Files (x86)\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com) [File not signed]
S2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [327064 2010-05-18] (Enigma Software Group USA, LLC.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-05-29] (Intel® Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80560 2014-02-28] (Qualcomm Atheros, Inc.)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2013-11-07] (Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1411384 2013-11-07] (Motorola Solutions, Inc.)
R1 CBDisk; C:\Windows\system32\drivers\CBDisk.sys [70344 2010-01-13] (EldoS Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-07-28] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-07-30] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2015-07-30] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [170792 2015-07-30] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-10-24] (ESET)
S3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [5248 2010-01-27] () [File not signed]
S3 FiiOE07; C:\Windows\System32\drivers\FiiOE07.sys [64464 2012-11-14] (Windows (R) Win 7 DDK provider)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
S3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [161488 2014-03-05] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MDFSYSNT; C:\Windows\System32\Drivers\MDFSYSNT.sys [304232 2010-02-04] (Mediafour Corporation)
R0 MDPMGRNT; C:\Windows\System32\DRIVERS\MDPMGRNT.SYS [32352 2009-09-23] (Mediafour Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3442144 2014-06-18] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-10-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [466648 2014-02-21] (Realsil Semiconductor Corporation)
R3 SAlphaPS2; C:\Windows\System32\DRIVERS\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-03-04] (Duplex Secure Ltd.)
S3 UsbTray; C:\Windows\SysWOW64\UsbTray.sys [13264 2012-11-14] (Windows (R) Codename Longhorn DDK provider)
S3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] ()
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-01 19:50 - 2015-11-01 19:51 - 00000000 ____D C:\FRST
2015-11-01 18:13 - 2015-11-01 18:13 - 00030740 _____ C:\ComboFix.txt
2015-11-01 18:08 - 2015-11-01 18:13 - 00000000 ____D C:\Windows\erdnt
2015-11-01 18:08 - 2015-11-01 18:13 - 00000000 ____D C:\Qoobox
2015-11-01 18:08 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2015-11-01 18:08 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2015-11-01 18:08 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-11-01 18:08 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-11-01 18:08 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-11-01 18:08 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2015-11-01 18:08 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2015-11-01 18:08 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2015-11-01 17:54 - 2015-11-01 17:54 - 00000020 _____ C:\Users\Tomek\defogger_reenable
2015-11-01 16:57 - 2015-11-01 16:57 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\uTorrent
2015-11-01 02:11 - 2015-11-01 02:11 - 00285394 _____ C:\Users\Tomek\Downloads\crilock.rar
2015-10-31 23:29 - 2015-10-31 23:29 - 00000715 _____ C:\Users\Public\Desktop\GetDataBack for NTFS.lnk
2015-10-31 23:29 - 2015-10-31 23:29 - 00000715 _____ C:\ProgramData\Microsoft\Windows\Start Menu\GetDataBack for NTFS.lnk
2015-10-31 23:29 - 2015-10-31 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
2015-10-30 23:19 - 2015-10-30 23:20 - 00000000 ____D C:\Users\Tomek\Downloads\Subtitle Edit
2015-10-30 11:29 - 2015-11-01 18:04 - 00001494 _____ C:\Windows\setupact.log
2015-10-30 11:29 - 2015-10-30 11:29 - 00000000 _____ C:\Windows\setuperr.log
2015-10-29 00:05 - 2015-10-29 00:05 - 00000791 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-10-29 00:05 - 2015-10-29 00:05 - 00000743 _____ C:\Users\Tomek\Desktop\Start Tor Browser.lnk
2015-10-29 00:05 - 2015-10-29 00:05 - 00000000 ____D C:\Users\Tomek\Desktop\Tor Browser
2015-10-28 23:52 - 2015-10-29 00:11 - 00000000 _____ C:\FileRecovery.log
2015-10-28 23:52 - 2015-10-28 23:52 - 00001207 _____ C:\Users\Tomek\Desktop\Data Recovery Pro.lnk
2015-10-28 23:52 - 2015-10-28 23:52 - 00000494 _____ C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job
2015-10-28 23:52 - 2015-10-28 23:52 - 00000442 _____ C:\Windows\Tasks\ParetoLogic Update Version3.job
2015-10-28 23:52 - 2015-10-28 23:52 - 00000420 _____ C:\Windows\Tasks\ParetoLogic Registration3.job
2015-10-28 23:52 - 2015-10-28 23:52 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic
2015-10-28 23:52 - 2015-10-28 23:52 - 00000000 ____D C:\ProgramData\ParetoLogic
2015-10-28 23:52 - 2015-10-28 23:52 - 00000000 ____D C:\Program Files (x86)\ParetoLogic
2015-10-28 23:43 - 2015-10-29 00:01 - 44146960 _____ C:\Users\Tomek\Downloads\torbrowser-install-5.0.3_pl.exe
2015-10-28 23:36 - 2015-10-28 23:36 - 00026312 _____ C:\Users\Tomek\Downloads\kaspersky-coinvault-decryptor.exe
2015-10-28 23:33 - 2015-10-28 23:35 - 02936816 _____ (ParetoLogic) C:\Users\Tomek\Downloads\Pareto_DR_Setup_RW.exe
2015-10-28 23:14 - 2015-11-01 19:47 - 00000000 ____D C:\Users\Tomek\Desktop\tu
2015-10-28 22:25 - 2015-10-28 22:34 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Bitcoin
2015-10-28 21:42 - 2015-10-28 21:42 - 00001845 _____ C:\Users\Tomek\Desktop\ShadowExplorer.lnk
2015-10-28 21:42 - 2015-10-28 21:42 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\www.shadowexplorer.com
2015-10-28 21:42 - 2015-10-28 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShadowExplorer
2015-10-28 21:42 - 2015-10-28 21:42 - 00000000 ____D C:\Program Files (x86)\ShadowExplorer
2015-10-26 15:21 - 2015-10-26 15:22 - 00000000 ____D C:\Users\Tomek\Downloads\odzyskać
2015-10-26 14:53 - 2015-10-26 14:53 - 00000604 _____ C:\spyhunter.fix
2015-10-26 14:36 - 2015-10-26 14:36 - 00003338 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2015-10-26 14:36 - 2015-10-26 14:36 - 00002244 _____ C:\Users\Tomek\Desktop\SpyHunter.lnk
2015-10-26 14:36 - 2015-10-26 14:36 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2015-10-26 14:36 - 2015-10-26 14:36 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-10-26 14:36 - 2015-10-26 14:36 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2015-10-26 13:24 - 2015-10-26 13:24 - 00000000 _____ C:\autoexec.bat
2015-10-26 11:59 - 2015-10-28 23:27 - 00000000 ____D C:\Program Files\Recuva
2015-10-26 11:59 - 2015-10-26 11:59 - 00001658 _____ C:\Users\Public\Desktop\Recuva.lnk
2015-10-26 11:59 - 2015-10-26 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2015-10-26 11:47 - 2015-10-26 11:47 - 00001674 _____ C:\Windows\system32\.crusader
2015-10-26 11:40 - 2015-10-24 12:46 - 00002012 _____ C:\Users\Tomek\Desktop\ESET NOD32 Antivirus.lnk
2015-10-26 11:36 - 2015-10-26 11:36 - 00001935 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2015-10-26 11:36 - 2015-10-26 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2015-10-26 11:36 - 2015-10-26 11:36 - 00000000 ____D C:\Program Files\HitmanPro
2015-10-26 11:32 - 2015-10-26 11:47 - 00000000 ____D C:\ProgramData\HitmanPro
2015-10-24 14:28 - 2015-11-01 18:04 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-24 14:28 - 2015-10-24 14:28 - 00001062 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-24 14:28 - 2015-10-24 14:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-24 14:28 - 2015-10-24 14:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-24 14:28 - 2015-10-24 14:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-24 14:28 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-24 14:28 - 2015-10-05 08:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-24 14:28 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-24 14:12 - 2015-10-24 14:12 - 00170280 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2015-10-24 12:47 - 2015-10-24 12:47 - 00000000 ____D C:\Users\Tomek\AppData\Local\ESET
2015-10-24 12:46 - 2015-10-24 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-10-24 12:46 - 2015-10-24 12:46 - 00000000 ____D C:\ProgramData\ESET
2015-10-24 12:46 - 2015-10-24 12:46 - 00000000 ____D C:\Program Files\ESET
2015-10-24 12:45 - 2015-10-24 12:45 - 00007628 _____ C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
2015-10-24 12:07 - 2015-11-01 19:06 - 00973332 _____ C:\Windows\WindowsUpdate.log
2015-10-24 11:48 - 2015-10-24 11:48 - 00000254 _____ C:\Users\Tomek\Documents\recover_file_nypjxybdv.txt
2015-10-24 11:35 - 2015-10-24 13:59 - 00000000 ____D C:\Users\Tomek\AppData\Local\YblpPack
2015-10-24 11:35 - 2015-10-24 13:58 - 00000000 ____D C:\Users\Tomek\AppData\Local\Ehwztion
2015-10-24 11:34 - 2015-10-24 11:34 - 00001448 _____ C:\Users\Tomek\Desktop\UsbFix.lnk
2015-10-24 11:26 - 2015-11-01 18:00 - 00000000 ____D C:\UsbFix
2015-10-24 11:24 - 2015-11-01 19:44 - 00000000 ____D C:\Users\Tomek\Downloads\do wirusów
2015-10-20 21:56 - 2015-10-24 14:00 - 00000000 ____D C:\Users\Tomek\Downloads\Teagan Presley
2015-10-20 19:38 - 2015-10-24 11:48 - 00000574 _____ C:\Users\Tomek\Downloads\tu.txt.ccc
2015-10-18 23:58 - 2015-10-24 14:00 - 00000000 ____D C:\Users\Tomek\Documents\Nexus Mod Manager
2015-10-18 23:58 - 2015-10-24 13:58 - 00000000 ____D C:\Users\Tomek\AppData\Local\Black_Tree_Gaming
2015-10-18 23:57 - 2015-10-19 00:08 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2015-10-18 23:57 - 2015-10-18 23:57 - 00000890 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2015-10-18 23:57 - 2015-10-18 23:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-10-18 22:58 - 2015-10-18 22:58 - 00000100 _____ C:\Users\Tomek\AppData\Roaming\ScriptStudioLayout.ini
2015-10-18 22:58 - 2015-10-18 22:58 - 00000046 _____ C:\Users\Tomek\AppData\Roaming\ScriptStudioOptions.ini
2015-10-14 15:57 - 2015-10-14 15:57 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-10-14 15:57 - 2015-10-14 15:57 - 00000000 ____D C:\Windows\system32\NV
2015-10-14 15:56 - 2015-10-03 06:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-10-14 15:56 - 2015-10-03 06:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-10-14 15:56 - 2015-10-03 06:06 - 00031352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2015-10-14 15:52 - 2015-10-24 13:58 - 00000000 ____D C:\Users\Tomek\AppData\Local\NVIDIA
2015-10-14 15:52 - 2015-10-14 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-10-14 15:52 - 2015-10-04 09:23 - 01423120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-10-14 15:52 - 2015-10-04 09:23 - 01317192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-10-14 15:52 - 2015-10-04 09:22 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-10-14 15:52 - 2015-10-04 09:22 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-10-14 15:52 - 2015-08-11 05:52 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-10-14 15:52 - 2015-08-11 05:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-10-14 15:52 - 2015-08-11 05:52 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-10-14 15:07 - 2015-10-24 13:57 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-14 15:06 - 2015-10-24 13:57 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-10-14 15:06 - 2015-10-14 15:57 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-10-14 15:06 - 2015-10-03 03:49 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 02982520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 00938800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-10-14 15:06 - 2015-10-03 03:49 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-10-14 15:06 - 2015-10-03 03:49 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-10-14 15:06 - 2015-10-01 10:33 - 05284082 _____ C:\Windows\system32\nvcoproc.bin
2015-10-14 15:02 - 2015-10-24 14:00 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Sun
2015-10-14 15:02 - 2015-10-24 13:59 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\Sun
2015-10-14 15:02 - 2015-10-24 13:59 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\Oracle
2015-10-14 15:02 - 2015-10-24 13:58 - 00000000 ____D C:\Users\Tomek\.oracle_jre_usage
2015-10-14 15:02 - 2015-10-24 13:57 - 00000000 ____D C:\ProgramData\Oracle
2015-10-14 15:02 - 2015-10-24 12:09 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-09 12:20 - 2015-10-24 11:48 - 00249710 _____ C:\Users\Tomek\Documents\TR_DETAILS_20151009131939.pdf.ccc
2015-10-08 17:42 - 2015-10-24 14:00 - 00000000 ____D C:\Users\Tomek\Downloads\[studia]
2015-10-05 13:05 - 2015-10-05 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-10-05 13:05 - 2015-10-05 13:05 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-10-05 13:05 - 2015-10-05 13:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-10-03 22:28 - 2015-10-24 13:59 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\PencilTestStudios
2015-10-03 21:10 - 2015-10-03 21:10 - 00000923 _____ C:\Users\Public\Desktop\Fraps.lnk
2015-10-03 21:10 - 2015-10-03 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-10-03 21:10 - 2015-10-03 21:10 - 00000000 ____D C:\Program Files (x86)\Fraps

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-01 19:23 - 2015-05-20 07:47 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-01 18:13 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2015-11-01 18:12 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-01 18:12 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-01 18:12 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2015-11-01 18:11 - 2015-03-04 17:06 - 00741114 _____ C:\Windows\system32\perfh015.dat
2015-11-01 18:11 - 2015-03-04 17:06 - 00156154 _____ C:\Windows\system32\perfc015.dat
2015-11-01 18:11 - 2009-07-14 06:13 - 01671648 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-01 18:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-01 17:54 - 2015-03-05 01:39 - 00000000 ____D C:\Users\Tomek
2015-11-01 17:02 - 2015-03-04 22:31 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\uTorrent
2015-11-01 16:35 - 2015-03-04 18:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-01 16:24 - 2015-04-28 22:59 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-11-01 16:24 - 2015-04-28 22:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-26 14:53 - 2015-03-04 18:16 - 00003174 _____ C:\Windows\System32\Tasks\MSI_Dragon Gaming Center
2015-10-26 13:58 - 2015-06-22 20:42 - 00000000 ____D C:\Users\Tomek\AppData\Local\ChomikBox
2015-10-26 13:55 - 2015-06-22 20:42 - 00000000 ____D C:\Users\Tomek\.gstreamer-0.10
2015-10-26 12:48 - 2015-05-28 13:22 - 00000000 ____D C:\Users\Tomek\Documents\The Witcher 3
2015-10-24 14:01 - 2015-03-04 17:16 - 00000000 ____D C:\Intel
2015-10-24 14:00 - 2015-09-27 11:53 - 00000000 ____D C:\Users\Tomek\Documents\VST3 Presets
2015-10-24 14:00 - 2015-09-19 11:50 - 00000000 ____D C:\Users\Tomek\Documents\My ISO Files
2015-10-24 14:00 - 2015-08-24 10:29 - 00000000 ____D C:\Users\Tomek\Downloads\[służbowo]
2015-10-24 14:00 - 2015-07-28 18:32 - 00000000 ____D C:\Users\Tomek\Downloads\do telefonu
2015-10-24 14:00 - 2015-06-26 21:24 - 00000000 ____D C:\Users\Tomek\Tracing
2015-10-24 14:00 - 2015-06-26 21:15 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Skype
2015-10-24 14:00 - 2015-06-24 13:17 - 00000000 ____D C:\Users\Tomek\Downloads\txt-y
2015-10-24 14:00 - 2015-06-22 20:43 - 00000000 ____D C:\Users\Tomek\Downloads\ChomikBox
2015-10-24 14:00 - 2015-05-28 13:08 - 00000000 ____D C:\GOG Games
2015-10-24 14:00 - 2015-05-15 11:54 - 00000000 ____D C:\Users\Tomek\Documents\Blue Cat Audio
2015-10-24 14:00 - 2015-05-14 22:47 - 00000000 ____D C:\Users\Tomek\Documents\JRiver
2015-10-24 14:00 - 2015-05-03 22:59 - 00000000 ____D C:\Users\Tomek\Documents\Assassin's Creed Unity
2015-10-24 14:00 - 2015-04-28 23:22 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Softland
2015-10-24 14:00 - 2015-03-31 08:54 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\PunkBuster
2015-10-24 14:00 - 2015-03-28 08:04 - 00000000 ____D C:\Users\Tomek\Desktop\Realizacja
2015-10-24 14:00 - 2015-03-26 19:23 - 00000000 ____D C:\Users\Tomek\Documents\FLiNGTrainer
2015-10-24 14:00 - 2015-03-23 21:18 - 00000000 ____D C:\Users\Tomek\Documents\DriverGenius
2015-10-24 14:00 - 2015-03-21 17:52 - 00000000 ____D C:\Users\Tomek\Documents\iZotope
2015-10-24 14:00 - 2015-03-17 15:01 - 00000000 ____D C:\Users\Tomek\Desktop\Gry
2015-10-24 14:00 - 2015-03-16 21:39 - 00000000 ____D C:\Users\Tomek\Documents\My Games
2015-10-24 14:00 - 2015-03-16 21:09 - 00000000 ____D C:\Users\Tomek\Documents\Ubisoft
2015-10-24 14:00 - 2015-03-16 19:33 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Voxengo
2015-10-24 14:00 - 2015-03-16 19:10 - 00000000 ____D C:\Users\Tomek\Documents\FabFilter
2015-10-24 14:00 - 2015-03-06 14:05 - 00000000 ____D C:\Users\Tomek\Documents\IK Multimedia
2015-10-24 14:00 - 2015-03-05 22:20 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Steam
2015-10-24 14:00 - 2015-03-05 20:49 - 00000000 ____D C:\Users\Tomek\Documents\Native Instruments
2015-10-24 14:00 - 2015-03-05 18:03 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Waves Audio
2015-10-24 14:00 - 2015-03-04 23:03 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Steinberg
2015-10-24 14:00 - 2015-03-04 22:27 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\NapiProjekt
2015-10-24 14:00 - 2015-03-04 19:20 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Trillium Lane
2015-10-24 14:00 - 2015-03-04 19:19 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\PACE Anti-Piracy
2015-10-24 14:00 - 2015-03-04 19:11 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\WinRAR
2015-10-24 14:00 - 2015-03-04 19:10 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-10-24 14:00 - 2015-03-04 18:42 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Mozilla
2015-10-24 14:00 - 2015-03-04 18:21 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\SteelSeries
2015-10-24 14:00 - 2015-03-04 18:17 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\SplitmediaLabs
2015-10-24 14:00 - 2015-03-04 17:40 - 00000000 ____D C:\Users\Tomek\Documents\Moje odebrane pliki
2015-10-24 14:00 - 2015-03-04 17:30 - 00000000 ____D C:\Users\Tomek\Intel.sav
2015-10-24 14:00 - 2015-03-04 17:17 - 00000000 ____D C:\Users\Tomek\Intel
2015-10-24 13:59 - 2015-09-19 11:29 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\ImgBurn
2015-10-24 13:59 - 2015-06-24 12:44 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\ControlCenter4
2015-10-24 13:59 - 2015-05-25 12:23 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Celemony Software GmbH
2015-10-24 13:59 - 2015-05-15 11:54 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Blue Cat Audio
2015-10-24 13:59 - 2015-05-15 11:52 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blue Cat Audio
2015-10-24 13:59 - 2015-05-14 22:39 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\J River
2015-10-24 13:59 - 2015-05-13 14:50 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FiiO USB DAC-E07K
2015-10-24 13:59 - 2015-03-28 08:40 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Meyer Sound
2015-10-24 13:59 - 2015-03-21 17:57 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\iZotope
2015-10-24 13:59 - 2015-03-17 16:02 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Far Cry 4
2015-10-24 13:59 - 2015-03-17 08:48 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-10-24 13:59 - 2015-03-16 19:24 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\Adobe
2015-10-24 13:59 - 2015-03-16 19:10 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\FabFilter
2015-10-24 13:59 - 2015-03-15 19:15 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FabFilter
2015-10-24 13:59 - 2015-03-06 14:38 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sonalksis
2015-10-24 13:59 - 2015-03-05 01:40 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Adobe
2015-10-24 13:59 - 2015-03-05 01:39 - 00000000 ___RD C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 13:59 - 2015-03-05 01:39 - 00000000 ___RD C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:59 - 2015-03-05 01:25 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\foobar2000
2015-10-24 13:59 - 2015-03-05 00:47 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\KMPlayer
2015-10-24 13:59 - 2015-03-04 23:03 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5
2015-10-24 13:59 - 2015-03-04 22:20 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2015-10-24 13:59 - 2015-03-04 22:07 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
2015-10-24 13:59 - 2015-03-04 21:27 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-10-24 13:59 - 2015-03-04 19:17 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Avid
2015-10-24 13:59 - 2015-03-04 18:53 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Macromedia
2015-10-24 13:59 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\LocalLow\EmieUserList
2015-10-24 13:59 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\LocalLow\EmieSiteList
2015-10-24 13:59 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\LocalLow\EmieBrowserModeList
2015-10-24 13:59 - 2015-03-04 18:20 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2015-10-24 13:59 - 2015-03-04 17:30 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Intel
2015-10-24 13:59 - 2015-03-04 17:17 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Intel Corporation
2015-10-24 13:59 - 2015-03-04 17:16 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\InstallShield
2015-10-24 13:58 - 2015-07-28 19:14 - 00000000 ____D C:\Users\Tomek\AppData\Local\Disc_Soft_Ltd
2015-10-24 13:58 - 2015-07-21 17:28 - 00000000 ____D C:\Users\Tomek\AppData\Local\CEF
2015-10-24 13:58 - 2015-06-26 21:15 - 00000000 ____D C:\Users\Tomek\AppData\Local\Skype
2015-10-24 13:58 - 2015-06-16 12:29 - 00000000 ____D C:\Users\Tomek\.android
2015-10-24 13:58 - 2015-06-16 12:27 - 00000000 ____D C:\Users\Tomek\.swt
2015-10-24 13:58 - 2015-06-16 12:27 - 00000000 ____D C:\Users\Tomek\.flashTool
2015-10-24 13:58 - 2015-04-28 23:23 - 00000000 ____D C:\Users\Tomek\AppData\Local\Startup
2015-10-24 13:58 - 2015-03-31 09:17 - 00000000 ____D C:\ProgramData\Ubisoft
2015-10-24 13:58 - 2015-03-28 08:20 - 00000000 ___HD C:\Users\Tomek\AppData\Local\.IRIS-Net
2015-10-24 13:58 - 2015-03-18 12:56 - 00000000 ____D C:\Users\Tomek\AppData\Local\Downloaded Installations
2015-10-24 13:58 - 2015-03-17 09:33 - 00000000 ____D C:\Users\Tomek\AppData\Local\Chromium
2015-10-24 13:58 - 2015-03-17 08:48 - 00000000 ____D C:\Users\Tomek\AppData\Local\Ubisoft Game Launcher
2015-10-24 13:58 - 2015-03-16 22:24 - 00000000 ____D C:\Users\Tomek\AppData\Local\SKIDROW
2015-10-24 13:58 - 2015-03-05 20:49 - 00000000 ____D C:\Users\Tomek\AppData\Local\Native Instruments
2015-10-24 13:58 - 2015-03-05 20:48 - 00000000 __HDC C:\ProgramData\{F4C30B44-15B7-482B-8B80-38AA0AB0956A}
2015-10-24 13:58 - 2015-03-05 20:46 - 00000000 __HDC C:\ProgramData\{EFEC7DCC-2F91-4828-B49D-8506F9F0D9FF}
2015-10-24 13:58 - 2015-03-05 20:46 - 00000000 __HDC C:\ProgramData\{7AFFCFD3-F022-420B-8E87-BBAED1C983C8}
2015-10-24 13:58 - 2015-03-05 20:45 - 00000000 __HDC C:\ProgramData\{AD7B6000-2063-4CF8-A07D-49A34A4164E7}
2015-10-24 13:58 - 2015-03-05 20:45 - 00000000 __HDC C:\ProgramData\{03149E88-061F-4C01-98FF-736811F5AEF5}
2015-10-24 13:58 - 2015-03-05 20:44 - 00000000 __HDC C:\ProgramData\{929A2A2C-EEDF-4FD7-830C-278E194D1B53}
2015-10-24 13:58 - 2015-03-05 20:43 - 00000000 __HDC C:\ProgramData\{BCE70080-8C44-4FE4-9CEE-9ABE71A36E7E}
2015-10-24 13:58 - 2015-03-05 20:43 - 00000000 __HDC C:\ProgramData\{4C99B1DC-0B59-43A6-8537-9CE9286685A3}
2015-10-24 13:58 - 2015-03-05 20:41 - 00000000 __HDC C:\ProgramData\{6F97656F-AAA1-4E21-96D6-52E5526E59D2}
2015-10-24 13:58 - 2015-03-05 20:37 - 00000000 __HDC C:\ProgramData\{F92C204F-6C39-4D56-B100-EC929C871966}
2015-10-24 13:58 - 2015-03-05 20:33 - 00000000 __HDC C:\ProgramData\{43D1C1F4-8E90-4B5F-8388-D1E602AABF0E}
2015-10-24 13:58 - 2015-03-05 20:32 - 00000000 __HDC C:\ProgramData\{63E9A1A4-8FB4-4448-B7E1-E635AD5344FF}
2015-10-24 13:58 - 2015-03-05 20:31 - 00000000 __HDC C:\ProgramData\{E753D955-673D-4851-B06F-9A9D0C44C02C}
2015-10-24 13:58 - 2015-03-05 20:30 - 00000000 __HDC C:\ProgramData\{C5CAF473-C900-4049-BCE5-A93E0EBA7EF2}
2015-10-24 13:58 - 2015-03-05 20:29 - 00000000 __HDC C:\ProgramData\{ACEB5C90-39F7-4044-91EF-FBD59A59D240}
2015-10-24 13:58 - 2015-03-05 20:22 - 00000000 __HDC C:\ProgramData\{E051D9C8-9503-489B-8E90-21CEB1DF11C1}
2015-10-24 13:58 - 2015-03-05 20:21 - 00000000 __HDC C:\ProgramData\{87A1E31E-1C63-4A99-AEEA-EA57A3043C1D}
2015-10-24 13:58 - 2015-03-05 20:21 - 00000000 __HDC C:\ProgramData\{34163C5E-1AE4-49D8-B5F9-A3C2422AAB96}
2015-10-24 13:58 - 2015-03-05 20:19 - 00000000 __HDC C:\ProgramData\{ECD5EDEB-48B5-47BB-BD2E-1F95422B2C33}
2015-10-24 13:58 - 2015-03-05 20:18 - 00000000 __HDC C:\ProgramData\{7E15FB3A-A743-4BAD-9286-E6F67959668B}
2015-10-24 13:58 - 2015-03-05 20:14 - 00000000 __HDC C:\ProgramData\{98F83ED2-DF89-465B-8EB3-F87E179CFA56}
2015-10-24 13:58 - 2015-03-05 20:14 - 00000000 __HDC C:\ProgramData\{7C702C5F-ADE3-4D28-9619-90BA76D4E1ED}
2015-10-24 13:58 - 2015-03-05 20:14 - 00000000 __HDC C:\ProgramData\{78915E0A-25F8-47A2-9793-CEBC2D28F274}
2015-10-24 13:58 - 2015-03-05 20:14 - 00000000 __HDC C:\ProgramData\{6032CB49-DE54-4192-9F71-65859D0B544F}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{F409EA92-6713-4D2D-AF88-0C51B1CF1D2A}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{DEBC0451-D249-4B4C-B907-F6510028BC75}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{C693A367-F08F-4F42-A5DE-8996D6AC24F0}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{A9FC06D6-E75C-4DA2-B8D2-8D91C1A269C3}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{849C3EA7-6C44-4D64-BFD2-FC5AF841BE83}
2015-10-24 13:58 - 2015-03-05 20:13 - 00000000 __HDC C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362}
2015-10-24 13:58 - 2015-03-05 20:12 - 00000000 __HDC C:\ProgramData\{2FF04994-9599-464E-AD99-B09CBE2122AE}
2015-10-24 13:58 - 2015-03-05 20:11 - 00000000 __HDC C:\ProgramData\{786FEDEA-8E71-4900-8D2F-40933D86B376}
2015-10-24 13:58 - 2015-03-05 20:10 - 00000000 __HDC C:\ProgramData\{1C7A6EB7-BED0-4444-B0DA-4BFDCF83C380}
2015-10-24 13:58 - 2015-03-05 20:08 - 00000000 __HDC C:\ProgramData\{926BF989-2A51-492D-8A6A-E9D533417C34}
2015-10-24 13:58 - 2015-03-05 20:06 - 00000000 __HDC C:\ProgramData\{93015F0A-7AF2-4308-A5B3-13D4FCE429C6}
2015-10-24 13:58 - 2015-03-05 19:56 - 00000000 __HDC C:\ProgramData\{B96A0118-1095-4E34-9C27-D87092B77F67}
2015-10-24 13:58 - 2015-03-05 19:55 - 00000000 __HDC C:\ProgramData\{727F248C-CA81-4A68-8E01-27236ED99D98}
2015-10-24 13:58 - 2015-03-05 19:53 - 00000000 __HDC C:\ProgramData\{DFAB8828-7DA2-4573-A254-15D802A10A7E}
2015-10-24 13:58 - 2015-03-05 19:52 - 00000000 __HDC C:\ProgramData\{B8AB470F-A90B-4652-A8F5-160A08FD7411}
2015-10-24 13:58 - 2015-03-05 19:49 - 00000000 __HDC C:\ProgramData\{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668}
2015-10-24 13:58 - 2015-03-05 19:48 - 00000000 __HDC C:\ProgramData\{8A9976F0-1DB6-4A1D-823B-E9E459F6EE39}
2015-10-24 13:58 - 2015-03-05 19:44 - 00000000 __HDC C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1}
2015-10-24 13:58 - 2015-03-05 19:43 - 00000000 __HDC C:\ProgramData\{BA0B7444-2ABA-463C-862A-7EC7F0AD0FA2}
2015-10-24 13:58 - 2015-03-05 19:43 - 00000000 __HDC C:\ProgramData\{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF}
2015-10-24 13:58 - 2015-03-05 19:41 - 00000000 __HDC C:\ProgramData\{4AD6F65B-2A15-4CFF-9AF7-830F277D0157}
2015-10-24 13:58 - 2015-03-05 19:40 - 00000000 __HDC C:\ProgramData\{5309003E-4102-4141-A0C9-7507F0E10F52}
2015-10-24 13:58 - 2015-03-05 19:39 - 00000000 __HDC C:\ProgramData\{B7CF1107-3BD9-48BA-BC77-54B909022641}
2015-10-24 13:58 - 2015-03-05 19:39 - 00000000 __HDC C:\ProgramData\{1CCB05D7-901D-4CCB-816F-73AC0098D30A}
2015-10-24 13:58 - 2015-03-05 19:38 - 00000000 __HDC C:\ProgramData\{A793ECF9-34FC-47F0-8CBE-0B3DEA468C01}
2015-10-24 13:58 - 2015-03-05 19:37 - 00000000 __HDC C:\ProgramData\{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171}
2015-10-24 13:58 - 2015-03-05 19:37 - 00000000 __HDC C:\ProgramData\{4C01754A-32F9-4A34-8B9F-E06DD553B755}
2015-10-24 13:58 - 2015-03-05 19:36 - 00000000 __HDC C:\ProgramData\{0221FDDB-41E3-4971-AC93-5048F8D7CAAC}
2015-10-24 13:58 - 2015-03-05 19:33 - 00000000 __HDC C:\ProgramData\{499D67BC-046E-4931-8BFB-D5ABB500E67C}
2015-10-24 13:58 - 2015-03-05 19:32 - 00000000 __HDC C:\ProgramData\{7B7672F5-5EA2-4D83-BC77-1AFCA8846266}
2015-10-24 13:58 - 2015-03-05 19:31 - 00000000 __HDC C:\ProgramData\{229D9A22-9BEA-4D2B-813E-85E0FACBA99C}
2015-10-24 13:58 - 2015-03-05 19:29 - 00000000 __HDC C:\ProgramData\{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}
2015-10-24 13:58 - 2015-03-05 19:26 - 00000000 __HDC C:\ProgramData\{A6377726-7317-464A-87EB-693294E9F383}
2015-10-24 13:58 - 2015-03-05 19:24 - 00000000 __HDC C:\ProgramData\{6B991D2A-5E91-44B4-BE28-CFDCED1835AB}
2015-10-24 13:58 - 2015-03-05 19:22 - 00000000 __HDC C:\ProgramData\{18869C94-495B-4D97-8C75-E405CF6509CB}
2015-10-24 13:58 - 2015-03-05 19:20 - 00000000 __HDC C:\ProgramData\{D53B5F71-B715-494C-AFD4-BB0C94C787E5}
2015-10-24 13:58 - 2015-03-05 19:16 - 00000000 __HDC C:\ProgramData\{B54CEF12-4612-4E77-B06C-403C662468E7}
2015-10-24 13:58 - 2015-03-05 19:03 - 00000000 __HDC C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7}
2015-10-24 13:58 - 2015-03-05 18:56 - 00000000 __HDC C:\ProgramData\{FB5C60A0-15D1-4DEF-A6EF-3366AC37909F}
2015-10-24 13:58 - 2015-03-05 18:44 - 00000000 __HDC C:\ProgramData\{E2A3D3D3-946E-4752-90FB-AF37CC248734}
2015-10-24 13:58 - 2015-03-05 17:59 - 00000000 ____D C:\Users\Public\Waves Audio
2015-10-24 13:58 - 2015-03-05 01:40 - 00000000 ____D C:\Users\Tomek\AppData\Local\VirtualStore
2015-10-24 13:58 - 2015-03-04 23:04 - 00000000 ____D C:\ProgramData\Steinberg
2015-10-24 13:58 - 2015-03-04 22:40 - 00000000 ____D C:\Users\Tomek\AppData\Local\Microsoft Help
2015-10-24 13:58 - 2015-03-04 19:19 - 00000000 ____D C:\Users\Tomek\AppData\Local\PACE Anti-Piracy
2015-10-24 13:58 - 2015-03-04 18:59 - 00000000 ____D C:\ProgramData\Western Digital
2015-10-24 13:58 - 2015-03-04 18:53 - 00000000 ____D C:\Users\Tomek\AppData\Local\Macromedia
2015-10-24 13:58 - 2015-03-04 18:52 - 00000000 ____D C:\Users\Tomek\AppData\Local\Adobe
2015-10-24 13:58 - 2015-03-04 18:42 - 00000000 ____D C:\Users\Tomek\AppData\Local\Mozilla
2015-10-24 13:58 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\Local\EmieUserList
2015-10-24 13:58 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\Local\EmieSiteList
2015-10-24 13:58 - 2015-03-04 18:39 - 00000000 __SHD C:\Users\Tomek\AppData\Local\EmieBrowserModeList
2015-10-24 13:58 - 2015-03-04 18:34 - 00000000 ____D C:\Users\Tomek\AppData\Local\NVIDIA Corporation
2015-10-24 13:58 - 2015-03-04 18:21 - 00000000 ____D C:\Users\Tomek\AppData\Local\SteelSeries_ApS
2015-10-24 13:58 - 2015-03-04 18:15 - 00000000 ____D C:\Users\Tomek\AppData\Local\MSIOnlineRegister
2015-10-24 13:58 - 2015-03-04 18:15 - 00000000 ____D C:\Users\Tomek\AppData\Local\MSI
2015-10-24 13:58 - 2011-04-12 09:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-10-24 13:58 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2015-10-24 13:57 - 2015-07-28 19:24 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2015-10-24 13:57 - 2015-07-28 18:45 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-10-24 13:57 - 2015-07-28 18:36 - 00000000 ____D C:\ProgramData\Samsung
2015-10-24 13:57 - 2015-06-26 21:15 - 00000000 ____D C:\ProgramData\Skype
2015-10-24 13:57 - 2015-06-24 12:33 - 00000000 ____D C:\ProgramData\ControlCenter4
2015-10-24 13:57 - 2015-06-24 12:33 - 00000000 ____D C:\Brother
2015-10-24 13:57 - 2015-06-24 12:31 - 00000000 ____D C:\ProgramData\Brother
2015-10-24 13:57 - 2015-06-03 16:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-10-24 13:57 - 2015-05-25 12:23 - 00000000 ____D C:\ProgramData\Celemony Software GmbH
2015-10-24 13:57 - 2015-04-28 23:22 - 00000000 ____D C:\ProgramData\Softland
2015-10-24 13:57 - 2015-04-28 23:21 - 00000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset
2015-10-24 13:57 - 2015-03-31 18:46 - 00000000 __SHD C:\ProgramData\SecuROM
2015-10-24 13:57 - 2015-03-28 08:19 - 00000000 ____D C:\ProgramData\IRIS-Net
2015-10-24 13:57 - 2015-03-21 15:04 - 00000000 ____D C:\ProgramData\Mediafour
2015-10-24 13:57 - 2015-03-18 15:35 - 00000000 __SHD C:\ProgramData\DSS
2015-10-24 13:57 - 2015-03-17 09:23 - 00000000 ____D C:\ProgramData\Rockstar Games
2015-10-24 13:57 - 2015-03-16 21:39 - 00000000 ____D C:\ProgramData\Steam
2015-10-24 13:57 - 2015-03-16 21:09 - 00000000 ____D C:\ProgramData\Orbit
2015-10-24 13:57 - 2015-03-06 17:21 - 00000000 ____D C:\ProgramData\Slate Digital
2015-10-24 13:57 - 2015-03-06 13:46 - 00000000 ____D C:\Users\Administrator\Documents\Moje odebrane pliki
2015-10-24 13:57 - 2015-03-06 13:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2015-10-24 13:57 - 2015-03-06 13:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\MSI
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Intel
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ____D C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ____D C:\Users\Administrator\AppData\Local\NVIDIA
2015-10-24 13:57 - 2015-03-06 13:45 - 00000000 ____D C:\Users\Administrator
2015-10-24 13:57 - 2015-03-05 18:44 - 00000000 ____D C:\ProgramData\Native Instruments
2015-10-24 13:57 - 2015-03-05 01:43 - 00000000 ____D C:\ProgramData\PLAY ONLINE
2015-10-24 13:57 - 2015-03-05 01:42 - 00000000 ____D C:\ProgramData\DatacardService
2015-10-24 13:57 - 2015-03-04 22:53 - 00000000 ____D C:\ProgramData\Adobe
2015-10-24 13:57 - 2015-03-04 22:07 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-10-24 13:57 - 2015-03-04 19:19 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2015-10-24 13:57 - 2015-03-04 19:16 - 00000000 ____D C:\ProgramData\DigiDriver
2015-10-24 13:57 - 2015-03-04 19:13 - 00000000 ____D C:\ProgramData\PACE
2015-10-24 13:57 - 2015-03-04 18:58 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2015-10-24 13:57 - 2015-03-04 18:20 - 00000000 ____D C:\ProgramData\SteelSeries
2015-10-24 13:57 - 2015-03-04 17:30 - 00000000 ____D C:\ProgramData\Intel.sav
2015-10-24 13:57 - 2015-03-04 17:29 - 00000000 ____D C:\ProgramData\Qualcomm
2015-10-24 13:57 - 2015-03-04 17:28 - 00000000 ____D C:\ProgramData\Downloaded Installations
2015-10-24 13:57 - 2015-03-04 17:16 - 00000000 ____D C:\ProgramData\Intel
2015-10-24 11:48 - 2015-03-04 18:30 - 00000430 _____ C:\Users\Public\Documents\dgc.txt.ccc
2015-10-18 19:23 - 2015-05-20 07:47 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-18 19:23 - 2015-03-04 18:52 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-18 19:23 - 2015-03-04 18:52 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-14 22:55 - 2015-03-04 17:29 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-14 15:52 - 2015-03-04 17:18 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-10-14 15:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2015-10-14 14:44 - 2015-03-17 09:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-10-14 14:44 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-10-14 14:42 - 2015-03-04 17:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-09 12:20 - 2015-06-24 12:33 - 00007889 _____ C:\Windows\BRRBCOM.INI
2015-10-05 18:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-10-03 22:30 - 2015-05-28 13:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-10-03 06:06 - 2015-08-02 18:31 - 12769408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 03573832 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 03154104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-10-03 06:06 - 2015-08-02 18:31 - 00033507 _____ C:\Windows\system32\nvinfo.pb

==================== Files in the root of some directories =======

2015-03-06 14:09 - 2015-09-27 11:56 - 0000016 _____ () C:\Users\Tomek\AppData\Roaming\msregsvv.dll
2015-10-18 22:58 - 2015-10-18 22:58 - 0000100 _____ () C:\Users\Tomek\AppData\Roaming\ScriptStudioLayout.ini
2015-10-18 22:58 - 2015-10-18 22:58 - 0000046 _____ () C:\Users\Tomek\AppData\Roaming\ScriptStudioOptions.ini
2015-10-24 12:45 - 2015-10-24 12:45 - 0007628 _____ () C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
2015-03-06 14:09 - 2015-09-27 11:56 - 0000016 _____ () C:\ProgramData\autobk.inc
2015-03-04 18:29 - 2015-03-04 18:29 - 0000094 _____ () C:\ProgramData\CameraRecorder.ini

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-21 23:02

==================== End of FRST.txt ============================